From 9da9a0ce142d1e8b1f5ffa5c8e7034859e903e6e Mon Sep 17 00:00:00 2001
From: Brian Lich <brianlic@microsoft.com>
Date: Fri, 11 Mar 2016 15:39:26 -0800
Subject: [PATCH] refreshing build (3/11/16)

---
 windows/deploy/TOC.md                         |   2 +-
 ...-windows-pe-using-configuration-manager.md |   6 +-
 ...gn-applications-using-roles-in-mdt-2013.md |   8 +-
 ...d-environment-for-windows-81-deployment.md |  12 +-
 .../change-history-for-deploy-windows-10.md   |   2 +-
 windows/deploy/common-issues-usmt-win8.md     |  28 +-
 ...migration-scenarios-usmt-win7-usmt-win8.md |  36 +-
 ...configure-mdt-2013-for-userexit-scripts.md |   6 +-
 .../configure-mdt-deployment-share-rules.md   |   6 +-
 .../configxml-file-usmt-win7-usmt-win8.md     |  68 +-
 ...icts-and-precedence-usmt-win7-usmt-win8.md |  48 +-
 ...0-boot-image-with-configuration-manager.md |   6 +-
 ...ence-with-configuration-manager-and-mdt.md |   8 +-
 .../create-a-windows-81-reference-image.md    |  16 +-
 ...custom-xml-examples-usmt-win7-usmt-win8.md |  16 +-
 ...mize-usmt-xml-files-usmt-win7-usmt-win8.md |  24 +-
 ...eploy-a-windows-81-image-using-mdt-2013.md |  28 +-
 ...1-with-the-microsoft-deployment-toolkit.md |   2 +-
 ...-go-in-your-organization-small-scenario.md |  14 +-
 ...igration-store-size-usmt-win7-usmt-win8.md |  28 +-
 .../deploy/exclude-files-and-settings-usmt.md |  42 +-
 ...-from-a-compressed-usmt-migration-store.md |  20 +-
 ...1-deployment-with-configuration-manager.md |  14 +-
 ...tly-asked-questions-usmt-win7-usmt-win8.md |  34 +-
 ...general-conventions-usmt-win7-usmt-win8.md |   8 +-
 ...th-the-user-state-migration-tool--usmt-.md |  12 +-
 .../hard-link-migration-store-usmt-win8.md    |  44 +-
 .../how-usmt-works-usmt-win7-usmt-win8.md     |   8 +-
 .../identify-users-usmt-win7-usmt-win8.md     |  26 +-
 .../deploy/include-files-and-settings-usmt.md |  24 +-
 ...ate-configuration-manager-with-mdt-2013.md |   6 +-
 .../introduction-to-vamtvamt-30-win8.md       |  16 +-
 .../loadstate-syntax-usmt-win7-usmt-win8.md   |  30 +-
 .../deploy/log-files-usmt-win7-usmt-win8.md   |  20 +-
 .../deploy/mdt-2013-lite-touch-components.md  |  26 +-
 .../deploy/migrate-application-settings.md    |  32 +-
 windows/deploy/migrate-user-accounts-usmt.md  |  12 +-
 .../deploy/migration-store-types-overview.md  |  12 +-
 ...1-deployment-with-configuration-manager.md |   2 +-
 windows/deploy/offline-migration-reference.md |  34 +-
 .../prepare-for-deployment-with-mdt-2013.md   |  16 +-
 ...f-windows-81-with-configuration-manager.md |  16 +-
 ...vironment-variables-usmt-win7-usmt-win8.md |   8 +-
 ...sh-a-windows-7-computer-with-windows-81.md |   8 +-
 ...-windows-81-using-configuration-manager.md |   8 +-
 ...s-7-computer-with-a-windows-81-computer.md |   6 +-
 ...-windows-81-using-configuration-manager.md |  14 +-
 .../deploy/reroute-files-and-settings-usmt.md |  12 +-
 windows/deploy/return-codes-usmt-win8.md      |  12 +-
 .../scanstate-syntax-usmt-win7-usmt-win8.md   |  36 +-
 ...enario-1-online-activation-vamt-30-win8.md |  38 +-
 ...cenario-2-proxy-activation-vamt-30-win8.md |   8 +-
 .../deploy/set-up-mdt-2013-for-bitlocker.md   |   8 +-
 windows/deploy/sideload-apps-in-windows-10.md |   4 +-
 .../understanding-migration-xml-files.md      |  56 +-
 ...ws-10-images-with-provisioning-packages.md |   8 +-
 ...with-system-center-configuraton-manager.md |  16 +-
 ...0-with-the-microsoft-deployment-toolkit.md |  14 +-
 ...use-orchestrator-runbooks-with-mdt-2013.md |  12 +-
 ...stage-windows-81-deployment-information.md |  10 +-
 .../deploy/use-web-services-in-mdt-2013.md    |  12 +-
 ...usmt-best-practices-usmt-win7-usmt-win8.md |   2 +-
 .../usmt-requirements-usmt-win7-usmt-win8.md  |  18 +-
 windows/deploy/usmtutils-syntax-usmt-win8.md  |  16 +-
 ...ndition-of-a-compressed-migration-store.md |  20 +-
 ...t-does-usmt-migrate-usmt-win7-usmt-win8.md |  18 +-
 .../deploy/windows-10-deployment-scenarios.md |   8 +-
 .../windows-deployment-scenarios-and-tools.md |  20 +-
 ...ml-elements-library-usmt-win7-usmt-win8.md | 298 ++++-----
 windows/keep-secure/TOC.md                    |   2 +-
 ...-credential-manager-as-a-trusted-caller.md |   6 +-
 .../access-this-computer-from-the-network.md  |   6 +-
 .../keep-secure/account-lockout-duration.md   |   4 +-
 .../keep-secure/account-lockout-threshold.md  |  12 +-
 .../accounts-administrator-account-status.md  |   6 +-
 .../accounts-block-microsoft-accounts.md      |   6 +-
 .../accounts-guest-account-status.md          |   4 +-
 .../accounts-rename-administrator-account.md  |   6 +-
 .../accounts-rename-guest-account.md          |   6 +-
 .../act-as-part-of-the-operating-system.md    |   6 +-
 .../keep-secure/add-workstations-to-domain.md |   6 +-
 .../adjust-memory-quotas-for-a-process.md     |   6 +-
 windows/keep-secure/administer-applocker.md   |   2 +-
 .../administer-security-policy-settings.md    |  82 +--
 ...advanced-security-audit-policy-settings.md |   2 +-
 .../advanced-security-auditing-faq.md         |  72 +--
 windows/keep-secure/allow-log-on-locally.md   |   6 +-
 ...-log-on-through-remote-desktop-services.md |   6 +-
 ...dit-the-access-of-global-system-objects.md |   6 +-
 ...the-use-of-backup-and-restore-privilege.md |   6 +-
 ...policy-subcategory-settings-to-override.md |   6 +-
 ...iately-if-unable-to-log-security-audits.md |   6 +-
 .../back-up-files-and-directories.md          |   6 +-
 ...up-thetpm-recovery-information-to-ad-ds.md |  38 +-
 .../keep-secure/bitlocker-basic-deployment.md |  18 +-
 ...locker-frequently-asked-questions--faq-.md | 162 ++---
 .../bitlocker-group-policy-settings.md        | 172 ++---
 ...er-how-to-deploy-on-windows-server-2012.md |   6 +-
 .../bitlocker-how-to-enable-network-unlock.md |  62 +-
 .../bitlocker-overview-roletech-overview.md   |   6 +-
 .../bitlocker-recovery-guide-plan.md          |  82 +--
 ...ve-encryption-tools-to-manage-bitlocker.md |  12 +-
 .../block-untrusted-fonts-in-an-enterprise.md |   6 +-
 .../keep-secure/bypass-traverse-checking.md   |   6 +-
 ...ange-history-for-keep-windows-10-secure.md |   2 +-
 windows/keep-secure/change-the-system-time.md |   6 +-
 windows/keep-secure/change-the-time-zone.md   |   6 +-
 .../change-the-tpm-owner-password.md          |  10 +-
 ...gure-an-applocker-policy-for-audit-only.md |   2 +-
 ...e-an-applocker-policy-for-enforce-rules.md |   2 +-
 ...figure-exceptions-for-an-applocker-rule.md |   2 +-
 windows/keep-secure/configure-s-mime.md       |  12 +-
 ...nfigure-windows-defender-for-windows-10.md |  16 +-
 windows/keep-secure/create-a-pagefile.md      |   6 +-
 .../create-a-rule-for-packaged-apps.md        |   2 +-
 ...-a-rule-that-uses-a-file-hash-condition.md |   2 +-
 ...reate-a-rule-that-uses-a-path-condition.md |   2 +-
 ...-a-rule-that-uses-a-publisher-condition.md |   2 +-
 windows/keep-secure/create-a-token-object.md  |   6 +-
 .../create-applocker-default-rules.md         |   2 +-
 windows/keep-secure/create-global-objects.md  |   6 +-
 .../create-permanent-shared-objects.md        |   6 +-
 windows/keep-secure/create-symbolic-links.md  |   6 +-
 ...g-a-device-guard-policy-for-signed-apps.md |   2 +-
 windows/keep-secure/credential-guard.md       |  16 +-
 ...iptor-definition-language--sddl--syntax.md |   6 +-
 ...iptor-definition-language--sddl--syntax.md |   6 +-
 windows/keep-secure/debug-programs.md         |   6 +-
 .../keep-secure/delete-an-applocker-rule.md   |   2 +-
 ...ccess-to-this-computer-from-the-network.md |   6 +-
 .../keep-secure/deny-log-on-as-a-batch-job.md |   6 +-
 .../keep-secure/deny-log-on-as-a-service.md   |   6 +-
 windows/keep-secure/deny-log-on-locally.md    |   6 +-
 ...-log-on-through-remote-desktop-services.md |   6 +-
 ...vice-guard-certification-and-compliance.md |   6 +-
 .../device-guard-deployment-guide.md          | 228 +++----
 ...s-allow-undock-without-having-to-log-on.md |   6 +-
 ...wed-to-format-and-eject-removable-media.md |   6 +-
 ...t-users-from-installing-printer-drivers.md |   6 +-
 ...m-access-to-locally-logged-on-user-only.md |   6 +-
 ...y-access-to-locally-logged-on-user-only.md |   6 +-
 ...llow-server-operators-to-schedule-tasks.md |   6 +-
 ...roller-ldap-server-signing-requirements.md |   6 +-
 ...refuse-machine-account-password-changes.md |   6 +-
 ...ypt-or-sign-secure-channel-data--always.md |   6 +-
 ...rypt-secure-channel-data--when-possible.md |   6 +-
 ...sign-secure-channel-data--when-possible.md |   6 +-
 ...isable-machine-account-password-changes.md |   6 +-
 ...er-maximum-machine-account-password-age.md |   6 +-
 ...ong--windows-2000-or-later--session-key.md |   6 +-
 .../keep-secure/edit-an-applocker-policy.md   |   8 +-
 windows/keep-secure/edit-applocker-rules.md   |   2 +-
 ...r-accounts-to-be-trusted-for-delegation.md |   6 +-
 .../enable-the-dll-rule-collection.md         |   2 +-
 .../keep-secure/enforce-password-history.md   |   6 +-
 .../enforce-user-logon-restrictions.md        |   6 +-
 .../force-shutdown-from-a-remote-system.md    |   6 +-
 .../keep-secure/generate-security-audits.md   |   6 +-
 ...ed-with-windows-defender-for-windows-10.md |   6 +-
 ...o-run-on-device-guard-protected-devices.md |  12 +-
 ...w-to-configure-security-policy-settings.md |  14 +-
 ...personate-a-client-after-authentication.md |   6 +-
 ...microsoft-passport-in-your-organization.md |  14 +-
 .../increase-a-process-working-set.md         |   6 +-
 .../increase-scheduling-priority.md           |   6 +-
 windows/keep-secure/index.md                  |   2 +-
 ...lize-and-configure-ownership-of-the-tpm.md |  34 +-
 ...gital-certificates-on-windows-10-mobile.md |   8 +-
 ...-information-when-the-session-is-locked.md |   6 +-
 ...ive-logon-do-not-display-last-user-name.md |   6 +-
 ...ctive-logon-do-not-require-ctrl-alt-del.md |   6 +-
 ...logon-machine-account-lockout-threshold.md |   8 +-
 ...eractive-logon-machine-inactivity-limit.md |   6 +-
 ...age-text-for-users-attempting-to-log-on.md |   6 +-
 ...ge-title-for-users-attempting-to-log-on.md |   6 +-
 ...case-domain-controller-is-not-available.md |   6 +-
 ...er-to-change-password-before-expiration.md |   6 +-
 ...er-authentication-to-unlock-workstation.md |   6 +-
 .../interactive-logon-require-smart-card.md   |   6 +-
 ...ctive-logon-smart-card-removal-behavior.md |   6 +-
 .../load-and-unload-device-drivers.md         |   6 +-
 windows/keep-secure/lock-pages-in-memory.md   |   6 +-
 windows/keep-secure/log-on-as-a-batch-job.md  |   6 +-
 windows/keep-secure/log-on-as-a-service.md    |   6 +-
 .../maintain-applocker-policies.md            |   8 +-
 .../manage-auditing-and-security-log.md       |   6 +-
 ...y-verification-using-microsoft-passport.md |  12 +-
 .../manage-packaged-apps-with-applocker.md    |   2 +-
 windows/keep-secure/manage-tpm-commands.md    |  10 +-
 windows/keep-secure/manage-tpm-lockout.md     |  14 +-
 .../maximum-lifetime-for-service-ticket.md    |   6 +-
 ...aximum-lifetime-for-user-ticket-renewal.md |   4 +-
 .../maximum-lifetime-for-user-ticket.md       |   6 +-
 windows/keep-secure/maximum-password-age.md   |   6 +-
 ...ance-for-computer-clock-synchronization.md |   6 +-
 ...t-digitally-sign-communications--always.md |   6 +-
 ...y-sign-communications--if-server-agrees.md |   6 +-
 ...ted-password-to-third-party-smb-servers.md |   6 +-
 ...time-required-before-suspending-session.md |   6 +-
 ...pt-s4u2self-to-obtain-claim-information.md |   6 +-
 ...r-digitally-sign-communications--always.md |   6 +-
 ...y-sign-communications--if-client-agrees.md |   6 +-
 ...connect-clients-when-logon-hours-expire.md |   6 +-
 ...server-spn-target-name-validation-level.md |   6 +-
 ...oft-passport-errors-during-pin-creation.md |  18 +-
 .../keep-secure/microsoft-passport-guide.md   |  22 +-
 windows/keep-secure/minimum-password-age.md   |   6 +-
 .../keep-secure/minimum-password-length.md    |   6 +-
 windows/keep-secure/modify-an-object-label.md |   6 +-
 .../modify-firmware-environment-values.md     |   6 +-
 ...onitor-application-usage-with-applocker.md |  10 +-
 ...ess-allow-anonymous-sidname-translation.md |   6 +-
 ...-enumeration-of-sam-accounts-and-shares.md |   6 +-
 ...w-anonymous-enumeration-of-sam-accounts.md |   6 +-
 ...-credentials-for-network-authentication.md |   4 +-
 ...ne-permissions-apply-to-anonymous-users.md |   6 +-
 ...-pipes-that-can-be-accessed-anonymously.md |   6 +-
 ...-accessible-registry-paths-and-subpaths.md |   6 +-
 ...cess-remotely-accessible-registry-paths.md |   6 +-
 ...nymous-access-to-named-pipes-and-shares.md |   6 +-
 ...shares-that-can-be-accessed-anonymously.md |   6 +-
 ...g-and-security-model-for-local-accounts.md |   6 +-
 ...ystem-to-use-computer-identity-for-ntlm.md |   6 +-
 ...allow-localsystem-null-session-fallback.md |   4 +-
 ...-this-computer-to-use-online-identities.md |   4 +-
 ...e-encryption-types-allowed-for-kerberos.md |   4 +-
 ...ager-hash-value-on-next-password-change.md |   6 +-
 ...ty-force-logoff-when-logon-hours-expire.md |   6 +-
 ...curity-lan-manager-authentication-level.md |   6 +-
 ...curity-ldap-client-signing-requirements.md |   6 +-
 ...sp-based--including-secure-rpc--clients.md |   6 +-
 ...sp-based--including-secure-rpc--servers.md |   6 +-
 ...rver-exceptions-for-ntlm-authentication.md |   6 +-
 ...lm-add-server-exceptions-in-this-domain.md |   6 +-
 ...strict-ntlm-audit-incoming-ntlm-traffic.md |   6 +-
 ...udit-ntlm-authentication-in-this-domain.md |   6 +-
 ...ity-restrict-ntlm-incoming-ntlm-traffic.md |   8 +-
 ...ntlm-ntlm-authentication-in-this-domain.md |   6 +-
 ...outgoing-ntlm-traffic-to-remote-servers.md |   8 +-
 ...sword-must-meet-complexity-requirements.md |   4 +-
 .../perform-volume-maintenance-tasks.md       |   6 +-
 ...loying-advanced-security-audit-policies.md |  24 +-
 ...repare-people-to-use-microsoft-passport.md |  12 +-
 ...ion-for-bitlocker-planning-and-policies.md |  36 +-
 windows/keep-secure/profile-single-process.md |   6 +-
 .../keep-secure/profile-system-performance.md |   6 +-
 ...-the-health-of-windows-10-based-devices.md |  32 +-
 ...nd-storage-area-networks-with-bitlocker.md |   2 +-
 ...le-allow-automatic-administrative-logon.md |   6 +-
 ...py-and-access-to-all-drives-and-folders.md |   6 +-
 .../remove-computer-from-docking-station.md   |   6 +-
 .../replace-a-process-level-token.md          |   6 +-
 ...ements-for-deploying-applocker-policies.md |  16 +-
 .../reset-account-lockout-counter-after.md    |   4 +-
 .../restore-files-and-directories.md          |   6 +-
 ...the-automatically-generate-rules-wizard.md |   2 +-
 ...-tpm-information-from-windows-8-clients.md |   2 +-
 .../security-auditing-overview-glbl.md        |   2 +-
 .../keep-secure/security-policy-settings.md   |  14 +-
 windows/keep-secure/shut-down-the-system.md   |   6 +-
 ...o-be-shut-down-without-having-to-log-on.md |   6 +-
 .../shutdown-clear-virtual-memory-pagefile.md |   6 +-
 ...e-passwords-using-reversible-encryption.md |   4 +-
 .../switch-pcr-banks-on-tpm-2-0-devices.md    |   2 +-
 .../synchronize-directory-service-data.md     |   6 +-
 ...on-for-user-keys-stored-on-the-computer.md |   6 +-
 ...thms-for-encryption-hashing-and-signing.md |   6 +-
 ...nsensitivity-for-non-windows-subsystems.md |   6 +-
 ...ernal-system-objects--eg-symbolic-links.md |   6 +-
 .../system-settings-optional-subsystems.md    |   6 +-
 ...ables-for-software-restriction-policies.md |   6 +-
 ...ake-ownership-of-files-or-other-objects.md |   6 +-
 .../keep-secure/tpm-fundamentals-windows-8.md |  52 +-
 ...leshoot-windows-defender-for-windows-10.md |   2 +-
 .../trusted-platform-module--tpm-2-0--.md     |  16 +-
 ...m-module-services-group-policy-settings.md |  60 +-
 ...ted-platform-module-technology-overview.md |  12 +-
 ...stand-applocker-policy-design-decisions.md |   4 +-
 ...rding-to-assist-in-instrusion-detection.md |  32 +-
 ...-for-the-built-in-administrator-account.md |   6 +-
 ...vation-without-using-the-secure-desktop.md |   6 +-
 ...r-administrators-in-admin-approval-mode.md |   6 +-
 ...the-elevation-prompt-for-standard-users.md |   6 +-
 ...-installations-and-prompt-for-elevation.md |   6 +-
 ...ecutables-that-are-signed-and-validated.md |   6 +-
 ...-that-are-installed-in-secure-locations.md |   6 +-
 .../user-account-control-overview.md          |   6 +-
 ...l-administrators-in-admin-approval-mode.md |   6 +-
 ...re-desktop-when-prompting-for-elevation.md |   6 +-
 ...ry-write-failures-to-per-user-locations.md |   6 +-
 windows/keep-secure/vpn-profile-options.md    |  10 +-
 .../why-a-pin-is-better-than-a-password.md    |  14 +-
 .../windows-10-mobile-security-guide.md       |  54 +-
 .../keep-secure/windows-10-security-guide.md  |  30 +-
 ...dows-hello-biometrics-in-the-enterprise.md |  12 +-
 .../working-with-applocker-rules.md           |  16 +-
 windows/manage/TOC.md                         |   5 +-
 ...d-unsigned-app-to-code-integrity-policy.md |  16 +-
 ...gemement-for-windows-store-for-business.md |  10 +-
 .../apps-in-the-windows-store-for-business.md |   6 +-
 ...istory-for-manage-and-update-windows-10.md |   4 +-
 ...changes-to-start-policies-in-windows-10.md |   8 +-
 .../manage/configure-devices-without-mdm.md   |  10 +-
 ...onfigure-telemetry-in-your-organization.md | 314 +++++++++
 .../customize-and-export-start-layout.md      |  22 +-
 ...-10-start-screens-by-using-group-policy.md |  22 +-
 ...by-using-mobile-device-management--mdm-.md |   4 +-
 ...-by-using-provisioning-packages-and-icd.md |  10 +-
 .../distribute-apps-with-a-management-tool.md |   2 +-
 windows/manage/distribute-offline-apps.md     |   2 +-
 ...configuration-service-providers--csps--.md |  14 +-
 windows/manage/images/aadj3.jpg               | Bin 44481 -> 44553 bytes
 windows/manage/images/aadjbrowser.jpg         | Bin 0 -> 67277 bytes
 windows/manage/images/aadjonedrive.jpg        | Bin 0 -> 84125 bytes
 windows/manage/images/aadjppt.jpg             | Bin 0 -> 43157 bytes
 windows/manage/images/aadjword.jpg            | Bin 0 -> 62295 bytes
 windows/manage/images/settings-table.png      | Bin 0 -> 14426 bytes
 .../introduction-to-windows-10-servicing.md   |  28 +-
 ...ows-10-mobile-to-azure-active-directory.md |  52 +-
 .../lock-down-windows-10-to-specific-apps.md  |   8 +-
 windows/manage/lock-down-windows-10.md        |  15 +-
 windows/manage/lockdown-xml.md                |  18 +-
 .../manage/manage-access-to-private-store.md  |   2 +-
 windows/manage/manage-corporate-devices.md    |  10 +-
 .../manage-cortana-in-your-enterprise.md      |  19 +-
 ...-privacy-for-windows-10-in-your-company.md | 594 ++++--------------
 .../manage-wi-fi-sense-in-your-company.md     |  10 +-
 ...quisites-for-windows-store-for-business.md |   2 +-
 .../product-ids-in-windows-10-mobile.md       |   6 +-
 .../reset-a-windows-10-mobile-device.md       |   6 +-
 ...osk-for-windows-10-for-desktop-editions.md |  24 +-
 ...kiosk-for-windows-10-for-mobile-edition.md |   6 +-
 .../sign-up-for-windows-store-for-business.md |  10 +-
 ...-employees-from-using-the-windows-store.md |  10 +-
 windows/manage/windows-10-mobile-and-mdm.md   |  86 +--
 .../working-with-line-of-business-apps.md     |   8 +-
 windows/plan/TOC.md                           |   2 +-
 windows/plan/application-dialog-box.md        |   4 +-
 ...tory-for-plan-for-windows-10-deployment.md |   2 +-
 windows/plan/chromebook-migration-guide.md    | 118 ++--
 windows/plan/computer-dialog-box.md           |   4 +-
 ...lity-fix-in-compatibility-administrator.md |   8 +-
 ...ity-mode-in-compatibility-administrator.md |   8 +-
 ...-message-in-compatibility-administrator.md |  10 +-
 ...e-environment-for-compatibility-testing.md |  10 +-
 windows/plan/customizing-your-report-views.md |   2 +-
 ...oyment-considerations-for-windows-to-go.md |  32 +-
 windows/plan/device-dialog-box.md             |   4 +-
 ...ying-computers-for-inventory-collection.md |  32 +-
 .../integration-with-management-solutions-.md |  14 +-
 .../operatingsystem---application-report.md   |   2 +-
 .../plan/operatingsystem---computer-report.md |   2 +-
 .../plan/operatingsystem---device-report.md   |   2 +-
 ...are-your-organization-for-windows-to-go.md |  18 +-
 ...ery-tool-in-compatibility-administrator.md |  12 +-
 ...ection-considerations-for-windows-to-go.md |  10 +-
 .../settings-dialog-box---preferences-tab.md  |   6 +-
 .../settings-dialog-box---settings-tab.md     |  12 +-
 windows/plan/setup-and-deployment.md          |  20 +-
 .../troubleshooting-act-database-issues.md    |  10 +-
 ...shooting-the-act-log-processing-service.md |  12 +-
 windows/plan/websiteurl-dialog-box.md         |   2 +-
 windows/plan/windows-10-compatibility.md      |   4 +-
 .../windows-10-deployment-considerations.md   |   8 +-
 .../windows-10-infrastructure-requirements.md |   8 +-
 windows/plan/windows-10-servicing-model.md    |  14 +-
 ...windows-to-go-feature-overview-scenario.md |  16 +-
 ...indows-to-go-frequently-asked-questions.md | 166 ++---
 windows/plan/windows-update-for-business.md   |  12 +-
 windows/whats-new/TOC.md                      |   2 +-
 windows/whats-new/bitlocker.md                |   4 +-
 .../business-store-for-windows-10.md          |   6 +-
 ...ge-history-for-what-s-new-in-windows-10.md |   2 +-
 windows/whats-new/credential-guard.md         |   2 +-
 windows/whats-new/device-guard-overview.md    |   8 +-
 .../enterprise-data-protection-overview.md    |   8 +-
 windows/whats-new/index.md                    |   2 +-
 ...ures-from-windows-embedded-industry-8-1.md |   2 +-
 windows/whats-new/security-auditing.md        |  38 +-
 windows/whats-new/security.md                 |  40 +-
 windows/whats-new/trusted-platform-module.md  |   6 +-
 windows/whats-new/windows-spotlight.md        |   8 +-
 382 files changed, 3100 insertions(+), 3085 deletions(-)
 create mode 100644 windows/manage/configure-telemetry-in-your-organization.md
 create mode 100644 windows/manage/images/aadjbrowser.jpg
 create mode 100644 windows/manage/images/aadjonedrive.jpg
 create mode 100644 windows/manage/images/aadjppt.jpg
 create mode 100644 windows/manage/images/aadjword.jpg
 create mode 100644 windows/manage/images/settings-table.png

diff --git a/windows/deploy/TOC.md b/windows/deploy/TOC.md
index 4ffbb4e95d..2c52ae43a3 100644
--- a/windows/deploy/TOC.md
+++ b/windows/deploy/TOC.md
@@ -1,4 +1,4 @@
-# [Deploy Windows 10](index.md)
+# [Deploy Windows 10]
 ## [Change history for Deploy Windows 10](change-history-for-deploy-windows-10.md)
 ## [Windows 10 deployment scenarios](windows-10-deployment-scenarios.md)
 ## [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md)
diff --git a/windows/deploy/add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md b/windows/deploy/add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md
index 90c2dabd0f..1fc82ad701 100644
--- a/windows/deploy/add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md
+++ b/windows/deploy/add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md
@@ -20,13 +20,13 @@ author: CFaw
 
 -   [Add drivers for Windows PE](#sec01)
 -   [Add drivers for Windows 10](#sec02)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to configure the Windows Preinstallation Environment (Windows PE) to include the network drivers required to connect to the deployment share and the storage drivers required to see the local storage on machines. Even though the Windows PE boot image and the Windows 10 operating system contain many out-of-the-box drivers, it is likely you will have to add new or updated drivers to support all your hardware. In this section, you import drivers for both Windows PE and the full Windows 10 operating system.
 
 For the purposes of this topic, we will use CM01, a machine running Windows Server 2012 R2 Standard that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md).
 
-## Add drivers for Windows PE
+## <a href="" id="sec01"></a>Add drivers for Windows PE
 
 
 This section will show you how to import some network and storage drivers for Windows PE. This section assumes you have downloaded some drivers to the E:\\Sources\\OSD\\DriverSources\\WinPE x64 folder on CM01.
@@ -50,7 +50,7 @@ The Updating Boot Image part of the wizard will appear to hang when displaying D
 
  
 
-## Add drivers for Windows 10
+## <a href="" id="sec02"></a>Add drivers for Windows 10
 
 
 This section illustrates how to add drivers for Windows 10 through an example in which you want to import Windows 10 drivers for the HP EliteBook 8560w model. For the purposes of this section, we assume that you have downloaded the Windows 10 drivers for the HP EliteBook 8560w model and copied them to the E:\\Sources\\OSD\\DriverSources\\Windows 10 x64\\HP EliteBook 8560w folder on CM01.
diff --git a/windows/deploy/assign-applications-using-roles-in-mdt-2013.md b/windows/deploy/assign-applications-using-roles-in-mdt-2013.md
index 67bf7b4350..1d6b025dbd 100644
--- a/windows/deploy/assign-applications-using-roles-in-mdt-2013.md
+++ b/windows/deploy/assign-applications-using-roles-in-mdt-2013.md
@@ -17,11 +17,11 @@ author: CFaw
 -   [Create and assign a role entry in the database](#sec01)
 -   [Associate the role with a computer in the database](#sec02)
 -   [Verify database access in the MDT simulation environment](#sec03)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will show you how to add applications to a role in the MDT database and then assign that role to a computer. For the purposes of this topic, the application we are adding is Adobe Reader XI. In addition to using computer-specific entries in the database, you can use roles in MDT to group settings together.
 
-## Create and assign a role entry in the database
+## <a href="" id="sec01"></a>Create and assign a role entry in the database
 
 
 1.  On MDT01, using Deployment Workbench, in the MDT Production deployment share, expand **Advanced Configuration** and then expand **Database**.
@@ -38,7 +38,7 @@ This topic will show you how to add applications to a role in the MDT database a
 
 Figure 12. The Standard PC role with the application added
 
-## Associate the role with a computer in the database
+## <a href="" id="sec02"></a>Associate the role with a computer in the database
 
 
 After creating the role, you can associate it with one or more computer entries.
@@ -53,7 +53,7 @@ After creating the role, you can associate it with one or more computer entries.
 
 Figure 13. The Standard PC role added to PC00075 (having ID 1 in the database).
 
-## Verify database access in the MDT simulation environment
+## <a href="" id="sec03"></a>Verify database access in the MDT simulation environment
 
 
 When the database is populated, you can use the MDT simulation environment to simulate a deployment. The applications are not installed, but you can see which applications would be installed if you did a full deployment of the computer.
diff --git a/windows/deploy/build-a-distributed-environment-for-windows-81-deployment.md b/windows/deploy/build-a-distributed-environment-for-windows-81-deployment.md
index 7812c3a7ab..e7404c2cc9 100644
--- a/windows/deploy/build-a-distributed-environment-for-windows-81-deployment.md
+++ b/windows/deploy/build-a-distributed-environment-for-windows-81-deployment.md
@@ -23,7 +23,7 @@ author: CFaw
 -   [Replicate the content](#sec03)
 -   [Configure Windows Deployment Services (WDS) in a remote site](#sec04)
 -   [Deploy the Windows 10 client to the remote site](#sec05)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. If you work in a distributed environment, replicating the deployment shares is an important part of the deployment solution. With images reaching 5 GB in size or more, you can't deploy machines in a remote office over the wire. You need to replicate the content, so that the clients can do local deployments.
 
@@ -33,7 +33,7 @@ We will use four machines for this topic: DC01, MDT01, MDT02, and PC0006. DC01 i
 
 Figure 1. The machines used in this topic.
 
-## Replicate deployment shares
+## <a href="" id="sec01"></a>Replicate deployment shares
 
 
 Replicating the content between MDT01 (New York) and MDT02 (Stockholm) can be done in a number of different ways. The most common content replication solutions with Microsoft Deployment Toolkit (MDT) 2013 use either the Linked Deployment Shares (LDS) feature or Distributed File System Replication (DFS-R). Some organizations have used a simple robocopy script for replication of the content.
@@ -51,7 +51,7 @@ LDS is a built-in feature in MDT for replicating content. However, LDS works bes
 
 DFS-R is not only very fast and reliable, but it also offers central monitoring, bandwidth control, and a great delta replication engine. DFS-R will work equally well whether you have 2 sites or 90. When using DFS-R for MDT, we recommend running your deployment servers on Windows Server 2008 R2 or higher. From that version on, you can configure the replication target(s) as read-only, which is exactly what you want for MDT. This way, you can have your master deployment share centralized and replicate out changes as they happen. DFS-R will quickly pick up changes at the central deployment share in MDT01 and replicate the delta changes to MDT02.
 
-## Set up Distributed File System Replication (DFS-R) for replication
+## <a href="" id="sec02"></a>Set up Distributed File System Replication (DFS-R) for replication
 
 
 Setting up DFS-R for replication is a quick and straightforward process. You prepare the deployment servers and then create a replication group. To complete the setup, you configure some replication settings.
@@ -151,7 +151,7 @@ When you have multiple deployment servers sharing the same content, you need to
 
 6.  Browse and select the **E:\\MDTProduction\\Boot\\LiteTouchPE\_x64.wim** boot image, and then complete Replace Boot Image Wizard using the default settings.
 
-## Replicate the content
+## <a href="" id="sec03"></a>Replicate the content
 
 
 Once the MDT01 and MDT02 servers are prepared, you are ready to configure the actual replication.
@@ -247,7 +247,7 @@ It will take some time for the replication configuration to be picked up by the
 
 Figure 9. The DFS Replication Health Report.
 
-## Configure Windows Deployment Services (WDS) in a remote site
+## <a href="" id="sec04"></a>Configure Windows Deployment Services (WDS) in a remote site
 
 
 Like you did in the previous topic for MDT01, you need to add the MDT Production Lite Touch x64 Boot image to Windows Deployment Services on MDT02. For the following steps, we assume that WDS has already been installed on MDT02.
@@ -256,7 +256,7 @@ Like you did in the previous topic for MDT01, you need to add the MDT Production
 
 2.  Browse to the E:\\MDTProduction\\Boot\\LiteTouchPE\_x64.wim file and add the image with the default settings.
 
-## Deploy the Windows 10 client to the remote site
+## <a href="" id="sec05"></a>Deploy the Windows 10 client to the remote site
 
 
 Now you should have a solution ready for deploying the Windows 10 client to the remote site, Stockholm, connecting to the MDT Production deployment share replica on MDT02.
diff --git a/windows/deploy/change-history-for-deploy-windows-10.md b/windows/deploy/change-history-for-deploy-windows-10.md
index ac163d899d..b17f45b11c 100644
--- a/windows/deploy/change-history-for-deploy-windows-10.md
+++ b/windows/deploy/change-history-for-deploy-windows-10.md
@@ -11,7 +11,7 @@ author: CFaw
 # Change history for Deploy Windows 10
 
 
-This topic lists new and updated topics in the [Deploy Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
+This topic lists new and updated topics in the [Deploy Windows 10] documentation for [Windows 10 and Windows 10 Mobile](../index.md).
 
 ## December 2015
 
diff --git a/windows/deploy/common-issues-usmt-win8.md b/windows/deploy/common-issues-usmt-win8.md
index 02f0b32831..a084274da5 100644
--- a/windows/deploy/common-issues-usmt-win8.md
+++ b/windows/deploy/common-issues-usmt-win8.md
@@ -16,17 +16,17 @@ The following sections discuss common issues that you might see when you run the
 ## In This Topic
 
 
-[User Account Problems](#User)
+[User Account Problems](#user)
 
-[Command-line Problems](#Command)
+[Command-line Problems](#command)
 
-[XML File Problems](#XML)
+[XML File Problems](#xml)
 
-[Migration Problems](#Migration)
+[Migration Problems](#migration)
 
-[Offline Migration Problems](#BKMK_Offline)
+[Offline Migration Problems](#bkmk-offline)
 
-[Hard Link Migration Problems](#BKMK_Hardlink)
+[Hard Link Migration Problems](#bkmk-hardlink)
 
 ## General Guidelines for Identifying Migration Problems
 
@@ -59,7 +59,7 @@ When you encounter a problem or error message during migration, you can use the
 
      
 
-## User Account Problems
+## <a href="" id="user"></a>User Account Problems
 
 
 The following sections describe common user account problems. Expand the section to see recommended solutions.
@@ -133,7 +133,7 @@ loadstate /i:migapp.xml /i:migdocs.xml \\server\share\migration\mystore
 /progress:prog.log /l:load.log /mu:fareast\user1:farwest\user1
 ```
 
-## Command-line Problems
+## <a href="" id="command"></a>Command-line Problems
 
 
 The following sections describe common command-line problems. Expand the section to see recommended solutions.
@@ -150,7 +150,7 @@ The following sections describe common command-line problems. Expand the section
 
 **Resolution:** To fix this issue in this scenario, specify the **/l:scan.log** or **/l:load.log** option.
 
-## XML File Problems
+## <a href="" id="xml"></a>XML File Problems
 
 
 The following sections describe common XML file problems. Expand the section to see recommended solutions.
@@ -167,13 +167,13 @@ The following sections describe common XML file problems. Expand the section to
 
 **Resolution:** You can load the XML schema (MigXML.xsd), included with USMT, into your XML authoring tool. For examples, see the [Visual Studio Development Center](http://go.microsoft.com/fwlink/p/?LinkId=74513). Then, load your .xml file in the authoring tool to see if there is a syntax error. In addition, see [USMT XML Reference](usmt-xml-reference-usmt-win7-usmt-win8.md) for more information about using the XML elements.
 
-### I am using a MigXML helper function, but the migration isn’t working the way I expected it to.  How do I troubleshoot this issue?
+### <a href="" id="i-am-using-a-migxml-helper-function--but-the-migration-isn-t-working-the-way-i-expected-it-to---how-do-i-troubleshoot-this-issue-"></a>I am using a MigXML helper function, but the migration isn’t working the way I expected it to.  How do I troubleshoot this issue?
 
 **Cause:** Typically, this issue is caused by incorrect syntax used in a helper function. You receive a Success return code, but the files you wanted to migrate did not get collected or applied, or weren’t collected or applied in the way you expected.
 
 **Resolution:** You should search the ScanState or LoadState log for either the component name which contains the MigXML helper function, or the MigXML helper function title, so that you can locate the related warning in the log file.
 
-## Migration Problems
+## <a href="" id="migration"></a>Migration Problems
 
 
 The following sections describe common migration problems. Expand the section to see recommended solutions.
@@ -216,13 +216,13 @@ There are three typical causes for this issue.
 
 **Resolution:** Run the ScanState and LoadState tools from within an account with administrative credentials.
 
-### I included MigApp.xml in the migration, but some PST files aren’t migrating.
+### <a href="" id="i-included-migapp-xml-in-the-migration--but-some-pst-files-aren-t-migrating-"></a>I included MigApp.xml in the migration, but some PST files aren’t migrating.
 
 **Cause:** The MigApp.xml file migrates only the PST files that are linked to Outlook profiles.
 
 **Resolution:** To migrate PST files that are not linked to Outlook profiles, you must create a separate migration rule to capture these files.
 
-## Offline Migration Problems
+## <a href="" id="bkmk-offline"></a>Offline Migration Problems
 
 
 The following sections describe common offline migration problems. Expand the section to see recommended solutions.
@@ -263,7 +263,7 @@ You can also use patterns for SIDs that identify generic users or groups. For ex
 reg.exe unload hklm\$dest$software
 ```
 
-## Hard-Link Migration Problems
+## <a href="" id="bkmk-hardlink"></a>Hard-Link Migration Problems
 
 
 The following sections describe common hard-link migration problems. Expand the section to see recommended solutions.
diff --git a/windows/deploy/common-migration-scenarios-usmt-win7-usmt-win8.md b/windows/deploy/common-migration-scenarios-usmt-win7-usmt-win8.md
index 2a1ffc1db1..117f0e492c 100644
--- a/windows/deploy/common-migration-scenarios-usmt-win7-usmt-win8.md
+++ b/windows/deploy/common-migration-scenarios-usmt-win7-usmt-win8.md
@@ -18,25 +18,25 @@ One common scenario when only the operating system, and not the hardware, is bei
 ## In This Topic
 
 
-[PC Refresh](#BKMK_PCRefresh)
+[PC Refresh](#bkmk-pcrefresh)
 
-[Scenario One: PC-refresh offline using Windows PE and a hard-link migration store](#BKMK_OnePCRefresh)
+[Scenario One: PC-refresh offline using Windows PE and a hard-link migration store](#bkmk-onepcrefresh)
 
-[Scenario Two: PC-refresh using a compressed migration store](#BKMK_TwoPCRefresh)
+[Scenario Two: PC-refresh using a compressed migration store](#bkmk-twopcrefresh)
 
-[Scenario Three: PC-refresh using a hard-link migration store](#BKMK_ThreePCRefresh)
+[Scenario Three: PC-refresh using a hard-link migration store](#bkmk-threepcrefresh)
 
-[Scenario Four: PC-refresh using Windows.old folder and a hard-link migration store](#BKMK_FourPCRefresh)
+[Scenario Four: PC-refresh using Windows.old folder and a hard-link migration store](#bkmk-fourpcrefresh)
 
-[PC Replacement](#BKMK_PCReplace)
+[PC Replacement](#bkmk-pcreplace)
 
-[Scenario One: Offline migration using Windows PE and an external migration store](#BKMK_OnePCReplace)
+[Scenario One: Offline migration using Windows PE and an external migration store](#bkmk-onepcreplace)
 
-[Scenario Two: Manual network migration](#BKMK_TwoPCReplace)
+[Scenario Two: Manual network migration](#bkmk-twopcreplace)
 
-[Scenario Three: Managed network migration](#BKMK_ThreePCReplace)
+[Scenario Three: Managed network migration](#bkmk-threepcreplace)
 
-## PC-Refresh
+## <a href="" id="bkmk-pcrefresh"></a>PC-Refresh
 
 
 The following diagram shows a PC-refresh migration, also known as a computer refresh migration. First, the administrator migrates the user state from a source computer to an intermediate store. After installing the operating system, the administrator migrates the user state back to the source computer.
@@ -47,7 +47,7 @@ The following diagram shows a PC-refresh migration, also known as a computer ref
 
  
 
-### Scenario One: PC-refresh offline using Windows PE and a hard-link migration store
+### <a href="" id="bkmk-onepcrefresh"></a>Scenario One: PC-refresh offline using Windows PE and a hard-link migration store
 
 A company has just received funds to update the operating system on all of its computers in the accounting department to Windows 10. Each employee will keep the same computer, but the operating system on each computer will be updated. In this scenario, the update is being handled completely offline, without a network connection. An administrator uses Windows Preinstallation Environment (WinPE) and a hard-link migration store to save each user state to their respective computer.
 
@@ -57,7 +57,7 @@ A company has just received funds to update the operating system on all of its c
 
 3.  The administrator runs the LoadState command-line tool on each computer. LoadState restores each user state back to each computer.
 
-### Scenario Two: PC-refresh using a compressed migration store
+### <a href="" id="bkmk-twopcrefresh"></a>Scenario Two: PC-refresh using a compressed migration store
 
 A company has just received funds to update the operating system on all of its computers to Windows 10. Each employee will keep the same computer, but the operating system on each computer will be updated. In this scenario, an administrator uses a compressed migration store to save the user states to a server.
 
@@ -67,7 +67,7 @@ A company has just received funds to update the operating system on all of its c
 
 3.  The administrator runs the LoadState command-line tool on each source computer, and LoadState restores each user state back to the computer.
 
-### Scenario Three: PC-refresh using a hard-link migration store
+### <a href="" id="bkmk-threepcrefresh"></a>Scenario Three: PC-refresh using a hard-link migration store
 
 A company has just received funds to update the operating system on all of its computers to Windows 10. Each employee will keep the same computer, but the operating system on each computer will be updated. In this scenario, an administrator uses a hard-link migration store to save each user state to their respective computer.
 
@@ -77,7 +77,7 @@ A company has just received funds to update the operating system on all of its c
 
 3.  The administrator runs the LoadState command-line tool on each computer. LoadState restores each user state back on each computer.
 
-### Scenario Four: PC-refresh using Windows.old folder and a hard-link migration store
+### <a href="" id="bkmk-fourpcrefresh"></a>Scenario Four: PC-refresh using Windows.old folder and a hard-link migration store
 
 A company has decided to update the operating system on all of its computers to Windows 10. Each employee will keep the same computer, but the operating system on each computer will be updated. In this scenario, an administrator uses Windows.old and a hard-link migration store to save each user state to their respective computer.
 
@@ -87,7 +87,7 @@ A company has decided to update the operating system on all of its computers to
 
 3.  The administrator runs the ScanState and LoadState command-line tools successively on each computer while specifying the **/hardlink /nocompress** command-line options.
 
-## PC-Replacement
+## <a href="" id="bkmk-pcreplace"></a>PC-Replacement
 
 
 The following diagram shows a PC-replacement migration. First, the administrator migrates the user state from the source computer to an intermediate store. After installing the operating system on the destination computer, the administrator migrates the user state from the store to the destination computer.
@@ -98,7 +98,7 @@ The following diagram shows a PC-replacement migration. First, the administrator
 
  
 
-### Scenario One: Offline migration using WinPE and an external migration store
+### <a href="" id="bkmk-onepcreplace"></a>Scenario One: Offline migration using WinPE and an external migration store
 
 A company is allocating 20 new computers to users in the accounting department. The users each have a source computer with their files and settings. In this scenario, migration is being handled completely offline, without a network connection.
 
@@ -108,7 +108,7 @@ A company is allocating 20 new computers to users in the accounting department.
 
 3.  On each of the new computers, the administrator runs the LoadState tool, restoring each user state from the migration store to one of the new computers.
 
-### Scenario Two: Manual network migration
+### <a href="" id="bkmk-twopcreplace"></a>Scenario Two: Manual network migration
 
 A company receives 50 new laptops for their managers and needs to reallocate 50 older laptops to new employees. In this scenario, an administrator runs the ScanState tool from the cmd prompt on each computer to collect the user states and save them to a server in a compressed migration store.
 
@@ -120,7 +120,7 @@ A company receives 50 new laptops for their managers and needs to reallocate 50
 
 4.  On the old computers, the administrator installs the company’s SOE, which includes Windows 10, Microsoft Office, and other company applications. The old computers are now ready for the new employees to use.
 
-### Scenario Three: Managed network migration
+### <a href="" id="bkmk-threepcreplace"></a>Scenario Three: Managed network migration
 
 A company is allocating 20 new computers to users in the accounting department. The users each have a source computer that contains their files and settings. An administrator uses a management technology such as a logon script or a batch file to run ScanState on each source computer to collect the user states and save them to a server in a compressed migration store.
 
diff --git a/windows/deploy/configure-mdt-2013-for-userexit-scripts.md b/windows/deploy/configure-mdt-2013-for-userexit-scripts.md
index 49c9c4e5f4..8b59589f53 100644
--- a/windows/deploy/configure-mdt-2013-for-userexit-scripts.md
+++ b/windows/deploy/configure-mdt-2013-for-userexit-scripts.md
@@ -14,9 +14,9 @@ author: CFaw
 
 **In this article**
 
--   [Configure the rules to call a UserExit script](#configure_the_rules_to_call_a_userexit_script)
--   [The Setname.vbs UserExit script](#the_setname.vbs_userexit_script)
--   [Related topics](#related_topics)
+-   [Configure the rules to call a UserExit script](#configure-the-rules-to-call-a-userexit-script)
+-   [The Setname.vbs UserExit script](#the-setname-vbs-userexit-script)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to configure the MDT rules engine to use a UserExit script to generate computer names based on a prefix and the computer MAC Address. MDT supports calling external VBScripts as part of the Gather process; these scripts are referred to as UserExit scripts. The script also removes the colons in the MAC Address.
 
diff --git a/windows/deploy/configure-mdt-deployment-share-rules.md b/windows/deploy/configure-mdt-deployment-share-rules.md
index 0c5e9539c1..c3c9d021a1 100644
--- a/windows/deploy/configure-mdt-deployment-share-rules.md
+++ b/windows/deploy/configure-mdt-deployment-share-rules.md
@@ -16,11 +16,11 @@ author: CFaw
 
 -   [Assign settings](#sec01)
 -   [Sample configurations](#sec02)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to configure the MDT rules engine to reach out to other resources, including external scripts, databases, and web services, for additional information instead of storing settings directly in the rules engine. The rules engine in MDT is powerful: most of the settings used for operating system deployments are retrieved and assigned via the rules engine. In its simplest form, the rules engine is the CustomSettings.ini text file.
 
-## Assign settings
+## <a href="" id="sec01"></a>Assign settings
 
 
 When using MDT, you can assign setting in three distinct ways:
@@ -33,7 +33,7 @@ When using MDT, you can assign setting in three distinct ways:
 
 In order illustrate these three options, let's look at some sample configurations.
 
-## Sample configurations
+## <a href="" id="sec02"></a>Sample configurations
 
 
 Before adding the more advanced components like scripts, databases, and web services, consider the commonly used configurations below; they demonstrate the power of the rules engine.
diff --git a/windows/deploy/configxml-file-usmt-win7-usmt-win8.md b/windows/deploy/configxml-file-usmt-win7-usmt-win8.md
index a50f69959b..4620637f55 100644
--- a/windows/deploy/configxml-file-usmt-win7-usmt-win8.md
+++ b/windows/deploy/configxml-file-usmt-win7-usmt-win8.md
@@ -32,48 +32,48 @@ To exclude a component from the Config.xml file, set the **migrate** value to **
 
 In USMT there are new migration policies that can be configured in the Config.xml file. For example, you can configure additional **&lt;ErrorControl&gt;**, **&lt;ProfileControl&gt;**, and **&lt;HardLinkStoreControl&gt;** options. The following elements and parameters are for use in the Config.xml file only.
 
-[&lt;Policies&gt;](#BKMK_Policies)
+[&lt;Policies&gt;](#bkmk-policies)
 
-[&lt;ErrorControl&gt;](#BKMK_ErrorControl)
+[&lt;ErrorControl&gt;](#bkmk-errorcontrol)
 
-[&lt;fatal&gt;](#BKMK_fatal)
+[&lt;fatal&gt;](#bkmk-fatal)
 
-[&lt;fileError&gt;](#BKMK_fileError)
+[&lt;fileError&gt;](#bkmk-fileerror)
 
-[&lt;nonfatal&gt;](#BKMK_nonFatal)
+[&lt;nonfatal&gt;](#bkmk-nonfatal)
 
-[&lt;registryError&gt;](#BKMK_registryError)
+[&lt;registryError&gt;](#bkmk-registryerror)
 
-[&lt;HardLinkStoreControl&gt;](#BKMK_HardLinkStoreControl)
+[&lt;HardLinkStoreControl&gt;](#bkmk-hardlinkstorecontrol)
 
-[&lt;fileLocked&gt;](#BKMK_fileLock)
+[&lt;fileLocked&gt;](#bkmk-filelock)
 
-[&lt;createHardLink&gt;](#BKMK_createHardLink)
+[&lt;createHardLink&gt;](#bkmk-createhardlink)
 
-[&lt;errorHardLink&gt;](#BKMK_errorHardLink)
+[&lt;errorHardLink&gt;](#bkmk-errorhardlink)
 
-[&lt;ProfileControl&gt;](#BKMK_ProfileControl)
+[&lt;ProfileControl&gt;](#bkmk-profilecontrol)
 
-[&lt;localGroups&gt;](#BKMK_localGroups)
+[&lt;localGroups&gt;](#bkmk-localgroups)
 
-[&lt;mappings&gt;](#BKMK_mappings)
+[&lt;mappings&gt;](#bkmk-mappings)
 
-[&lt;changeGroup&gt;](#BKMK_changeGrou)
+[&lt;changeGroup&gt;](#bkmk-changegrou)
 
-[&lt;include&gt;](#BKMK_include)
+[&lt;include&gt;](#bkmk-include)
 
-[&lt;exclude&gt;](#BKMK_exclude)
+[&lt;exclude&gt;](#bkmk-exclude)
 
-[Sample Config.xml File](#BKMK_SampleConfigXJMLfile)
+[Sample Config.xml File](#bkmk-sampleconfigxjmlfile)
 
-## &lt;Policies&gt;
+## <a href="" id="bkmk-policies"></a>&lt;Policies&gt;
 
 
 The **&lt;Policies&gt;** element contains elements that describe the policies that USMT follows while creating a migration store. Valid children of the **&lt;Policies&gt;** element are **&lt;ErrorControl&gt;** and **&lt;HardLinkStoreControl&gt;**. The **&lt;Policies&gt;** element is a child of **&lt;Configuration&gt;**.
 
 Syntax: `<Policies> </Policies>`
 
-## &lt;ErrorControl&gt;
+## <a href="" id="bkmk-errorcontrol"></a>&lt;ErrorControl&gt;
 
 
 The **&lt;ErrorControl&gt;** element is an optional element you can configure in the Config.xml file. The configurable **&lt;ErrorControl&gt;** rules support only the environment variables for the operating system that is running and the currently logged-on user. As a workaround, you can specify a path using the (\*) wildcard character.
@@ -107,7 +107,7 @@ The configurable **&lt;ErrorControl&gt;** rules support only the environment var
 
  
 
-### &lt;fatal&gt;
+### <a href="" id="bkmk-fatal"></a>&lt;fatal&gt;
 
 The **&lt;fatal&gt;** element is not required.
 
@@ -145,7 +145,7 @@ Syntax: `<fatal errorCode="any">`*&lt;pattern&gt;*`</fatal>`
 
 You use the **&lt;fatal&gt;** element to specify that errors matching a specific pattern should cause USMT to halt the migration.
 
-## &lt;fileError&gt;
+## <a href="" id="bkmk-fileerror"></a>&lt;fileError&gt;
 
 
 The **&lt;fileError&gt;** element is not required.
@@ -160,7 +160,7 @@ Syntax: `<fileError></fileError>`
 
 You use the **&lt;fileError&gt;** element to represent the behavior associated with file errors.
 
-## &lt;nonFatal&gt;
+## <a href="" id="bkmk-nonfatal"></a>&lt;nonFatal&gt;
 
 
 The **&lt;nonFatal&gt;** element is not required.
@@ -199,7 +199,7 @@ Syntax: `<nonfatal errorCode="any">`*&lt;pattern&gt;*`</nonFatal>`
 
 You use the **&lt;nonFatal&gt;** element to specify that errors matching a specific pattern should not cause USMT to halt the migration.
 
-## &lt;registryError&gt;
+## <a href="" id="bkmk-registryerror"></a>&lt;registryError&gt;
 
 
 The **&lt;registryError&gt;**element is not required.
@@ -238,7 +238,7 @@ Syntax: `<registryError></registryError>`
 
 You use the **&lt;registryError&gt;** element to specify that errors matching a specific pattern should not cause USMT to halt the migration.
 
-## &lt;HardLinkStoreControl&gt;
+## <a href="" id="bkmk-hardlinkstorecontrol"></a>&lt;HardLinkStoreControl&gt;
 
 
 The **&lt;HardLinkStoreControl&gt;** element contains elements that describe how to handle files during the creation of a hard-link migration store. Its only valid child is **&lt;fileLocked&gt;**.
@@ -274,49 +274,49 @@ The **&lt;ErrorControl&gt;** section can be configured to conditionally ignore f
 </Policy>
 ```
 
-## &lt;fileLocked&gt;
+## <a href="" id="bkmk-filelock"></a>&lt;fileLocked&gt;
 
 
 The **&lt;fileLocked&gt;** element contains elements that describe how to handle files that are locked for editing. The rules defined by the **&lt;fileLocked&gt;** element are processed in the order in which they appear in the XML file.
 
 Syntax: `<fileLocked></fileLocked>`
 
-## &lt;createHardLink&gt;
+## <a href="" id="bkmk-createhardlink"></a>&lt;createHardLink&gt;
 
 
 The **&lt;createHardLink&gt;** element defines a standard MigXML pattern that describes file paths where hard links should be created, even if the file is locked for editing by another application.
 
 Syntax: `<createHardLink>`*&lt;pattern&gt;*`</createHardLink>`
 
-## &lt;errorHardLink&gt;
+## <a href="" id="bkmk-errorhardlink"></a>&lt;errorHardLink&gt;
 
 
 The **&lt;errorHardLink&gt;** element defines a standard MigXML pattern that describes file paths where hard links should not be created if the file is locked for editing by another application. USMT will attempt to copy files under these paths into the migration store. However, if that is not possible, **Error\_Locked** is thrown. This is a standard Windows application programming interface (API) error that can be captured by the **&lt;ErrorControl&gt;** section to either cause USMT to skip the file or abort the migration.
 
 Syntax: `<errorHardLink>`*&lt;pattern&gt;*`</errorHardLink>`
 
-## &lt;ProfileControl&gt;
+## <a href="" id="bkmk-profilecontrol"></a>&lt;ProfileControl&gt;
 
 
 This element is used to contain other elements that establish rules for migrating profiles, users, and policies around local group membership during the migration. **&lt;ProfileMigration&gt;** is a child of **&lt;Configuration&gt;**.
 
 Syntax: &lt;`ProfileControl> </ProfileControl>`
 
-## &lt;localGroups&gt;
+## <a href="" id="bkmk-localgroups"></a>&lt;localGroups&gt;
 
 
 This element is used to contain other elements that establish rules for how to migrate local groups. **&lt;localGroups&gt;** is a child of **&lt;ProfileControl&gt;**.
 
 Syntax: `<localGroups> </localGroups>`
 
-## &lt;mappings&gt;
+## <a href="" id="bkmk-mappings"></a>&lt;mappings&gt;
 
 
 This element is used to contain other elements that establish mappings between groups.
 
 Syntax: `<mappings> </mappings>`
 
-## &lt;changeGroup&gt;
+## <a href="" id="bkmk-changegrou"></a>&lt;changeGroup&gt;
 
 
 This element describes the source and destination groups for a local group membership change during the migration. It is a child of **&lt;localGroups&gt;**. The following parameters are defined:
@@ -359,21 +359,21 @@ The valid and required children of **&lt;changeGroup&gt;** are **&lt;include&gt;
 
 Syntax: `<changeGroup From="Group1" To= "Group2"> </changeGroup>`
 
-## &lt;include&gt;
+## <a href="" id="bkmk-include"></a>&lt;include&gt;
 
 
 This element specifies that its required child, *&lt;pattern&gt;*, should be included in the migration.
 
 Syntax: `<include>``</include>`
 
-## &lt;exclude&gt;
+## <a href="" id="bkmk-exclude"></a>&lt;exclude&gt;
 
 
 This element specifies that its required child, *&lt;pattern&gt;*, should be excluded from the migration.
 
 Syntax: `<exclude>`` </exclude>`
 
-## Sample Config.xml File
+## <a href="" id="bkmk-sampleconfigxjmlfile"></a>Sample Config.xml File
 
 
 Refer to the following sample Config.xml file for additional details about items you can choose to exclude from a migration.
diff --git a/windows/deploy/conflicts-and-precedence-usmt-win7-usmt-win8.md b/windows/deploy/conflicts-and-precedence-usmt-win7-usmt-win8.md
index 7021f52c45..812254b16e 100644
--- a/windows/deploy/conflicts-and-precedence-usmt-win7-usmt-win8.md
+++ b/windows/deploy/conflicts-and-precedence-usmt-win7-usmt-win8.md
@@ -13,7 +13,7 @@ author: CFaw
 
 When you include, exclude, and reroute files and settings, it is important to know how User State Migration Tool (USMT) 10.0 deals with conflicts and precedence. When working with USMT, the following are the most important conflicts and precedence guidelines to keep in mind.
 
--   **If there are conflicting rules within a component, the most specific rule is applied.** However, the &lt;unconditionalExclude&gt; rule is an exception because it takes precedence over all others. Directory names take precedence over file extensions. For examples, see [What happens when there are conflicting include and exclude rules?](#BKMK1) and the first example in [Include and exclude precedence examples](#PrecExamples)****later in this topic.
+-   **If there are conflicting rules within a component, the most specific rule is applied.** However, the &lt;unconditionalExclude&gt; rule is an exception because it takes precedence over all others. Directory names take precedence over file extensions. For examples, see [What happens when there are conflicting include and exclude rules?](#bkmk1) and the first example in [Include and exclude precedence examples](#precexamples)****later in this topic.
 
 -   **Only rules inside the same component can affect each other, depending on specificity.** Rules that are in different components do not affect each other, except for the &lt;unconditionalExclude&gt; rule.
 
@@ -30,32 +30,32 @@ When you include, exclude, and reroute files and settings, it is important to kn
 
 **General**
 
--   [What is the relationship between rules that are located within different components?](#BKMK2)
+-   [What is the relationship between rules that are located within different components?](#bkmk2)
 
--   [How does precedence work with the Config.xml file?](#BKMK3)
+-   [How does precedence work with the Config.xml file?](#bkmk3)
 
--   [How does USMT process each component in an .xml file with multiple components?](#BKMK4)
+-   [How does USMT process each component in an .xml file with multiple components?](#bkmk4)
 
--   [How are rules processed?](#BKMK5)
+-   [How are rules processed?](#bkmk5)
 
--   [How does USMT combine all of the .xml files that I specify on the command line?](#BKMK6)
+-   [How does USMT combine all of the .xml files that I specify on the command line?](#bkmk6)
 
 **The &lt;include&gt; and &lt;exclude&gt; rules**
 
--   [What happens when there are conflicting include and exclude rules?](#BKMK1)
+-   [What happens when there are conflicting include and exclude rules?](#bkmk1)
 
--   [&lt;include&gt; and &lt;exclude&gt; precedence examples](#PrecExamples)
+-   [&lt;include&gt; and &lt;exclude&gt; precedence examples](#precexamples)
 
 **File collisions**
 
--   [What is the default behavior when there are file collisions?](#Collisions)
+-   [What is the default behavior when there are file collisions?](#collisions)
 
--   [How does the &lt;merge&gt; rule work when there are file collisions?](#BKMK11)
+-   [How does the &lt;merge&gt; rule work when there are file collisions?](#bkmk11)
 
 ## General
 
 
-### What is the relationship between rules that are located within different components?
+### <a href="" id="bkmk2"></a>What is the relationship between rules that are located within different components?
 
 Only rules inside the same component can affect each other, depending on specificity, except for the &lt;unconditionalExclude&gt; rule. Rules that are in different components do not affect each other. If there is an &lt;include&gt; rule in one component and an identical &lt;exclude&gt; rule in another component, the data will be migrated because the two rules are independent of each other.
 
@@ -93,7 +93,7 @@ The following .xml file migrates all files from C:\\Userdocs, including .mp3 fil
 </migration>
 ```
 
-### How does precedence work with the Config.xml file?
+### <a href="" id="bkmk3"></a>How does precedence work with the Config.xml file?
 
 Specifying `migrate="no"` in the Config.xml file is the same as deleting the corresponding component from the migration .xml file. However, if you set `migrate="no"` for My Documents, but you have a rule similar to the one shown below in a migration .xml file (which includes all of the .doc files from My Documents), then only the .doc files will be migrated, and all other files will be excluded.
 
@@ -105,11 +105,11 @@ Specifying `migrate="no"` in the Config.xml file is the same as deleting the cor
 </include> 
 ```
 
-### How does USMT process each component in an .xml file with multiple components?
+### <a href="" id="bkmk4"></a>How does USMT process each component in an .xml file with multiple components?
 
 The ordering of components does not matter. Each component is processed independently of other components. For example, if you have an &lt;include&gt; rule in one component and a &lt;locationModify&gt; rule in another component for the same file, the file will be migrated in both places. That is, it will be included based on the &lt;include&gt; rule, and it will be migrated based on the &lt;locationModify&gt; rule.
 
-### How are rules processed?
+### <a href="" id="bkmk5"></a>How are rules processed?
 
 There are two broad categories of rules.
 
@@ -117,14 +117,14 @@ There are two broad categories of rules.
 
 -   **Rules that affect the behavior of only the LoadState tool**. For example, the &lt;locationModify&gt;, &lt;contentModify&gt;, and &lt;destinationCleanup&gt; rules do not affect ScanState. They are processed only with LoadState. First, the LoadState tool determines the content and location of each component based on the &lt;locationModify&gt;and &lt;contentModify&gt; rules. Then, LoadState processes all of the &lt;destinationCleanup&gt; rules and deletes data from the destination computer. Lastly, LoadState applies the components to the computer.
 
-### How does USMT combine all of the .xml files that I specify on the command line?
+### <a href="" id="bkmk6"></a>How does USMT combine all of the .xml files that I specify on the command line?
 
 USMT does not distinguish the .xml files based on their name or content. It processes each component within the files separately. USMT supports multiple .xml files only to make it easier to maintain and organize the components within them. Because USMT uses a urlid to distinguish each component from the others, be sure that each .xml file that you specify on the command line has a unique migration urlid.
 
-## The &lt;include&gt; and &lt;exclude&gt; rules
+## <a href="" id="the--include--and--exclude--rules"></a>The &lt;include&gt; and &lt;exclude&gt; rules
 
 
-### What happens when there are conflicting &lt;include&gt; and &lt;exclude&gt; rules?
+### <a href="" id="bkmk1"></a>What happens when there are conflicting &lt;include&gt; and &lt;exclude&gt; rules?
 
 If there are conflicting rules within a component, the most specific rule is applied, except with the &lt;unconditionalExclude&gt; rule, which takes precedence over all other rules. If the rules are equally specific, then the data will be not be migrated. For example if you exclude a file, and include the same file, the file will not be migrated. If there are conflicting rules within different components, the rules do not affect each other because each component is processed independently.
 
@@ -143,15 +143,15 @@ In the following example, mp3 files will not be excluded from the migration. Thi
 </exclude>  
 ```
 
-### &lt;include&gt; and &lt;exclude&gt; rules precedence examples
+### <a href="" id="precexamples"></a>&lt;include&gt; and &lt;exclude&gt; rules precedence examples
 
 These examples explain how USMT deals with &lt;include&gt; and &lt;exclude&gt; rules. When the rules are in different components, the resulting behavior will be the same regardless of whether the components are in the same or in different migration .xml files.
 
--   [Including and excluding files](#FilesEx)
+-   [Including and excluding files](#filesex)
 
--   [Including and excluding registry objects](#RegEx)
+-   [Including and excluding registry objects](#regex)
 
-### Including and excluding files
+### <a href="" id="filesex"></a>Including and excluding files
 
 <table>
 <colgroup>
@@ -278,7 +278,7 @@ These examples explain how USMT deals with &lt;include&gt; and &lt;exclude&gt; r
 
  
 
-### Including and excluding registry objects
+### <a href="" id="regex"></a>Including and excluding registry objects
 
 <table>
 <colgroup>
@@ -359,11 +359,11 @@ These examples explain how USMT deals with &lt;include&gt; and &lt;exclude&gt; r
 ## File collisions
 
 
-### What is the default behavior when there are file collisions?
+### <a href="" id="collisions"></a>What is the default behavior when there are file collisions?
 
 If there is not a &lt;merge&gt; rule, the default behavior for the registry is for the source to overwrite the destination. The default behavior for files is for the source to be renamed incrementally: for example, OriginalFileName(1).OriginalExtension, OriginalFileName(2).OriginalExtension, and so on.
 
-### How does the &lt;merge&gt; rule work when there are file collisions?
+### <a href="" id="bkmk11"></a>How does the &lt;merge&gt; rule work when there are file collisions?
 
 When a collision is detected, USMT will select the most specific &lt;merge&gt; rule and apply it to resolve the conflict. For example, if you have a &lt;merge&gt; rule for C:\\\* \[\*\] set to **sourcePriority()** and another &lt;merge&gt; rule for C:\\subfolder\\\* \[\*\] set to **destinationPriority()** , then USMT uses the destinationPriority() rule because it is the most specific.
 
diff --git a/windows/deploy/create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md b/windows/deploy/create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md
index 1a39839510..84a9f0adcc 100644
--- a/windows/deploy/create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md
+++ b/windows/deploy/create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md
@@ -20,13 +20,13 @@ author: CFaw
 
 -   [Add DaRT 10 files and prepare to brand the boot image](#sec01)
 -   [Create a boot image for Configuration Manager using the MDT wizard](#sec02)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In Microsoft System Center 2012 R2 Configuration Manager, you can create custom Windows Preinstallation Environment (Windows PE) boot images that include extra components and features. This topic shows you how to create a custom Windows PE 5.0 boot image with the Microsoft Deployment Toolkit (MDT) 2013 Update 1 wizard. You can also add the Microsoft Diagnostics and Recovery Toolset (DaRT) 10 to the boot image as part of the boot image creation process.
 
 For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. Both are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md).
 
-## Add DaRT 10 files and prepare to brand the boot image
+## <a href="" id="sec01"></a>Add DaRT 10 files and prepare to brand the boot image
 
 
 The steps below outline the process for adding DaRT 10 installation files to the MDT installation directory. You also copy a custom background image to be used later. We assume you have downloaded Microsoft Desktop Optimization Pack (MDOP) 2015 and copied the x64 version of MSDaRT10.msi to the C:\\Setup\\DaRT 10 folder. We also assume you have created a custom background image and saved it in C:\\Setup\\Branding on CM01. In this section, we use a custom background image named ContosoBackground.bmp.
@@ -43,7 +43,7 @@ The steps below outline the process for adding DaRT 10 installation files to the
 
 6.  Copy the **Branding** folder to **E:\\Sources\\OSD**.
 
-## Create a boot image for Configuration Manager using the MDT wizard
+## <a href="" id="sec02"></a>Create a boot image for Configuration Manager using the MDT wizard
 
 
 By using the MDT wizard to create the boot image in Configuration Manager, you gain additional options for adding components and features to the boot image. In this section, you create a boot image for Configuration Manager using the MDT wizard.
diff --git a/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md b/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md
index 090c58388f..cf6e244c42 100644
--- a/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md
+++ b/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md
@@ -21,13 +21,13 @@ author: CFaw
 -   [Create a task sequence using the MDT Integration Wizard](#sec01)
 -   [Edit the task sequence](#sec02)
 -   [Move the packages](#sec03)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to create a Microsoft System Center 2012 R2 Configuration Manager task sequence with Microsoft Deployment Toolkit (MDT) integration using the MDT wizard. Creating task sequences in System Center 2012 R2 Configuration Manager requires many more steps than creating task sequences for MDT Lite Touch installation. Luckily, the MDT wizard helps you through the process and also guides you through creating the needed packages.
 
 For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard, both of which are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md).
 
-## Create a task sequence using the MDT Integration Wizard
+## <a href="" id="sec01"></a>Create a task sequence using the MDT Integration Wizard
 
 
 This section will walk you through the process of creating a System Center 2012 R2 Configuration Manager task sequence for production use.
@@ -84,7 +84,7 @@ This section will walk you through the process of creating a System Center 2012
 
 16. On the **Confirmation** page, click **Finish**.
 
-## Edit the task sequence
+## <a href="" id="sec02"></a>Edit the task sequence
 
 
 After you create the task sequence, we recommend that you configure the task sequence for an optimal deployment experience. The configurations include enabling support for Unified Extensible Firmware Interface (UEFI), dynamic organizational unit (OU) allocation, computer replace scenarios, and more.
@@ -162,7 +162,7 @@ The Request State Store and Release State Store actions need to be added for com
 
  
 
-## Move the packages
+## <a href="" id="sec03"></a>Move the packages
 
 
 While creating the task sequence with the MDT wizard, a few operating system deployment packages were created. To move these packages to the OSD folder, take the following steps.
diff --git a/windows/deploy/create-a-windows-81-reference-image.md b/windows/deploy/create-a-windows-81-reference-image.md
index 7198485f37..176dfa81ae 100644
--- a/windows/deploy/create-a-windows-81-reference-image.md
+++ b/windows/deploy/create-a-windows-81-reference-image.md
@@ -18,14 +18,14 @@ author: CFaw
 
 **In this article**
 
--   [The reference image](#the_reference_image)
+-   [The reference image](#the-reference-image)
 -   [Set up the MDT build lab deployment share](#sec01)
 -   [Add the setup files](#sec02)
 -   [Add applications](#sec03)
 -   [Create the reference image task sequence](#sec04)
 -   [Configure the MDT deployment share rules](#sec05)
 -   [Build the Windows 10 reference image](#sec06)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 Creating a reference image is important because that image serves as the foundation for the devices in your organization. In this topic, you will learn how to create a Windows 10 reference image using the Microsoft Deployment Toolkit (MDT) 2013 Update 1. You will create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. After completing the steps outlined in this topic, you will have a Windows 10 reference image that can be used in your deployment solution.
 
@@ -48,7 +48,7 @@ The reference image described in this documentation is designed primarily for de
 
 -   It's easy to move between lab, test, and production.
 
-## Set up the MDT build lab deployment share
+## <a href="" id="sec01"></a>Set up the MDT build lab deployment share
 
 
 With Windows 10, there is no hard requirement to create reference images; however, to reduce the time needed for deployment, you may want to create a reference image that contains a few base applications as well as all of the latest updates. This section will show you how to create and configure the MDT Build Lab deployment share to create a Windows 10 reference image. Because reference images will be deployed only to virtual machines during the creation process and have specific settings (rules), you should always create a separate deployment share specifically for this process.
@@ -91,7 +91,7 @@ In order to write the reference image back to the deployment share, you need to
 
 Figure 3. Permissions configured for the MDT\_BA user.
 
-## Add the setup files
+## <a href="" id="sec02"></a>Add the setup files
 
 
 This section will show you how to populate the MDT 2013 Update 1 deployment share with the Windows 10 operating system source files, commonly referred to as setup files, which will be used to create a reference image. Setup files are used during the reference image creation process and are the foundation for the reference image.
@@ -129,7 +129,7 @@ In these steps we assume that you have copied the content of a Windows 10 Enter
 
 Figure 4. The imported Windows 10 operating system after renaming it.
 
-## Add applications
+## <a href="" id="sec03"></a>Add applications
 
 
 Before you create an MDT task sequence, you need to add all of the applications and other sample scripts to the MDT Build Lab share.
@@ -367,7 +367,7 @@ In these steps we assume that you have downloaded Microsoft Visual C++ 2012 Upda
     -Verbose
     ```
 
-## Create the reference image task sequence
+## <a href="" id="sec04"></a>Create the reference image task sequence
 
 
 In order to build and capture your Windows 10 reference image for deployment using MDT, you will create a task sequence. The task sequence will reference the operating system and applications that you previously imported into the MDT Build Lab deployment share to build a Windows 10 reference image.
@@ -520,7 +520,7 @@ Follow these steps to configure Internet Explorer settings in Unattend.xml for t
 
 Figure 10. Windows System Image Manager with the Windows 10 Unattend.xml.
 
-## Configure the MDT deployment share rules
+## <a href="" id="sec05"></a>Configure the MDT deployment share rules
 
 
 Understanding rules is critical to successfully using MDT. Rules are configured using the Rules tab of the deployment share's properties. The Rules tab is essentially a shortcut to edit the CustomSettings.ini file that exists in the E:\\MDTBuildLab\\Control folder. This section discusses how to configure the MDT deployment share rules as part of your Windows 10 Enterprise deployment.
@@ -776,7 +776,7 @@ SkipFinalSummary=YES
 
 -   **SkipFinalSummary.** Skips the final Windows Deployment Wizard summary. Because you use FinishAction=Shutdown, you don't want the wizard to stop in the end so that you need to click OK before the machine shuts down.
 
-## Build the Windows 10 reference image
+## <a href="" id="sec06"></a>Build the Windows 10 reference image
 
 
 Once you have created your task sequence, you are ready to create the Windows 10 reference image. This will be performed by launching the task sequence from a virtual machine which will then automatically perform the reference image creation and capture process.
diff --git a/windows/deploy/custom-xml-examples-usmt-win7-usmt-win8.md b/windows/deploy/custom-xml-examples-usmt-win7-usmt-win8.md
index b5836c734f..98f2a55bcd 100644
--- a/windows/deploy/custom-xml-examples-usmt-win7-usmt-win8.md
+++ b/windows/deploy/custom-xml-examples-usmt-win7-usmt-win8.md
@@ -19,15 +19,15 @@ Because the tables in this topic are wide, you may need to adjust the width of i
 ## In This Topic:
 
 
--   [Example 1: Migrating an Unsupported Application](#Example)
+-   [Example 1: Migrating an Unsupported Application](#example)
 
--   [Example 2: Migrating the My Videos Folder](#Example2)
+-   [Example 2: Migrating the My Videos Folder](#example2)
 
--   [Example 3: Migrating Files and Registry Keys](#Example3)
+-   [Example 3: Migrating Files and Registry Keys](#example3)
 
--   [Example 4: Migrating Specific Folders from Various Locations](#Example4)
+-   [Example 4: Migrating Specific Folders from Various Locations](#example4)
 
-## Example 1: Migrating an Unsupported Application
+## <a href="" id="example"></a>Example 1: Migrating an Unsupported Application
 
 
 The following is a template for the sections that you need to migrate your application. The template is not functional on its own, but you can use it to write your own .xml file.
@@ -96,7 +96,7 @@ The following is a template for the sections that you need to migrate your appli
 </migration>
 ```
 
-## Example 2: Migrating the My Videos Folder
+## <a href="" id="example2"></a>Example 2: Migrating the My Videos Folder
 
 
 The following is a custom .xml file named CustomFile.xml that migrates My Videos for all users, if the folder exists on the source computer.
@@ -153,7 +153,7 @@ The following is a custom .xml file named CustomFile.xml that migrates My Videos
 </migration>
 ```
 
-## Example 3: Migrating Files and Registry Keys
+## <a href="" id="example3"></a>Example 3: Migrating Files and Registry Keys
 
 
 This table describes the behavior in the following example .xml file.
@@ -222,7 +222,7 @@ This table describes the behavior in the following example .xml file.
 </migration>
 ```
 
-## Example 4: Migrating Specific Folders from Various Locations
+## <a href="" id="example4"></a>Example 4: Migrating Specific Folders from Various Locations
 
 
 The behavior for this custom .xml file is described within the &lt;`displayName`&gt; tags in the code.
diff --git a/windows/deploy/customize-usmt-xml-files-usmt-win7-usmt-win8.md b/windows/deploy/customize-usmt-xml-files-usmt-win7-usmt-win8.md
index 39f462328c..bae37705ba 100644
--- a/windows/deploy/customize-usmt-xml-files-usmt-win7-usmt-win8.md
+++ b/windows/deploy/customize-usmt-xml-files-usmt-win7-usmt-win8.md
@@ -14,19 +14,19 @@ author: CFaw
 ## In This Topic
 
 
-[Overview](#BKMK_Overview)
+[Overview](#bkmk-overview)
 
-[Migration .xml Files](#BKMK_MigXML)
+[Migration .xml Files](#bkmk-migxml)
 
-[Custom .xml Files](#BKMK_CustomXMLFiles)
+[Custom .xml Files](#bkmk-customxmlfiles)
 
-[The Config.xml File](#BKMK_ConfigXML)
+[The Config.xml File](#bkmk-configxml)
 
-[Examples](#BKMK_Examples)
+[Examples](#bkmk-examples)
 
-[Additional Information](#BKMK_AddlInfo)
+[Additional Information](#bkmk-addlinfo)
 
-## Overview
+## <a href="" id="bkmk-overview"></a>Overview
 
 
 If you want the **ScanState** and **LoadState** tools to use any of the migration .xml files, specify these files at the command line using the **/i** option. Because the **ScanState** and **LoadState** tools need the .xml files to control the migration, specify the same set of .xml files for both the **ScanState** and **LoadState** commands. However, you do not have to specify the Config.xml file with the **/config** option, unless you want to exclude some of the files and settings that you migrated to the store. For example, you might want to migrate the My Documents folder to the store but not to the destination computer. To do this, modify the Config.xml file and specify the updated file with the **LoadState** command. Then the **LoadState** command will migrate only the files and settings that you want to migrate.
@@ -43,7 +43,7 @@ To modify the migration, do one or more of the following.
 
 For more information about excluding data, see the [Exclude Files and Settings](exclude-files-and-settings-usmt.md) topic.
 
-## Migration .xml Files
+## <a href="" id="bkmk-migxml"></a>Migration .xml Files
 
 
 This section describes the migration .xml files that are included with USMT. Each file contains migration rules that control which components are migrated and where they are migrated to on the destination computer.
@@ -64,12 +64,12 @@ You can use the asterisk (\*) wildcard character in each of these files. However
 
      
 
-## Custom .xml Files
+## <a href="" id="bkmk-customxmlfiles"></a>Custom .xml Files
 
 
 You can create custom .xml files to customize the migration for your unique needs. For example, you may want to create a custom file to migrate a line-of-business application or to modify the default migration behavior. If you want **ScanState** and **LoadState** to use this file, specify it with both commands. For more information, see the How to Create a Custom .xml File topic.
 
-## The Config.xml File
+## <a href="" id="bkmk-configxml"></a>The Config.xml File
 
 
 The Config.xml file is an optional file that you create using the **/genconfig** option with the **ScanState** command. You should create and modify this file if you want to exclude certain components from the migration. In addition, you must create and modify this file if you want to exclude any of the operating system settings from being migrated. The Config.xml file format is different from that of the migration .xml files because it does not contain any migration rules. It contains only a list of the operating system components, applications, and the user documents that can be migrated. For an example, see the [Config.xml File](configxml-file-usmt-win7-usmt-win8.md) topic. For this reason, excluding components using this file is easier than modifying the migration .xml files because you do not need to be familiar with the migration rules and syntax. However, you cannot use wildcard characters in a Config.xml file.
@@ -93,7 +93,7 @@ To exclude a component from the Config.xml file, set the **migrate** value to **
 
  
 
-### Examples
+### <a href="" id="bkmk-examples"></a>Examples
 
 -   The following command creates a Config.xml file in the current directory, but it does not create a store:
 
@@ -107,7 +107,7 @@ To exclude a component from the Config.xml file, set the **migrate** value to **
 
     `loadstate \\server\share\migration\mystore /i:migapp.xml /i:migdocs.xml /v:5 /decrypt /key:"mykey"`
 
-## Additional Information
+## <a href="" id="bkmk-addlinfo"></a>Additional Information
 
 
 -   For more information about how to change the files and settings that are migrated, see the [User State Migration Tool (USMT) How-to topics](user-state-migration-tool--usmt--how-to-topics.md).
diff --git a/windows/deploy/deploy-a-windows-81-image-using-mdt-2013.md b/windows/deploy/deploy-a-windows-81-image-using-mdt-2013.md
index d7db9ff7ba..5631127c4d 100644
--- a/windows/deploy/deploy-a-windows-81-image-using-mdt-2013.md
+++ b/windows/deploy/deploy-a-windows-81-image-using-mdt-2013.md
@@ -29,7 +29,7 @@ author: CFaw
 -   [Multicast deployments](#sec09)
 -   [Use offline media to deploy Windows 10](#sec10)
 -   [Unified Extensible Firmware Interface (UEFI)-based deployments](#sec11)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will show you how to take your reference image for Windows 10, and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 specifically. You will prepare for this by creating a MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. You will then configure the deployment share, create a new task sequence, add applications, add drivers, add rules, and configure Active Directory permissions for deployment.
 
@@ -39,7 +39,7 @@ For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0
 
 Figure 1. The machines used in this topic.
 
-## Step 1: Configure Active Directory permissions
+## <a href="" id="sec01"></a>Step 1: Configure Active Directory permissions
 
 
 These steps will show you how to configure an Active Directory account with the permissions required to deploy a Windows 10 machine to the domain using MDT. These steps assume you have downloaded the sample [Set-OUPermissions.ps1 script](http://go.microsoft.com/fwlink/p/?LinkId=619362) and copied it to C:\\Setup\\Scripts on DC01. The account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. In order for MDT to join machines into the contoso.com domain you need to create an account and configure permissions in Active Directory.
@@ -95,7 +95,7 @@ These steps will show you how to configure an Active Directory account with the
 
         8.  Validated write to service principal name
 
-## Step 2: Set up the MDT production deployment share
+## <a href="" id="sec02"></a>Step 2: Set up the MDT production deployment share
 
 
 When you are ready to deploy Windows 10 in a production environment, you will first create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. For guidance on creating a custom Windows 10 image, see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md).
@@ -118,7 +118,7 @@ The steps for creating the deployment share for production are the same as when
 
 7.  Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share.
 
-## Step 3: Add a custom image
+## <a href="" id="sec03"></a>Step 3: Add a custom image
 
 
 The next step is to add a reference image into the deployment share with the setup files required to successfully deploy Windows 10. When adding a custom image, you still need to copy setup files (an option in the wizard) because Windows 10 stores additional components in the Sources\\SxS folder which is outside the image and may be required when installing components.
@@ -150,7 +150,7 @@ The reason for adding the setup files has changed since earlier versions of MDT.
 
 Figure 2. The imported operating system after renaming it.
 
-## Step 4: Add an application
+## <a href="" id="sec04"></a>Step 4: Add an application
 
 
 When you configure your MDT Build Lab deployment share, you will also add any applications to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the MDT Production deployment share using Adobe Reader as an example.
@@ -179,7 +179,7 @@ In this example, we assume that you have downloaded the Adobe Reader XI installa
 
 Figure 3. The Adobe Reader application added to the Deployment Workbench.
 
-## Step 5: Prepare the drivers repository
+## <a href="" id="sec05"></a>Step 5: Prepare the drivers repository
 
 
 In order to deploy Windows 10 with MDT 2013 Update 1 successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples:
@@ -378,7 +378,7 @@ For the Microsoft Surface Pro model, you find the drivers on the Microsoft websi
 
     -   Driver source directory: **E:\\Drivers\\Windows 10 x64\\Microsoft\\Surface Pro 3**
 
-## Step 6: Create the deployment task sequence
+## <a href="" id="sec06"></a>Step 6: Create the deployment task sequence
 
 
 This section will show you how to create the task sequence used to deploy your production Windows 10 reference image. You will then configure the tasks sequence to enable patching via a Windows Server Update Services (WSUS) server.
@@ -444,7 +444,7 @@ This section will show you how to create the task sequence used to deploy your p
 
 Figure 6. The task sequence for production deployment.
 
-## Step 7: Configure the MDT production deployment share
+## <a href="" id="sec07"></a>Step 7: Configure the MDT production deployment share
 
 
 In this section, you will learn how to configure the MDT Build Lab deployment share with the rules required to create a simple and dynamic deployment process. This includes configuring commonly used rules and an explanation of how these rules work.
@@ -636,7 +636,7 @@ If your organization has a Microsoft Software Assurance agreement, you also can
 
 ### Add DaRT 10 to the boot images
 
-If you have licensing for MDOP and DaRT, you can add DaRT to the boot images using the steps in this section. If you do not have DaRT licensing, or don't want to use it, simply skip to the next section, [Update the Deployment Share](#BKMK_update_deployment). To enable the remote connection feature in MDT 2013 Update 1, you need to do the following:
+If you have licensing for MDOP and DaRT, you can add DaRT to the boot images using the steps in this section. If you do not have DaRT licensing, or don't want to use it, simply skip to the next section, [Update the Deployment Share](#bkmk-update-deployment). To enable the remote connection feature in MDT 2013 Update 1, you need to do the following:
 
 -   Install DaRT 10 (part of MDOP 2015 R1).
 
@@ -670,7 +670,7 @@ In these steps, we assume that you downloaded MDOP 2015 R1 and copied DaRT 10 to
 
 10. Click **OK**.
 
-### Update the deployment share
+### <a href="" id="bkmk-update-deployment"></a>Update the deployment share
 
 Like the MDT Build Lab deployment share, the MDT Production deployment share needs to be updated after it has been configured. This is the process during which the Windows PE boot images are created.
 
@@ -683,7 +683,7 @@ The update process will take 5 to 10 minutes.
 
  
 
-## Step 8: Deploy the Windows 10 client image
+## <a href="" id="sec08"></a>Step 8: Deploy the Windows 10 client image
 
 
 These steps will walk you throug the process of using task sequences to deploy Windows 10 images through a fully automated process. First, you need to add the boot image to Windows Deployment Services (WDS) and then start the deployment. In contrast with deploying images from the MDT Build Lab deployment share, we recommend using the Pre-Installation Execution Environment (PXE) to start the full deployments in the datacenter, even though you technically can use an ISO/CD or USB to start the process.
@@ -762,7 +762,7 @@ When monitoring is enabled, MDT also writes information to the event viewer on M
 
 Figure 12. The Event Viewer showing a successful deployment of PC0005.
 
-## Multicast deployments
+## <a href="" id="sec09"></a>Multicast deployments
 
 
 Multicast deployment allows for image deployment with reduced network load during simultaneous deployments. Multicast is a useful operating system deployment feature in MDT deployments, however it is important to ensure that your network supports it and is designed for it.
@@ -787,7 +787,7 @@ Setting up MDT for multicast is straightforward. You enable multicast on the dep
 
 Figure 13. The newly created multicast namespace.
 
-## Use offline media to deploy Windows 10
+## <a href="" id="sec10"></a>Use offline media to deploy Windows 10
 
 
 In addition to network-based deployments, MDT supports the use of offline media-based deployments of Windows 10. You can very easily generate an offline version of your deployment share - either the full deployment share or a subset of it - by the use of selection profiles. The generated offline media can be burned to a DVD or copied to a USB stick for deployment.
@@ -893,7 +893,7 @@ Follow these steps to create a bootable USB stick from the offline media content
 
 6.  In the Diskpart utility, type **active**, and then type **exit**.
 
-## Unified Extensible Firmware Interface (UEFI)-based deployments
+## <a href="" id="sec11"></a>Unified Extensible Firmware Interface (UEFI)-based deployments
 
 
 As referenced in [Windows 10 deployment tools](http://go.microsoft.com/fwlink/p/?LinkId=619546), Unified Extensible Firmware Interface (UEFI)-based deployments are becoming more common. In fact, when you create a generation 2 virtual machine in Hyper-V, you get a UEFI-based computer. During deployment, MDT automatically detects that you have an UEFI-based machine and creates the partitions UEFI requires. You do not need to update or change your task sequences in any way to accommodate UFEI.
diff --git a/windows/deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md b/windows/deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md
index d918c8d6e5..dc1a94c5a9 100644
--- a/windows/deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md
+++ b/windows/deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md
@@ -41,7 +41,7 @@ To download the latest version of MDT, visit the [MDT resource page](http://go.m
 
 -   [Configure MDT settings](configure-mdt-2013-settings.md)
 
-## Proof-of-concept environment
+## <a href="" id="proof"></a>Proof-of-concept environment
 
 
 For the purposes of this guide, and the topics discussed herein, we will use the following servers and client machines: DC01, MDT01, CM01, PC0001, and PC0002.
diff --git a/windows/deploy/deploy-windows-to-go-in-your-organization-small-scenario.md b/windows/deploy/deploy-windows-to-go-in-your-organization-small-scenario.md
index f542e8a4c9..6b9a088b5c 100644
--- a/windows/deploy/deploy-windows-to-go-in-your-organization-small-scenario.md
+++ b/windows/deploy/deploy-windows-to-go-in-your-organization-small-scenario.md
@@ -18,11 +18,11 @@ author: CFaw
 
 **In this article**
 
--   [Deployment tips](#deployment_tips)
--   [Basic deployment steps](#basic_deployment_steps)
--   [Advanced deployment steps](#advanced_deployment_steps)
--   [Considerations when using different USB keyboard layouts with Windows To Go](#considerations_when_using_different_usb_keyboard_layouts_with_windows_to_go)
--   [Related topics](#related_topics)
+-   [Deployment tips](#deployment-tips)
+-   [Basic deployment steps](#basic-deployment-steps)
+-   [Advanced deployment steps](#advanced-deployment-steps)
+-   [Considerations when using different USB keyboard layouts with Windows To Go](#considerations-when-using-different-usb-keyboard-layouts-with-windows-to-go)
+-   [Related topics](#related-topics)
 
 This topic helps you to deploy Windows To Go in your organization. Before you begin deployment, make sure that you have reviewed the topics [Windows To Go: feature overview](../plan/windows-to-go-feature-overview-scenario.md) and [Prepare your organization for Windows To Go](../plan/prepare-your-organization-for-windows-to-go.md) to ensure that you have the correct hardware and are prepared to complete the deployment. You can then use the steps in this topic to start your Windows To Go deployment.
 
@@ -563,7 +563,7 @@ BitLocker recovery keys are the keys that can be used to unlock a BitLocker prot
     **Warning**  
     If the **Choose how BitLocker-protected removable data drives can be recovered** Group Policy setting has been configured to back up recovery information to Active Directory Domain Services, the recovery information for the drive will be stored under the account of the host computer used to apply the recovery key.
 
-    If you want to have the recovery information stored under the account of the Windows To Go workspace you can turn BitLocker from within the Windows To Go workspace using the BitLocker Setup Wizard from the BitLocker Control Panel item as described in [To enable BitLocker after distribution](#enable_bitlocker).
+    If you want to have the recovery information stored under the account of the Windows To Go workspace you can turn BitLocker from within the Windows To Go workspace using the BitLocker Setup Wizard from the BitLocker Control Panel item as described in [To enable BitLocker after distribution](#enable-bitlocker).
 
      
 
@@ -579,7 +579,7 @@ The Windows To Go drives are now ready to be distributed to users and are protec
 
 -   Instructions for how to retrieve the recovery password if necessary. This may be a help desk process, an automated password retrieval site, or a person to contact.
 
-
+<a href="" id="enable-bitlocker"></a>
 **To enable BitLocker after distribution**
 
 1.  Insert your Windows To Go drive into your host computer (that is currently shut down) and then turn on the computer and boot into your Windows To Go workspace
diff --git a/windows/deploy/estimate-migration-store-size-usmt-win7-usmt-win8.md b/windows/deploy/estimate-migration-store-size-usmt-win7-usmt-win8.md
index a3c31299ca..ecc4a77d16 100644
--- a/windows/deploy/estimate-migration-store-size-usmt-win7-usmt-win8.md
+++ b/windows/deploy/estimate-migration-store-size-usmt-win7-usmt-win8.md
@@ -16,36 +16,36 @@ The disk space requirements for a migration are dependent on the size of the mig
 ## In This Topic
 
 
--   [Hard Disk Space Requirements](#BKMK_SpaceReqs). Describes the disk space requirements for the migration store and other considerations on the source and destination computers.
+-   [Hard Disk Space Requirements](#bkmk-spacereqs). Describes the disk space requirements for the migration store and other considerations on the source and destination computers.
 
--   [Calculate Disk Space Requirements Using the ScanState Tool](#BKMK_calcDiskSpace). Describes how to use the ScanState tool to determine how big the migration store will be on a particular computer.
+-   [Calculate Disk Space Requirements Using the ScanState Tool](#bkmk-calcdiskspace). Describes how to use the ScanState tool to determine how big the migration store will be on a particular computer.
 
--   [Estimate Migration Store Size](#BKMK_EstMigStoreSize). Describes how to estimate the average size of migration stores for the computers in your organization, based on your infrastructure.
+-   [Estimate Migration Store Size](#bkmk-estmigstoresize). Describes how to estimate the average size of migration stores for the computers in your organization, based on your infrastructure.
 
-## Hard Disk Space Requirements
+## <a href="" id="bkmk-spacereqs"></a>Hard Disk Space Requirements
 
 
 -   **Store.** For non-hard-link migrations, you should ensure that there is enough available disk space at the location where you will save your store to contain the data being migrated. You can save your store to another partition, an external storage device such as a USB flash drive or a server. For more information, see [Choose a Migration Store Type](choose-a-migration-store-type-usmt-win7-usmt-win8.md).
 
 -   **Source Computer.** The source computer needs enough available space for the following:
 
-    -   [E250 megabytes (MB) minimum of hard disk space.](#BKMK_EstMigStoreSize) Space is needed to support the User State Migration Tool (USMT) 10.0 operations, for example, growth in the page file. Provided that every volume involved in the migration is formatted as NTFS, 250 MB should be enough space to ensure success for almost every hard-link migration, regardless of the size of the migration. The USMT tools will not create the migration store if 250 MB of disk space is not available.
+    -   [E250 megabytes (MB) minimum of hard disk space.](#bkmk-estmigstoresize) Space is needed to support the User State Migration Tool (USMT) 10.0 operations, for example, growth in the page file. Provided that every volume involved in the migration is formatted as NTFS, 250 MB should be enough space to ensure success for almost every hard-link migration, regardless of the size of the migration. The USMT tools will not create the migration store if 250 MB of disk space is not available.
 
-    -   [Temporary space for USMT to run.](#BKMK_EstMigStoreSize) Additional disk space for the USMT tools to operate is required. This does not include the minimum 250 MB needed to create the migration store. The amount of temporary space required can be calculated using the ScanState tool.
+    -   [Temporary space for USMT to run.](#bkmk-estmigstoresize) Additional disk space for the USMT tools to operate is required. This does not include the minimum 250 MB needed to create the migration store. The amount of temporary space required can be calculated using the ScanState tool.
 
-    -   [Hard-link migration store.](#BKMK_EstMigStoreSize) It is not necessary to estimate the size of a hard-link migration store. The only case where the hard-link store can be quite large is when non-NTFS file systems exist on the system and contain data being migrated.
+    -   [Hard-link migration store.](#bkmk-estmigstoresize) It is not necessary to estimate the size of a hard-link migration store. The only case where the hard-link store can be quite large is when non-NTFS file systems exist on the system and contain data being migrated.
 
--   [Destination computer.](#BKMK_EstMigStoreSize) The destination computer needs enough available space for the following:
+-   [Destination computer.](#bkmk-estmigstoresize) The destination computer needs enough available space for the following:
 
-    -   [Operating system.](#BKMK_EstMigStoreSize)
+    -   [Operating system.](#bkmk-estmigstoresize)
 
-    -   [Applications.](#BKMK_EstMigStoreSize)
+    -   [Applications.](#bkmk-estmigstoresize)
 
-    -   [Data being migrated.](#BKMK_EstMigStoreSize) It is important to consider that in addition to the files being migrated, registry information will also require hard disk space for storage.
+    -   [Data being migrated.](#bkmk-estmigstoresize) It is important to consider that in addition to the files being migrated, registry information will also require hard disk space for storage.
 
-    -   [Temporary space for USMT to run.](#BKMK_EstMigStoreSize) Additional disk space for the USMT tools to operate is required. The amount of temporary space required can be calculated using the ScanState tool.
+    -   [Temporary space for USMT to run.](#bkmk-estmigstoresize) Additional disk space for the USMT tools to operate is required. The amount of temporary space required can be calculated using the ScanState tool.
 
-## Calculate Disk Space Requirements using the ScanState Tool
+## <a href="" id="bkmk-calcdiskspace"></a>Calculate Disk Space Requirements using the ScanState Tool
 
 
 You can use the ScanState tool to calculate the disk space requirements for a particular compressed or uncompressed migration. It is not necessary to estimate the migration store size for a hard-link migration since this method does not create a separate migration store. The ScanState tool provides disk space requirements for the state of the computer at the time the tool is run. The state of the computer may change during day to day use so it is recommended that you use the calculations as an estimate when planning your migration.
@@ -99,7 +99,7 @@ The space requirements report provides two elements, &lt;**storeSize**&gt; and &
 
 Additionally, USMT performs a compliance check for a required minimum of 250 MB of available disk space and will not create a store if the compliance check fails.
 
-## Estimate Migration Store Size
+## <a href="" id="bkmk-estmigstoresize"></a>Estimate Migration Store Size
 
 
 Determine how much space you will need to store the migrated data. You should base your calculations on the volume of e-mail, personal documents, and system settings for each user. The best way to estimate these is to survey several computers to arrive at an average for the size of the store that you will need.
diff --git a/windows/deploy/exclude-files-and-settings-usmt.md b/windows/deploy/exclude-files-and-settings-usmt.md
index d9afd8b9dc..ac1e728397 100644
--- a/windows/deploy/exclude-files-and-settings-usmt.md
+++ b/windows/deploy/exclude-files-and-settings-usmt.md
@@ -15,20 +15,20 @@ When you specify the migration .xml files, MigApp.xml, Migdocs, and MigUser.xml,
 
 In this topic:
 
--   [Create a custom .xml file](#Options). You can use the following elements to specify what to exclude:
+-   [Create a custom .xml file](#options). You can use the following elements to specify what to exclude:
 
-    -   [include and exclude](#BKMK_IncludeExclude): You can use the &lt;include&gt; and &lt;exclude&gt; elements to exclude objects with conditions. For example, you can migrate all files located in the C:\\ drive, except any .mp3 files. It is important to remember that [Conflicts and Precedence](conflicts-and-precedence-usmt-win7-usmt-win8.md) apply to these elements.
+    -   [include and exclude](#bkmk-includeexclude): You can use the &lt;include&gt; and &lt;exclude&gt; elements to exclude objects with conditions. For example, you can migrate all files located in the C:\\ drive, except any .mp3 files. It is important to remember that [Conflicts and Precedence](conflicts-and-precedence-usmt-win7-usmt-win8.md) apply to these elements.
 
-    -   [unconditionalExclude](#ExOne): You can use the &lt;unconditionalExclude&gt; element to globally exclude data. This element takes precedence over all other include and exclude rules in the .xml files. Therefore, this element excludes objects regardless of any other &lt;include&gt; rules that are in the .xml files. For example, you can exclude all .mp3 files on the computer, or you can exclude all files from C:\\UserData.
+    -   [unconditionalExclude](#exone): You can use the &lt;unconditionalExclude&gt; element to globally exclude data. This element takes precedence over all other include and exclude rules in the .xml files. Therefore, this element excludes objects regardless of any other &lt;include&gt; rules that are in the .xml files. For example, you can exclude all .mp3 files on the computer, or you can exclude all files from C:\\UserData.
 
--   [Create a Config.xml file](#Co): You can create and modify a Config.xml file to exclude an entire component from the migration. For example, you can use this file to exclude the settings for one of the default applications. In addition, creating and modifying a Config.xml file is the only way to exclude the operating-system settings that are migrated to computers running Windows. Excluding components using this file is easier than modifying the migration .xml files because you do not need to be familiar with the migration rules and syntax.
+-   [Create a Config.xml file](#co): You can create and modify a Config.xml file to exclude an entire component from the migration. For example, you can use this file to exclude the settings for one of the default applications. In addition, creating and modifying a Config.xml file is the only way to exclude the operating-system settings that are migrated to computers running Windows. Excluding components using this file is easier than modifying the migration .xml files because you do not need to be familiar with the migration rules and syntax.
 
-## Create a custom .xml file
+## <a href="" id="options"></a>Create a custom .xml file
 
 
 We recommend that you create a custom .xml file instead of modifying the default migration .xml files. When you use a custom .xml file, you can keep your changes separate from the default .xml files, which makes it easier to track your modifications.
 
-### &lt;include&gt; and &lt;exclude&gt;
+### <a href="" id="bkmk-includeexclude"></a>&lt;include&gt; and &lt;exclude&gt;
 
 The migration .xml files, MigApp.xml, MigDocs, and MigUser.xml, contain the &lt;component&gt; element, which typically represents a self-contained component or an application such as Microsoft® Office Outlook® and Word. To exclude the files and registry settings that are associated with these components, use the &lt;include&gt; and &lt;exclude&gt; elements. For example, you can use these elements to migrate all files and settings with pattern X except files and settings with pattern Y, where Y is more specific than X. For the syntax of these elements, see [USMT XML Reference](usmt-xml-reference-usmt-win7-usmt-win8.md).
 
@@ -37,17 +37,17 @@ If you specify an &lt;exclude&gt; rule, always specify a corresponding &lt;inclu
 
  
 
--   [Example 1: How to migrate all files from C:\\ except .mp3 files](#Ex1)
+-   [Example 1: How to migrate all files from C:\\ except .mp3 files](#ex1)
 
--   [Example 2: How to migrate all files located in C:\\Data except files in C:\\Data\\tmp](#Ex2)
+-   [Example 2: How to migrate all files located in C:\\Data except files in C:\\Data\\tmp](#ex2)
 
--   [Example 3: How to exclude the files in a folder but include all subfolders](#Ex3)
+-   [Example 3: How to exclude the files in a folder but include all subfolders](#ex3)
 
--   [Example 4: How to exclude a file from a specific folder](#Ex4)
+-   [Example 4: How to exclude a file from a specific folder](#ex4)
 
--   [Example 5: How to exclude a file from any location](#Ex5)
+-   [Example 5: How to exclude a file from any location](#ex5)
 
-### Example 1: How to migrate all files from C:\\ except .mp3 files
+### <a href="" id="ex1"></a>Example 1: How to migrate all files from C:\\ except .mp3 files
 
 The following .xml file migrates all files located on the C: drive, except any .mp3 files.
 
@@ -74,7 +74,7 @@ The following .xml file migrates all files located on the C: drive, except any .
 </migration>
 ```
 
-### Example 2: How to migrate all files located in C:\\Data except files in C:\\Data\\tmp
+### <a href="" id="ex2"></a>Example 2: How to migrate all files located in C:\\Data except files in C:\\Data\\tmp
 
 The following .xml file migrates all files and subfolders in C:\\Data, except the files and subfolders in C:\\Data\\tmp.
 
@@ -100,7 +100,7 @@ The following .xml file migrates all files and subfolders in C:\\Data, except th
 </migration>
 ```
 
-### Example 3: How to exclude the files in a folder but include all subfolders
+### <a href="" id="ex3"></a>Example 3: How to exclude the files in a folder but include all subfolders
 
 The following .xml file migrates any subfolders in C:\\EngineeringDrafts, but excludes all files that are in C:\\EngineeringDrafts.
 
@@ -126,7 +126,7 @@ The following .xml file migrates any subfolders in C:\\EngineeringDrafts, but ex
 </migration>
 ```
 
-### Example 4: How to exclude a file from a specific folder
+### <a href="" id="ex4"></a>Example 4: How to exclude a file from a specific folder
 
 The following .xml file migrates all files and subfolders in C:\\EngineeringDrafts, except for the Sample.doc file in C:\\EngineeringDrafts.
 
@@ -152,7 +152,7 @@ The following .xml file migrates all files and subfolders in C:\\EngineeringDraf
 </migration>
 ```
 
-### Example 5: How to exclude a file from any location
+### <a href="" id="ex5"></a>Example 5: How to exclude a file from any location
 
 To exclude a Sample.doc file from any location on the C: drive, use the &lt;pattern&gt; element. If multiple files exist with the same name on the C: drive, all of these files will be excluded.
 
@@ -168,7 +168,7 @@ To exclude a Sample.doc file from any drive on the computer, use the &lt;script&
 
 [USMT XML Reference](usmt-xml-reference-usmt-win7-usmt-win8.md)
 
-### Example 1: How to exclude all .mp3 files
+### <a href="" id="exone"></a>Example 1: How to exclude all .mp3 files
 
 The following .xml file excludes all .mp3 files from the migration:
 
@@ -189,7 +189,7 @@ The following .xml file excludes all .mp3 files from the migration:
 </migration>
 ```
 
-### Example 2: How to exclude all of the files on a specific drive
+### <a href="" id="extwo"></a>Example 2: How to exclude all of the files on a specific drive
 
 The following .xml file excludes only the files located on the C: drive.
 
@@ -210,7 +210,7 @@ The following .xml file excludes only the files located on the C: drive.
 </migration>
 ```
 
-### Example 3: How to exclude registry keys
+### <a href="" id="exthree"></a>Example 3: How to exclude registry keys
 
 The following .xml file unconditionally excludes the HKey\_Current\_User registry key and all of its subkeys.
 
@@ -237,7 +237,7 @@ The following .xml file unconditionally excludes the HKey\_Current\_User registr
 </migration>
 ```
 
-### Example 4: How to Exclude C:\\Windows and C:\\Program Files
+### <a href="" id="exfour"></a>Example 4: How to Exclude C:\\Windows and C:\\Program Files
 
 The following .xml file unconditionally excludes the system folders of C:\\Windows and C:\\Program Files. Note that all \*.docx, \*.xls and \*.ppt files will not be migrated because the &lt;unconditionalExclude&gt; element takes precedence over the &lt;include&gt; element.
 
@@ -267,7 +267,7 @@ The following .xml file unconditionally excludes the system folders of C:\\Windo
 </migration>
 ```
 
-## Create a Config.xml File
+## <a href="" id="co"></a>Create a Config.xml File
 
 
 You can create and modify a Config.xml file if you want to exclude components from the migration. Excluding components using this file is easier than modifying the migration .xml files because you do not need to be familiar with the migration rules and syntax. Config.xml is an optional file that you can create using the **/genconfig** command-line option with the ScanState tool. For example, you can use the Config.xml file to exclude the settings for one of the default applications. In addition, creating and modifying this file is the only way to exclude the operating-system settings that are migrated to computers running Windows.
diff --git a/windows/deploy/extract-files-from-a-compressed-usmt-migration-store.md b/windows/deploy/extract-files-from-a-compressed-usmt-migration-store.md
index 46b26ceb99..70d6bc7564 100644
--- a/windows/deploy/extract-files-from-a-compressed-usmt-migration-store.md
+++ b/windows/deploy/extract-files-from-a-compressed-usmt-migration-store.md
@@ -26,17 +26,17 @@ In addition, you can specify the file patterns that you want to extract by using
 ## In this topic
 
 
--   [To run the USMTutils tool with the /extract option](#BKMK_extractSyntax)
+-   [To run the USMTutils tool with the /extract option](#bkmk-extractsyntax)
 
--   [To extract all files from a compressed migration store](#BKMK_extractAllFiles)
+-   [To extract all files from a compressed migration store](#bkmk-extractallfiles)
 
--   [To extract specific file types from an encrypted compressed migration store](#BKMK_extractSpecificFiles)
+-   [To extract specific file types from an encrypted compressed migration store](#bkmk-extractspecificfiles)
 
--   [To extract all but one, or more, file types from an encrypted compressed migration store](#BKMK_excludeFilePattern)
+-   [To extract all but one, or more, file types from an encrypted compressed migration store](#bkmk-excludefilepattern)
 
--   [To extract file types using the include pattern and the exclude pattern](#BKMK_includeExcludeFiles)
+-   [To extract file types using the include pattern and the exclude pattern](#bkmk-includeexcludefiles)
 
-### To run the USMTutils tool with the /extract option
+### <a href="" id="bkmk-extractsyntax"></a>To run the USMTutils tool with the /extract option
 
 To extract files from the compressed migration store onto the destination computer, use the following USMTutils syntax:
 
@@ -62,7 +62,7 @@ Where the placeholders have the following values:
 
 -   *&lt;filename&gt;* is the location and name of the text file that contains the encryption key.
 
-### To extract all files from a compressed migration store
+### <a href="" id="bkmk-extractallfiles"></a>To extract all files from a compressed migration store
 
 To extract everything from a compressed migration store to a file on the C:\\ drive, type:
 
@@ -70,7 +70,7 @@ To extract everything from a compressed migration store to a file on the C:\\ dr
 usmtutils /extract D:\MyMigrationStore\USMT\store.mig C:\ExtractedStore
 ```
 
-### To extract specific file types from an encrypted compressed migration store
+### <a href="" id="bkmk-extractspecificfiles"></a>To extract specific file types from an encrypted compressed migration store
 
 To extract specific files, such as .txt and .pdf files, from an encrypted compressed migration store, type:
 
@@ -80,7 +80,7 @@ usmtutils /extract D:\MyMigrationStore\USMT\store.mig /i:"*.txt,*.pdf" C:\Extrac
 
 In this example, the file is encrypted and the encryption key is located in a text file called encryptionKey.
 
-### To extract all but one, or more, file types from an encrypted compressed migration store
+### <a href="" id="bkmk-excludefilepattern"></a>To extract all but one, or more, file types from an encrypted compressed migration store
 
 To extract all files except for one file type, such as .exe files, from an encrypted compressed migration store, type:
 
@@ -88,7 +88,7 @@ To extract all files except for one file type, such as .exe files, from an encry
 usmtutils /extract D:\MyMigrationStore\USMT\store.mig /e:*.exe C:\ExtractedStore /decrypt:AES_128 /key:password /l:C:\usmtutilslog.txt
 ```
 
-### To extract file types using the include pattern and the exclude pattern
+### <a href="" id="bkmk-includeexcludefiles"></a>To extract file types using the include pattern and the exclude pattern
 
 To extract files from a compressed migration store, and to exclude files of one type (such as .exe files) while including only specific files, use both the include pattern and the exclude pattern, as in this example:
 
diff --git a/windows/deploy/finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md b/windows/deploy/finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md
index 0857bdbfdb..457b990a4f 100644
--- a/windows/deploy/finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md
+++ b/windows/deploy/finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md
@@ -24,13 +24,13 @@ author: CFaw
 -   [Distribute content to the CM01 distribution portal](#sec04)
 -   [Create a deployment for the task sequence](#sec05)
 -   [Configure Configuration Manager to prompt for the computer name during deployment (optional)](#sec06)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic walks you through the steps to finalize the configuration of your Windows 10 operating deployment, which includes enablement of the optional Microsoft Deployment Toolkit (MDT) monitoring for Microsoft System Center 2012 R2 Configuration Manager, logs folder creation, rules configuration, content distribution, and deployment of the previously created task sequence.
 
 For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. Both are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md).
 
-## Enable MDT monitoring
+## <a href="" id="sec01"></a>Enable MDT monitoring
 
 
 This section will walk you through the process of creating the E:\\MDTProduction deployment share using the MDT Deployment Workbench to enable monitoring for Configuration Manager.
@@ -51,7 +51,7 @@ This section will walk you through the process of creating the E:\\MDTProduction
 
 Figure 26. Enabling MDT monitoring for Configuration Manager.
 
-## Create and share the Logs folder
+## <a href="" id="sec02"></a>Create and share the Logs folder
 
 
 To support additional server-side logging in Configuration Manager, you create and share the E:\\Logs folder on CM01 using Windows PowerShell. Then in the next step, you enable server-side logging by modifying the CustomSettings.ini file used by the Configuration Manager task sequence.
@@ -66,7 +66,7 @@ To support additional server-side logging in Configuration Manager, you create a
     icacls E:\Logs /grant '"CM_NAA":(OI)(CI)(M)'
     ```
 
-## Configure the rules (Windows 10 x64 Settings package)
+## <a href="" id="sec03"></a>Configure the rules (Windows 10 x64 Settings package)
 
 
 This section will show you how to configure the rules (the Windows 10 x64 Settings package) to support the Contoso environment.
@@ -102,7 +102,7 @@ Although you have not yet added a distribution point, you still need to select U
 
  
 
-## Distribute content to the CM01 distribution portal
+## <a href="" id="sec04"></a>Distribute content to the CM01 distribution portal
 
 
 In Configuration Manager, you can distribute all packages needed by a task sequence in a single task. In this section, you distribute packages that have not yet been distributed to the CM01 distribution point.
@@ -113,7 +113,7 @@ In Configuration Manager, you can distribute all packages needed by a task seque
 
 3.  Using Configuration Manager Trace, verify the distribution to the CM01 distribution point by reviewing the distmgr.log file, or use the Distribution Status / Content Status option in the Monitoring workspace. Do not continue until you see all the new packages being distributed successfully.
 
-## Create a deployment for the task sequence
+## <a href="" id="sec05"></a>Create a deployment for the task sequence
 
 
 This sections provides steps to help you create a deployment for the task sequence.
@@ -144,7 +144,7 @@ This sections provides steps to help you create a deployment for the task sequen
 
 Figure 29. The Windows 10 Enterprise x64 RTM task sequence deployed to the All Unknown Computers collections available for media and PXE.
 
-## Configure Configuration Manager to prompt for the computer name during deployment (optional)
+## <a href="" id="sec06"></a>Configure Configuration Manager to prompt for the computer name during deployment (optional)
 
 
 You can have Configuration Manager prompt you for a computer name or you can use rules to generate a computer name. For more details on how to do this, see [Configure MDT settings](configure-mdt-2013-settings.md).
diff --git a/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md b/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md
index 14cc5335fc..a7ce688d17 100644
--- a/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md
+++ b/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md
@@ -13,10 +13,10 @@ author: CFaw
 
 The following sections provide frequently asked questions and recommended solutions for migrations using User State Migration Tool (USMT) 10.0.
 
-## General
+## <a href="" id="bkmk-generalquestions"></a>General
 
 
-### How much space is needed on the destination computer?
+### <a href="" id="bkmk-1"></a>How much space is needed on the destination computer?
 
 The destination computer needs enough available space for the following:
 
@@ -26,7 +26,7 @@ The destination computer needs enough available space for the following:
 
 -   Uncompressed store
 
-### Can I store the files and settings directly on the destination computer or do I need a server?
+### <a href="" id="bkmk-directly"></a>Can I store the files and settings directly on the destination computer or do I need a server?
 
 You do not need to save the files to a server. If you are moving the user state to a new computer, you can create the store on a shared folder, on media that you can remove, such as a USB flash drive (UFD), or you can store it directly on the destination computer, as in the following steps:
 
@@ -36,11 +36,11 @@ You do not need to save the files to a server. If you are moving the user state
 
 3.  Run the LoadState tool on the destination computer and specify C:\\store as the store location.
 
-### Can I migrate data between operating systems with different languages?
+### <a href="" id="no"></a>Can I migrate data between operating systems with different languages?
 
 No. USMT does not support migrating data between operating systems with different languages; the source computer's operating-system language must match the destination computer's operating-system language.
 
-### Can I change the location of the temporary directory on the destination computer?
+### <a href="" id="bkmk-2"></a>Can I change the location of the temporary directory on the destination computer?
 
 Yes. The environment variable USMT\_WORKING\_DIR can be changed to an alternative temporary directory. There are some offline migration scenarios where this is necessary, for example, when the USMT binaries are located on read-only Windows Preinstallation Environment (WinPE) boot media.
 
@@ -48,25 +48,25 @@ Yes. The environment variable USMT\_WORKING\_DIR can be changed to an alternativ
 
 Because USMT is included in Windows Assessment and Deployment Kit (Windows ADK), you need to install the Windows ADK package on at least one computer in your environment. However, the USMT binaries are designed to be deployed using xcopy. This means that they are installed on a computer simply by recursively copying the USMT directory from the computer containing the Windows ADK to each client computer.
 
-### How do I uninstall USMT?
+### <a href="" id="uninstall"></a>How do I uninstall USMT?
 
 If you have installed the Windows ADK on the computer, uninstalling Windows ADK will uninstall USMT. For client computers that do not have the Windows ADK installed, you can simply delete the USMT directory to uninstall USMT.
 
-## Files and Settings
+## <a href="" id="bkmk-filesandsettings"></a>Files and Settings
 
 
-### How can I exclude a folder or a certain type of file from the migration?
+### <a href="" id="bkmk-8"></a>How can I exclude a folder or a certain type of file from the migration?
 
 You can use the **&lt;unconditionalExclude&gt;** element to globally exclude data from the migration. For example, you can use this element to exclude all MP3 files on the computer or to exclude all files from C:\\UserData. This element excludes objects regardless of any other &lt;include&gt; rules that are in the .xml files. For an example, see &lt;unconditionalExclude&gt; in the [Exclude Files and Settings](exclude-files-and-settings-usmt.md) topic. For the syntax of this element, see [XML Elements Library](xml-elements-library-usmt-win7-usmt-win8.md).
 
-### What happens to files that were located on a drive that does not exist on the destination computer?
+### <a href="" id="bkmk-location"></a>What happens to files that were located on a drive that does not exist on the destination computer?
 
 USMT migrates the files to the %SystemDrive% while maintaining the correct folder hierarchy. For example, if E:\\data\\File.pst is on the source computer, but the destination computer does not have an E:\\ drive, the file will be migrated to C:\\data\\File.pst, if C:\\ is the system drive. This holds true even when &lt;locationModify&gt; rules attempt to move data to a drive that does not exist on the destination computer.
 
-## USMT .xml Files
+## <a href="" id="bkmk-usmtxmlfiles"></a>USMT .xml Files
 
 
-### Where can I get examples of USMT .xml files?
+### <a href="" id="bkmk-111"></a>Where can I get examples of USMT .xml files?
 
 The following topics include examples of USMT .xml files:
 
@@ -78,25 +78,25 @@ The following topics include examples of USMT .xml files:
 
 -   [Custom XML Examples](custom-xml-examples-usmt-win7-usmt-win8.md)
 
-### Can I use custom .xml files that were written for USMT 5.0?
+### <a href="" id="bkmk-16"></a>Can I use custom .xml files that were written for USMT 5.0?
 
 Yes. You can use custom .xml files that were written for USMT 5.0 with USMT for Windows 10. However, in order to use new USMT functionality, you must revisit your custom USMT files and refresh them to include the new command-line options and XML elements.
 
-### How can I validate the .xml files?
+### <a href="" id="how"></a>How can I validate the .xml files?
 
 You can use the USMT XML Schema (MigXML.xsd) to write and validate migration .xml files.
 
-### Why must I list the .xml files with both the ScanState and LoadState commands?
+### <a href="" id="bkmk-3"></a>Why must I list the .xml files with both the ScanState and LoadState commands?
 
 The .xml files are not copied to the store as in previous versions of USMT. Because the ScanState and LoadState tools need the .xml files to control the migration, you must specify the same set of .xml files for the **ScanState** and **LoadState** commands. If you used a particular set of mig\*.xml files in the ScanState tool, either called through the "/auto" option, or individually through the "/i" option, then you should use same option to call the exact same mig\*.xml files in the LoadState tool. However, you do not have to specify the Config.xml file, unless you want to exclude some of the files and settings that you migrated to the store. For example, you might want to migrate the My Documents folder to the store, but not to the destination computer. To do this, modify the Config.xml file and specify the updated file with the **LoadState** command. **LoadState** will migrate only the files and settings that you want to migrate.
 
 If you exclude an .xml file from the **LoadState** command, then all of the data that is in the store that was migrated with the missing .xml files will be migrated. However, the migration rules that were specified for the **ScanState** command will not apply. For example, if you exclude a MigApp.xml file that has a rerouting rule such as `MigsysHelperFunction.RelativeMove("c:\data", "%CSIDL_PERSONAL%")`, USMT will not reroute the files. Instead, it will migrate them to C:\\data.
 
-### Which files can I modify and specify on the command line?
+### <a href="" id="bkmk-4"></a>Which files can I modify and specify on the command line?
 
 You can specify the MigUser.xml and MigApp.xml files on the command line. You can modify each of these files. The migration of operating system settings is controlled by the manifests, which you cannot modify. If you want to exclude certain operating-system settings or any other components, create and modify the Config.xml file.
 
-### What happens if I do not specify the .xml files on the command line?
+### <a href="" id="bkmk-7"></a>What happens if I do not specify the .xml files on the command line?
 
 -   **ScanState**
 
@@ -109,7 +109,7 @@ You can specify the MigUser.xml and MigApp.xml files on the command line. You ca
 ## Conflicts and Precedence
 
 
-### What happens when there are conflicting XML rules or conflicting objects on the destination computer?
+### <a href="" id="conflicts"></a>What happens when there are conflicting XML rules or conflicting objects on the destination computer?
 
 For more information, see [Conflicts and Precedence](conflicts-and-precedence-usmt-win7-usmt-win8.md).
 
diff --git a/windows/deploy/general-conventions-usmt-win7-usmt-win8.md b/windows/deploy/general-conventions-usmt-win7-usmt-win8.md
index ede5939950..147cdf05e2 100644
--- a/windows/deploy/general-conventions-usmt-win7-usmt-win8.md
+++ b/windows/deploy/general-conventions-usmt-win7-usmt-win8.md
@@ -16,11 +16,11 @@ This topic describes the XML helper functions.
 ## In This Topic
 
 
-[General XML Guidelines](#BKMK_General)
+[General XML Guidelines](#bkmk-general)
 
-[Helper Functions](#BKMK_HelperFunctions)
+[Helper Functions](#bkmk-helperfunctions)
 
-## General XML Guidelines
+## <a href="" id="bkmk-general"></a>General XML Guidelines
 
 
 Before you modify the .xml files, become familiar with the following guidelines:
@@ -51,7 +51,7 @@ Before you modify the .xml files, become familiar with the following guidelines:
 
     When you surround code in quotation marks, you can use either double ("") or single (') quotation marks.
 
-##  Helper Functions
+## <a href="" id="bkmk-helperfunctions"></a> Helper Functions
 
 
 You can use the XML helper functions in the [XML Elements Library](xml-elements-library-usmt-win7-usmt-win8.md) to change migration behavior. Before you use these functions in an .xml file, note the following:
diff --git a/windows/deploy/getting-started-with-the-user-state-migration-tool--usmt-.md b/windows/deploy/getting-started-with-the-user-state-migration-tool--usmt-.md
index 76c9ebdca4..4655b7d762 100644
--- a/windows/deploy/getting-started-with-the-user-state-migration-tool--usmt-.md
+++ b/windows/deploy/getting-started-with-the-user-state-migration-tool--usmt-.md
@@ -16,13 +16,13 @@ This topic outlines the general process that you should follow to migrate files
 ## In this Topic
 
 
--   [Step One: Plan Your Migration](#BKMK_PlanMig)
+-   [Step One: Plan Your Migration](#bkmk-planmig)
 
--   [Step Two: Collect Files and Settings from the Source Computer](#BKMK_CollectFiles)
+-   [Step Two: Collect Files and Settings from the Source Computer](#bkmk-collectfiles)
 
--   [Step Three: Prepare the Destination Computer and Restore Files and Settings](#BKMK_PrepareDestination)
+-   [Step Three: Prepare the Destination Computer and Restore Files and Settings](#bkmk-preparedestination)
 
-## Step One: Plan Your Migration
+## <a href="" id="bkmk-planmig"></a>Step One: Plan Your Migration
 
 
 1.  [Plan Your Migration](plan-your-migration-usmt-win7-usmt-win8.md). Depending on whether your migration scenario is refreshing or replacing computers, you can choose an online migration or an offline migration using Windows Preinstallation Environment (WinPE) or the files in the Windows.old directory. For more information, see [Common Migration Scenarios](common-migration-scenarios-usmt-win7-usmt-win8.md).
@@ -48,7 +48,7 @@ This topic outlines the general process that you should follow to migrate files
 
 7.  Review the migration state of the components listed in the Config.xml file, and specify `migrate=no` for any components that you do not want to migrate.
 
-## Step Two: Collect Files and Settings from the Source Computer
+## <a href="" id="bkmk-collectfiles"></a>Step Two: Collect Files and Settings from the Source Computer
 
 
 1.  Back up the source computer.
@@ -71,7 +71,7 @@ This topic outlines the general process that you should follow to migrate files
 
 4.  Run the **USMTUtils** command with the **/Verify** option to ensure that the store you created is not corrupted.
 
-## Step Three: Prepare the Destination Computer and Restore Files and Settings
+## <a href="" id="bkmk-preparedestination"></a>Step Three: Prepare the Destination Computer and Restore Files and Settings
 
 
 1.  Install the operating system on the destination computer.
diff --git a/windows/deploy/hard-link-migration-store-usmt-win8.md b/windows/deploy/hard-link-migration-store-usmt-win8.md
index 46f33cfa8b..e1b2f13561 100644
--- a/windows/deploy/hard-link-migration-store-usmt-win8.md
+++ b/windows/deploy/hard-link-migration-store-usmt-win8.md
@@ -16,29 +16,29 @@ A *hard-link migration store* enables you to perform an in-place migration where
 ## In This Topic
 
 
-[When to Use a Hard-Link Migration](#BKMK_When)
+[When to Use a Hard-Link Migration](#bkmk-when)
 
-[Understanding a Hard-Link Migration](#BKMK_UnderstandHardlinkMig)
+[Understanding a Hard-Link Migration](#bkmk-understandhardlinkmig)
 
-[Scenario](#BKMK_Scenario)
+[Scenario](#bkmk-scenario)
 
-[Hard-Link Migration Store Details](#BKMK_HardLinkStoreDetails)
+[Hard-Link Migration Store Details](#bkmk-hardlinkstoredetails)
 
-[Hard Disk Space](#BKMK_HardDiskSpace)
+[Hard Disk Space](#bkmk-harddiskspace)
 
-[Hard-Link Store Size Estimation](#BKMK_HardLinkStoreSizeEst)
+[Hard-Link Store Size Estimation](#bkmk-hardlinkstoresizeest)
 
-[Migration Store Path on Multiple Volumes](#BKMK_MigStoreMultVolumes)
+[Migration Store Path on Multiple Volumes](#bkmk-migstoremultvolumes)
 
-[Location Modifications](#BKMK_LocationModify)
+[Location Modifications](#bkmk-locationmodify)
 
-[Migrating Encrypting File System (EFS) Certificates and Files](#BKMK_EFS)
+[Migrating Encrypting File System (EFS) Certificates and Files](#bkmk-efs)
 
-[Migrating Locked Files With the Hard-Link Migration Store](#BKMK_MigLockedFiles)
+[Migrating Locked Files With the Hard-Link Migration Store](#bkmk-miglockedfiles)
 
-[XML Elements in the Config.xml File](#BKMK_XMLElementsinConfig)
+[XML Elements in the Config.xml File](#bkmk-xmlelementsinconfig)
 
-## When to Use a Hard-Link Migration
+## <a href="" id="bkmk-when"></a>When to Use a Hard-Link Migration
 
 
 You can use a hard-link migration store when your planned migration meets both of the following criteria:
@@ -55,7 +55,7 @@ You cannot use a hard-link migration store if your planned migration includes an
 
 -   You are formatting or repartitioning the disk outside of Windows Setup, or specifying a disk format or repartition during Windows Setup that will remove the migration store.
 
-## Understanding a Hard-Link Migration
+## <a href="" id="bkmk-understandhardlinkmig"></a>Understanding a Hard-Link Migration
 
 
 The hard-link migration store is created using the command-line option, **/hardlink**, and is equivalent to other migration-store types. However, it differs in that hard links are utilized to keep files stored on the source computer during the migration. Keeping the files in place on the source computer eliminates the redundant work of duplicating files. It also enables the performance benefits and reduction in disk utilization that define this scenario.
@@ -91,7 +91,7 @@ The read-only file attribute on migrated files is lost when the hard-link migrat
 
  
 
-## Hard-Link Migration Scenario
+## <a href="" id="bkmk-scenario"></a>Hard-Link Migration Scenario
 
 
 For example, a company has decided to deploy Windows 10 on all of their computers. Each employee will keep the same computer, but the operating system on each computer will be updated.
@@ -107,20 +107,20 @@ For example, a company has decided to deploy Windows 10 on all of their compute
 
 3.  An administrator runs the LoadState command-line tool on each computer. The LoadState tool restores user state back on each computer.
 
-## Hard-Link Migration Store Details
+## <a href="" id="bkmk-hardlinkstoredetails"></a>Hard-Link Migration Store Details
 
 
 This section provides details about hard-link migration stores.
 
-### Hard Disk Space
+### <a href="" id="bkmk-harddiskspace"></a>Hard Disk Space
 
 The **/hardlink** command-line option proceeds with creating the migration store only if there is 250 megabytes (MB) of free space on the hard disk. Provided that every volume involved in the migration is formatted as NTFS, 250 MB should be enough space to ensure success for almost every hard-link migration, regardless on the size of the migration.
 
-### Hard-Link Store Size Estimation
+### <a href="" id="bkmk-hardlinkstoresizeest"></a>Hard-Link Store Size Estimation
 
 It is not necessary to estimate the size of a hard-link migration store. Estimating the size of a migration store is only useful in scenarios where the migration store is very large, and on NTFS volumes the hard-link migration store will require much less incremental space than other store options. The only case where the local store can be quite large is when non-NTFS file systems exist on the system and contain data being migrated. Since NTFS has been the default file system format for Windows XP and newer operating systems, this situation is unusual.
 
-### Migration Store Path on Multiple Volumes
+### <a href="" id="bkmk-migstoremultvolumes"></a>Migration Store Path on Multiple Volumes
 
 Separate hard-link migration stores are created on each NTFS volume that contain data being migrated. In this scenario, the primary migration-store location will be specified on the command line, and should be the operating-system volume. Migration stores with identical names and directory names will be created on every volume containing data being migrated. For example:
 
@@ -134,11 +134,11 @@ D:\\USMTMIG\\
 
 The drive you specify on the command line for the hard-link migration store is important, because it defines where the *master migration store* should be placed. The *master migration store* is the location where data migrating from non-NTFS volumes is stored. This volume must have enough space to contain all of the data that comes from non-NTFS volumes. As in other scenarios, if a migration store already exists at the specified path, the **/o** option must be used to overwrite the existing data in the store.
 
-### Location Modifications
+### <a href="" id="bkmk-locationmodify"></a>Location Modifications
 
 Location modifications that redirect migrated content from one volume to a different volume have an adverse impact on the performance of a hard-link migration. This is because the migrating data that must cross system volumes cannot remain in the hard-link migration store, and must be copied across the system volumes.
 
-### Migrating Encrypting File System (EFS) Certificates and Files
+### <a href="" id="bkmk-efs"></a>Migrating Encrypting File System (EFS) Certificates and Files
 
 To migrate Encrypting File System (EFS) files to a new installation of an operating system on the same volume of the computer, specify the **/efs:hardlink** option in the Scanstate command-line syntax.
 
@@ -146,7 +146,7 @@ If the EFS files are being restored to a different partition, you should use the
 
 For more information, see [Migrate EFS Files and Certificates](migrate-efs-files-and-certificates-umst.md) and the Encrypted File Options in [ScanState Syntax](scanstate-syntax-usmt-win7-usmt-win8.md).
 
-### Migrating Locked Files with the Hard-Link Migration Store
+### <a href="" id="bkmk-miglockedfiles"></a>Migrating Locked Files with the Hard-Link Migration Store
 
 Files that are locked by an application or the operating system are handled differently when using a hard-link migration store.
 
@@ -159,7 +159,7 @@ There are some scenarios in which modifying the **&lt;HardLinkStoreControl&gt;**
 
  
 
-## XML Elements in the Config.xml File
+## <a href="" id="bkmk-xmlelementsinconfig"></a>XML Elements in the Config.xml File
 
 
 A new section in the Config.xml file allows optional configuration of some of the hard-link migration behavior introduced with the **/HardLink** option.
diff --git a/windows/deploy/how-usmt-works-usmt-win7-usmt-win8.md b/windows/deploy/how-usmt-works-usmt-win7-usmt-win8.md
index e8efda8bd4..a0e7e4e3d7 100644
--- a/windows/deploy/how-usmt-works-usmt-win7-usmt-win8.md
+++ b/windows/deploy/how-usmt-works-usmt-win7-usmt-win8.md
@@ -13,16 +13,16 @@ author: CFaw
 
 USMT includes two tools that migrate settings and data: ScanState and LoadState. ScanState collects information from the source computer, and LoadState applies that information to the destination computer.
 
--   [ScanState Process](#BKMK_SSProcess)
+-   [ScanState Process](#bkmk-ssprocess)
 
--   [LoadState Process](#BKMK_LSProcess)
+-   [LoadState Process](#bkmk-lsprocess)
 
     **Note**  
     For more information about how USMT processes the rules and the XML files, see [Conflicts and Precedence](conflicts-and-precedence-usmt-win7-usmt-win8.md).
 
      
 
-## The ScanState Process
+## <a href="" id="bkmk-ssprocess"></a>The ScanState Process
 
 
 When you run the ScanState tool on the source computer, it goes through the following process:
@@ -78,7 +78,7 @@ When you run the ScanState tool on the source computer, it goes through the foll
 
      
 
-## The LoadState Process
+## <a href="" id="bkmk-lsprocess"></a>The LoadState Process
 
 
 The LoadState process is very similar to the ScanState process. The ScanState tool collects migration units such as file, registry key, or registry values from the source computer and saves them to the store. Similarly, the LoadState tool collects migration units from the store and applies them to the destination computer.
diff --git a/windows/deploy/identify-users-usmt-win7-usmt-win8.md b/windows/deploy/identify-users-usmt-win7-usmt-win8.md
index 71e4a9c73f..ee151348d5 100644
--- a/windows/deploy/identify-users-usmt-win7-usmt-win8.md
+++ b/windows/deploy/identify-users-usmt-win7-usmt-win8.md
@@ -16,50 +16,50 @@ It is important to carefully consider how you plan to migrate users. By default,
 ## In This Topic
 
 
--   [Migrating Local Accounts](#BKMK_8)
+-   [Migrating Local Accounts](#bkmk-8)
 
--   [Migrating Domain Accounts](#BKMK_9)
+-   [Migrating Domain Accounts](#bkmk-9)
 
--   [Command-Line Options](#BKMK_7)
+-   [Command-Line Options](#bkmk-7)
 
-## Migrating Local Accounts
+## <a href="" id="bkmk-8"></a>Migrating Local Accounts
 
 
 Before migrating local accounts, note the following:
 
--   [You must explicitly specify that local accounts that are not on the destination computer should be migrated.](#BKMK_8) If you are migrating local accounts and the local account does not exist on the destination computer, you must use the**/lac** option when using the LoadState command. If the **/lac** option is not specified, no local user accounts will be migrated.
+-   [You must explicitly specify that local accounts that are not on the destination computer should be migrated.](#bkmk-8) If you are migrating local accounts and the local account does not exist on the destination computer, you must use the**/lac** option when using the LoadState command. If the **/lac** option is not specified, no local user accounts will be migrated.
 
--   [Consider whether to enable user accounts that are new to the destination computer.](#BKMK_8) The **/lae** option enables the account that was created with the **/lac** option. However, if you create a disabled local account by using only the **/lac** option, a local administrator must enable the account on the destination computer.
+-   [Consider whether to enable user accounts that are new to the destination computer.](#bkmk-8) The **/lae** option enables the account that was created with the **/lac** option. However, if you create a disabled local account by using only the **/lac** option, a local administrator must enable the account on the destination computer.
 
--   [Be careful when specifying a password for local accounts.](#BKMK_8) If you create the local account with a blank password, anyone could log on to that account on the destination computer. If you create the local account with a password, the password is available to anyone with access to the USMT command-line tools.
+-   [Be careful when specifying a password for local accounts.](#bkmk-8) If you create the local account with a blank password, anyone could log on to that account on the destination computer. If you create the local account with a password, the password is available to anyone with access to the USMT command-line tools.
 
     **Note**  
     If there are multiple users on a computer, and you specify a password with the **/lac** option, all migrated users will have the same password.
 
      
 
-## Migrating Domain Accounts
+## <a href="" id="bkmk-9"></a>Migrating Domain Accounts
 
 
 The source and destination computers do not need to be connected to the domain for domain user profiles to be migrated.
 
-## Command-Line Options
+## <a href="" id="bkmk-7"></a>Command-Line Options
 
 
 USMT provides several options to migrate multiple users on a single computer. The following command-line options specify which users to migrate.
 
--   [Specifying users.](#BKMK_8) You can specify which users to migrate with the **/all**, **/ui**, **/uel**, and **/ue** options with both the ScanState and LoadState command-line tools.
+-   [Specifying users.](#bkmk-8) You can specify which users to migrate with the **/all**, **/ui**, **/uel**, and **/ue** options with both the ScanState and LoadState command-line tools.
 
     **Important**  
     The **/uel** option excludes users based on the **LastModified** date of the Ntuser.dat file. The **/uel** option is not valid in offline migrations.
 
      
 
--   [Moving users to another domain.](#BKMK_8) You can move user accounts to another domain using the **/md** option with the LoadState command-line tool.
+-   [Moving users to another domain.](#bkmk-8) You can move user accounts to another domain using the **/md** option with the LoadState command-line tool.
 
--   [Creating local accounts.](#BKMK_8) You can create and enable local accounts using the **/lac** and **/lae** options with the LoadState command-line tool.
+-   [Creating local accounts.](#bkmk-8) You can create and enable local accounts using the **/lac** and **/lae** options with the LoadState command-line tool.
 
--   [Renaming user accounts.](#BKMK_8) You can rename user accounts using the **/mu** option.
+-   [Renaming user accounts.](#bkmk-8) You can rename user accounts using the **/mu** option.
 
     **Note**  
     By default, if a user name is not specified in any of the command-line options, the user will be migrated.
diff --git a/windows/deploy/include-files-and-settings-usmt.md b/windows/deploy/include-files-and-settings-usmt.md
index 86238d92fc..04eabc2f5b 100644
--- a/windows/deploy/include-files-and-settings-usmt.md
+++ b/windows/deploy/include-files-and-settings-usmt.md
@@ -15,19 +15,19 @@ When you specify the migration .xml files, User State Migration Tool (USMT) 10.
 
 In this topic:
 
-[Migrate a Single Registry Key](#BKMK_MigSingleRegKey)
+[Migrate a Single Registry Key](#bkmk-migsingleregkey)
 
-[Migrate a Specific Folder](#BKMK_MigSpecificFolder)
+[Migrate a Specific Folder](#bkmk-migspecificfolder)
 
-[Migrate a Folder from a Specific Drive](#BKMK_MigFoldSpecDrive)
+[Migrate a Folder from a Specific Drive](#bkmk-migfoldspecdrive)
 
-[Migrate a Folder from Any Location](#BKMK_MigFolderAnyLoc)
+[Migrate a Folder from Any Location](#bkmk-migfolderanyloc)
 
-[Migrate a File Type Into a Specific Folder](#BKMK_MigFileTypeToSpecificFolder)
+[Migrate a File Type Into a Specific Folder](#bkmk-migfiletypetospecificfolder)
 
-[Migrate a Specific File](#BKMK_MigSpecificFile)
+[Migrate a Specific File](#bkmk-migspecificfile)
 
-##  Migrate a Single Registry Key
+## <a href="" id="bkmk-migsingleregkey"></a> Migrate a Single Registry Key
 
 
 The following .xml file migrates a single registry key.
@@ -49,12 +49,12 @@ The following .xml file migrates a single registry key.
 </migration>
 ```
 
-## Migrate a Specific Folder
+## <a href="" id="bkmk-migspecificfolder"></a>Migrate a Specific Folder
 
 
 The following examples show how to migrate a folder from a specific drive, and from any location on the computer.
 
-###  Migrate a Folder from a Specific Drive
+### <a href="" id="bkmk-migfoldspecdrive"></a> Migrate a Folder from a Specific Drive
 
 -   **Including subfolders.** The following .xml file migrates all files and subfolders from C:\\EngineeringDrafts to the destination computer.
 
@@ -94,7 +94,7 @@ The following examples show how to migrate a folder from a specific drive, and f
     </migration>
     ```
 
-### Migrate a Folder from Any Location
+### <a href="" id="bkmk-migfolderanyloc"></a>Migrate a Folder from Any Location
 
 The following .xml file migrates all files and subfolders of the EngineeringDrafts folder from any drive on the computer. If multiple folders exist with the same name, then all files with this name are migrated.
 
@@ -136,7 +136,7 @@ The following .xml file migrates all files and subfolders of the EngineeringDraf
 </migration>
 ```
 
-## Migrate a File Type Into a Specific Folder
+## <a href="" id="bkmk-migfiletypetospecificfolder"></a>Migrate a File Type Into a Specific Folder
 
 
 The following .xml file migrates .mp3 files located in the specified drives on the source computer into the C:\\Music folder on the destination computer.
@@ -164,7 +164,7 @@ The following .xml file migrates .mp3 files located in the specified drives on t
 </migration> 
 ```
 
-## Migrate a Specific File
+## <a href="" id="bkmk-migspecificfile"></a>Migrate a Specific File
 
 
 The following examples show how to migrate a file from a specific folder, and how to migrate a file from any location.
diff --git a/windows/deploy/integrate-configuration-manager-with-mdt-2013.md b/windows/deploy/integrate-configuration-manager-with-mdt-2013.md
index 0304c92711..75558b9f99 100644
--- a/windows/deploy/integrate-configuration-manager-with-mdt-2013.md
+++ b/windows/deploy/integrate-configuration-manager-with-mdt-2013.md
@@ -20,13 +20,13 @@ author: CFaw
 
 -   [Why integrate MDT 2013 Update 1 with Configuration Manager](#sec01)
 -   [Why use MDT Lite Touch to create reference images](#sec02)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will help you understand the benefits of integrating the Microsoft Deployment Toolkit with Microsoft System Center 2012 R2 Configuration Manager SP1 when you deploy a new or updated version of the Windows operating system.
 
 MDT 2013 is a free, supported download from Microsoft that adds approximately 280 enhancements to Windows operating system deployment with System Center 2012 R2 Configuration Manager SP1. It is, therefore, recommended that you utilize MDT when deploying the Windows operating system with Configuration Manager SP1. In addition to integrating MDT with Configuration Manager, we also recommend using MDT Lite Touch to create the Windows 10 reference images used in Configuration Manager. For more information on how to create a reference image, see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md).
 
-## Why integrate MDT 2013 Update 1 with Configuration Manager
+## <a href="" id="sec01"></a>Why integrate MDT 2013 Update 1 with Configuration Manager
 
 
 As noted above, MDT adds many enhancements to Configuration Manager. While these enhancements are called Zero Touch, that name does not reflect how deployment is conducted. The following sections provide a few samples of the 280 enhancements that MDT 2013 Update 1 adds to Configuration Manager.
@@ -94,7 +94,7 @@ Figure 5. The optional UDI wizard open in the UDI Wizard Designer.
 
 MDT Zero Touch simply extends Configuration Manager with many useful built-in operating system deployment components. By providing well-established, supported solutions, MDT reduces the complexity of deployment in Configuration Manager.
 
-## Why use MDT Lite Touch to create reference images
+## <a href="" id="sec02"></a>Why use MDT Lite Touch to create reference images
 
 
 You can create reference images for Configuration Manager in Configuration Manager, but in general we recommend creating them in MDT Lite Touch for the following reasons:
diff --git a/windows/deploy/introduction-to-vamtvamt-30-win8.md b/windows/deploy/introduction-to-vamtvamt-30-win8.md
index 8f3de28db4..44fb49fbd3 100644
--- a/windows/deploy/introduction-to-vamtvamt-30-win8.md
+++ b/windows/deploy/introduction-to-vamtvamt-30-win8.md
@@ -21,15 +21,15 @@ VAMT can be installed on, and can manage, physical or virtual instances. VAMT ca
 ## In this Topic
 
 
--   [Managing Multiple Activation Key (MAK) and Retail Activation](#BKMK_ManagingMAK)
+-   [Managing Multiple Activation Key (MAK) and Retail Activation](#bkmk-managingmak)
 
--   [Managing Key Management Service (KMS) Activation](#BKMK_ManagingKMS)
+-   [Managing Key Management Service (KMS) Activation](#bkmk-managingkms)
 
--   [Enterprise Environment](#BKMK_EnterpriseEnvironment)
+-   [Enterprise Environment](#bkmk-enterpriseenvironment)
 
--   [VAMT User Interface](#BKMK_UserInterface)
+-   [VAMT User Interface](#bkmk-userinterface)
 
-## Managing Multiple Activation Key (MAK) and Retail Activation
+## <a href="" id="bkmk-managingmak"></a>Managing Multiple Activation Key (MAK) and Retail Activation
 
 
 You can use a MAK or a retail product key to activate Windows, Windows Server, or Office on an individual computer or a group of computers. VAMT enables two different activation scenarios:
@@ -38,14 +38,14 @@ You can use a MAK or a retail product key to activate Windows, Windows Server, o
 
 -   **Proxy activation.** This activation method enables you to perform volume activation for products installed on client computers that do not have Internet access. The VAMT host computer distributes a MAK, KMS Host key (CSVLK), or retail product key to one or more client products and collects the installation ID (IID) from each client product. The VAMT host sends the IIDs to Microsoft on behalf of the client products and obtains the corresponding Confirmation IDs (CIDs). The VAMT host then installs the CIDs on the client products to complete the activation. Using this method, only the VAMT host computer needs Internet access. You can also activate products installed on computers in a workgroup that is completely isolated from any larger network, by installing a second instance of VAMT on a computer within the workgroup. Then, use removable media to transfer activation data between this new instance of VAMT and the Internet-connected VAMT host.
 
-## Managing Key Management Service (KMS) Activation
+## <a href="" id="bkmk-managingkms"></a>Managing Key Management Service (KMS) Activation
 
 
 In addition to MAK or retail activation, you can use VAMT to perform volume activation using the Key Management Service (KMS). VAMT can install and activate GVLK (KMS client) keys on client products. GVLKs are the default product keys used by Volume License editions of Windows Vista, Windows 7, Windows 8, Windows 10, Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012 as well as Microsoft Office 2010.
 
 VAMT treats a KMS Host key (CSVLK) product key identically to a retail-type product key; therefore, the experience for product key entry and activation management are identical for both these product key types.
 
-## Enterprise Environment
+## <a href="" id="bkmk-enterpriseenvironment"></a>Enterprise Environment
 
 
 VAMT is commonly implemented in enterprise environments. The following illustrates three common environments—Core Network, Secure Zone, and Isolated Lab.
@@ -56,7 +56,7 @@ In the Core Network environment, all computers are within a common network manag
 
 The Isolated Lab environment is a workgroup that is physically separate from the Core Network, and its computers do not have Internet access. The network security policy states that no information that could identify a specific computer or user may be transferred out of the Isolated Lab.
 
-## VAMT User Interface
+## <a href="" id="bkmk-userinterface"></a>VAMT User Interface
 
 
 The following screenshot shows the VAMT graphical user interface.
diff --git a/windows/deploy/loadstate-syntax-usmt-win7-usmt-win8.md b/windows/deploy/loadstate-syntax-usmt-win7-usmt-win8.md
index ab7074ec50..1c3af506cf 100644
--- a/windows/deploy/loadstate-syntax-usmt-win7-usmt-win8.md
+++ b/windows/deploy/loadstate-syntax-usmt-win7-usmt-win8.md
@@ -16,21 +16,21 @@ This topic discusses the **LoadState** command syntax and options.
 ## In This Topic
 
 
-[Before You Begin](#Before)
+[Before You Begin](#before)
 
-[Syntax](#BKMK_S)
+[Syntax](#bkmk-s)
 
-[Storage Options](#BKMK_St)
+[Storage Options](#bkmk-st)
 
-[Migration Rule Options](#BKMK_Mig)
+[Migration Rule Options](#bkmk-mig)
 
-[Monitoring Options](#BKMK_Mon)
+[Monitoring Options](#bkmk-mon)
 
-[User Options](#BKMK_User)
+[User Options](#bkmk-user)
 
-[Incompatible Command-Line Options](#BKMK_CLOI)
+[Incompatible Command-Line Options](#bkmk-cloi)
 
-## Before You Begin
+## <a href="" id="before"></a>Before You Begin
 
 
 Before you run the **LoadState** command, note the following:
@@ -45,9 +45,9 @@ Before you run the **LoadState** command, note the following:
 
 -   **LoadState** does not require domain controller access to apply domain profiles. This functionality is available without any additional configuration. It is not necessary for the source computer to have had domain controller access when the user profile was gathered using **ScanState**. However, domain profiles are inaccessible until the destination computer is joined to the domain.
 
--   The [Incompatible Command-Line Options](#BKMK_CLOI) table lists which options you can use together and which command-line options are incompatible.
+-   The [Incompatible Command-Line Options](#bkmk-cloi) table lists which options you can use together and which command-line options are incompatible.
 
-## Syntax
+## <a href="" id="bkmk-s"></a>Syntax
 
 
 This section explains the syntax and usage of the command-line options available when you use the **LoadState** command. The options can be specified in any order. If the option contains a parameter, you can specify either a colon or space separator.
@@ -60,7 +60,7 @@ For example, to decrypt the store and migrate the files and settings to a comput
 
 `loadstate \\server\share\migration\mystore /i:migapp.xml /i:migdocs.xml /v:13 /decrypt /key:"mykey"`
 
-## Storage Options
+## <a href="" id="bkmk-st"></a>Storage Options
 
 
 USMT provides the following options that you can use to specify how and where the migrated data is stored.
@@ -124,7 +124,7 @@ USMT provides the following options that you can use to specify how and where th
 
  
 
-## Migration Rule Options
+## <a href="" id="bkmk-mig"></a>Migration Rule Options
 
 
 USMT provides the following options to specify what files you want to migrate.
@@ -162,7 +162,7 @@ USMT provides the following options to specify what files you want to migrate.
 
  
 
-## Monitoring Options
+## <a href="" id="bkmk-mon"></a>Monitoring Options
 
 
 USMT provides several command-line options that you can use to analyze problems that occur during migration.
@@ -269,7 +269,7 @@ USMT provides several command-line options that you can use to analyze problems
 
  
 
-## User Options
+## <a href="" id="bkmk-user"></a>User Options
 
 
 By default, all users are migrated. The only way to specify which users to include and exclude is by using the following options. You cannot exclude users in the migration .xml files or by using the Config.xml file. For more information, see [Identify Users](identify-users-usmt-win7-usmt-win8.md).
@@ -500,7 +500,7 @@ You can use the **/uel**, **/ue** and **/ui** options together to migrate only t
 
  
 
-## Incompatible Command-Line Options
+## <a href="" id="bkmk-cloi"></a>Incompatible Command-Line Options
 
 
 The following table indicates which command-line options are not compatible with the **LoadState** command. If the table entry for a particular combination is blank, the options are compatible and you can use them together. The X symbol means that the options are not compatible. For example, you cannot use the **/nocompress** option with the **/encrypt** option.
diff --git a/windows/deploy/log-files-usmt-win7-usmt-win8.md b/windows/deploy/log-files-usmt-win7-usmt-win8.md
index 06dec9afc1..654e113b1d 100644
--- a/windows/deploy/log-files-usmt-win7-usmt-win8.md
+++ b/windows/deploy/log-files-usmt-win7-usmt-win8.md
@@ -13,17 +13,17 @@ author: CFaw
 
 You can use User State Migration Tool (USMT) 10.0 logs to monitor your migration and to troubleshoot errors and failed migrations. This topic describes the available command-line options to enable USMT logs, and new XML elements that configure which types of errors are fatal and should halt the migration, which types are non-fatal and should be skipped so that the migration can continue.
 
-[Log Command-Line Options](#BKMK_CommandLineOptions)
+[Log Command-Line Options](#bkmk-commandlineoptions)
 
-[ScanState and LoadState Logs](#BKMK_ScanLoadStateLogs)
+[ScanState and LoadState Logs](#bkmk-scanloadstatelogs)
 
-[Progress Log](#BKMK_ProgressLog)
+[Progress Log](#bkmk-progresslog)
 
-[List Files Log](#BKMK_ListFilesLog)
+[List Files Log](#bkmk-listfileslog)
 
-[Diagnostic Log](#BKMK_DiagnosticLog)
+[Diagnostic Log](#bkmk-diagnosticlog)
 
-## Log Command-Line Options
+## <a href="" id="bkmk-commandlineoptions"></a>Log Command-Line Options
 
 
 The following table describes each command-line option related to logs, and it provides the log name and a description of what type of information each log contains.
@@ -77,12 +77,12 @@ You cannot store any of the log files in *StorePath*. If you do, the log will be
 
  
 
-## ScanState and LoadState Logs
+## <a href="" id="bkmk-scanloadstatelogs"></a>ScanState and LoadState Logs
 
 
 ScanState and LoadState logs are text files that are create when you run the ScanState and LoadState tools. You can use these logs to help monitor your migration. The content of the log depends on the command-line options that you use and the verbosity level that you specify. For more information about verbosity levels, see Monitoring Options in [ScanState Syntax](scanstate-syntax-usmt-win7-usmt-win8.md).
 
-## Progress Log
+## <a href="" id="bkmk-progresslog"></a>Progress Log
 
 
 You can create a progress log using the **/progress** option. External tools, such as Microsoft System Center Operations Manager 2007, can parse the progress log to update your monitoring systems. The first three fields in each line are fixed as follows:
@@ -218,12 +218,12 @@ The remaining fields are key/value pairs as indicated in the following table.
 
  
 
-## List Files Log
+## <a href="" id="bkmk-listfileslog"></a>List Files Log
 
 
 The List files log (Listfiles.txt) provides a list of the files that were migrated. This list can be used to troubleshoot XML issues or can be retained as a record of the files that were gathered into the migration store. The List Files log is only available for ScanState.exe.
 
-## Diagnostic Log
+## <a href="" id="bkmk-diagnosticlog"></a>Diagnostic Log
 
 
 You can obtain the diagnostic log by setting the environment variable MIG\_ENABLE\_DIAG to a path to an XML file.
diff --git a/windows/deploy/mdt-2013-lite-touch-components.md b/windows/deploy/mdt-2013-lite-touch-components.md
index 22cc1be3ff..f18503ab18 100644
--- a/windows/deploy/mdt-2013-lite-touch-components.md
+++ b/windows/deploy/mdt-2013-lite-touch-components.md
@@ -30,7 +30,7 @@ author: CFaw
 -   [Selection profiles](#sec10)
 -   [Logging](#sec11)
 -   [Monitoring](#sec12)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic provides an overview of the features in the Microsoft Deployment Toolkit (MDT) 2013 Update 1 that support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc.
 
@@ -40,12 +40,12 @@ When deploying the Windows operating system using MDT, most of the administratio
 
 Figure 4. If you click **View Script** on the right side, you will get the PowerShell code that was used to perform the task.
 
-## Deployment shares
+## <a href="" id="sec01"></a>Deployment shares
 
 
 A deployment share is essentially a folder on the server that is shared and contains all the setup files and scripts needed for the deployment solution. It also holds the configuration files (called rules) that are gathered when a machine is deployed. These configuration files can reach out to other sources, like a database, external script, or web server to get additional settings for the deployment. For Lite Touch deployments, it is common to have two deployment shares: one for creating the reference images and one for deployment. For Zero Touch, it is common to have only the deployment share for creating reference images because Microsoft System Center 2012 R2 Configuration Manager deploys the image in the production environment.
 
-## Rules
+## <a href="" id="sec02"></a>Rules
 
 
 The rules (CustomSettings.ini and Bootstrap.ini) make up the brain of MDT. The rules control the Windows Deployment Wizard on the client and, for example, can provide the following settings to the machine being deployed:
@@ -64,32 +64,32 @@ You can manage hundreds of settings in the rules. For more information, see the
 
 Figure 5. Example of a MDT rule. In this example, the new computer name is being calculated based on PC- plus the first seven (Left) characters from the serial number
 
-## Boot images
+## <a href="" id="sec03"></a>Boot images
 
 
 Boot images are the Windows Preinstallation Environment (Windows PE) images that are used to start the deployment. They can be started from a CD or DVD, an ISO file, a USB device, or over the network using a Pre-Boot Execution Environment (PXE) server. The boot images connect to the deployment share on the server and start the deployment.
 
-## Operating systems
+## <a href="" id="sec04"></a>Operating systems
 
 
 Using the Deployment Workbench, you import the operating systems you want to deploy. You can import either the full source (like the full Windows 10 DVD/ISO) or a custom image that you have created. The full-source operating systems are primarily used to create reference images; however, they also can be used for normal deployments.
 
-## Applications
+## <a href="" id="sec05"></a>Applications
 
 
 Using the Deployment Workbench, you also add the applications you want to deploy. MDT supports virtually every executable Windows file type. The file can be a standard .exe file with command-line switches for an unattended install, a Microsoft Windows Installer (MSI) package, a batch file, or a VBScript. In fact, it can be just about anything that can be executed unattended. MDT also supports the new Universal Windows apps.
 
-## Driver repository
+## <a href="" id="sec06"></a>Driver repository
 
 
 You also use the Deployment Workbench to import the drivers your hardware needs into a driver repository that lives on the server, not in the image.
 
-## Packages
+## <a href="" id="sec07"></a>Packages
 
 
 With the Deployment Workbench, you can add any Microsoft packages that you want to use. The most commonly added packages are language packs, and the Deployment Workbench Packages node works well for those. You also can add security and other updates this way. However, we generally recommend that you use Windows Server Update Services (WSUS) for operating system updates. The rare exceptions are critical hotfixes that are not available via WSUS, packages for the boot image, or any other package that needs to be deployed before the WSUS update process starts.
 
-## Task sequences
+## <a href="" id="sec08"></a>Task sequences
 
 
 Task sequences are the heart and soul of the deployment solution. When creating a task sequence, you need to select a template. The templates are located in the Templates folder in the MDT installation directory, and they determine which default actions are present in the sequence.
@@ -106,7 +106,7 @@ You can think of a task sequence as a list of actions that need to be executed i
 
 -   **Windows Update.** Connects to a WSUS server and updates the machine.
 
-## Task sequence templates
+## <a href="" id="sec09"></a>Task sequence templates
 
 
 MDT comes with nine default task sequence templates. You can also create your own templates. As long as you store them in the Templates folder, they will be available when you create a new task sequence.
@@ -136,7 +136,7 @@ MDT comes with nine default task sequence templates. You can also create your ow
 
 -   **Standard Client Upgrade task sequence.** A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings, applications, and drivers.
 
-## Selection profiles
+## <a href="" id="sec10"></a>Selection profiles
 
 
 Selection profiles, which are available in the Advanced Configuration node, provide a way to filter content in the Deployment Workbench. Selection profiles are used for several purposes in the Deployment Workbench and in Lite Touch deployments. For example, they can be used to:
@@ -151,7 +151,7 @@ Selection profiles, which are available in the Advanced Configuration node, prov
 
 -   Filter which task sequences and applications are displayed in the Deployment Wizard.
 
-## Logging
+## <a href="" id="sec11"></a>Logging
 
 
 MDT uses many log files during operating system deployments. By default the logs are client side, but by configuring the deployment settings, you can have MDT store them on the server, as well.
@@ -161,7 +161,7 @@ The easiest way to view log files is to use Configuration Manager Trace (CMTrace
 
  
 
-## Monitoring
+## <a href="" id="sec12"></a>Monitoring
 
 
 On the deployment share, you also can enable monitoring. After you enable monitoring, you will see all running deployments in the Monitor node in the Deployment Workbench.
diff --git a/windows/deploy/migrate-application-settings.md b/windows/deploy/migrate-application-settings.md
index 3f350a40d8..8624b4ca16 100644
--- a/windows/deploy/migrate-application-settings.md
+++ b/windows/deploy/migrate-application-settings.md
@@ -17,27 +17,27 @@ This topic defines how to author a custom migration .xml file that migrates the
 
 This topic does not contain information about how to migrate applications that store settings in an application-specific store, only the applications that store the information in files or in the registry. It also does not contain information about how to migrate the data that users create using the application. For example, if the application creates .doc files using a specific template, this topic does not discuss how to migrate the .doc files and templates themselves.
 
-## In this Topic
+## <a href="" id="createxmlmigappsettings"></a>In this Topic
 
 
--   [Before You Begin](#BKMK_BeforeBegin)
+-   [Before You Begin](#bkmk-beforebegin)
 
--   [Step 1: Verify that the application is installed on the source computer, and that it is the same version as the version to be installed on the destination computer](#BKMK_Step1).
+-   [Step 1: Verify that the application is installed on the source computer, and that it is the same version as the version to be installed on the destination computer](#bkmk-step1).
 
--   [Step 2: Identify settings to collect and determine where each setting is stored on the computer](#BKMK_Step2).
+-   [Step 2: Identify settings to collect and determine where each setting is stored on the computer](#bkmk-step2).
 
--   [Step 3: Identify how to apply the gathered settings](#BKMK_Step3).
+-   [Step 3: Identify how to apply the gathered settings](#bkmk-step3).
 
--   [Step 4: Create the migration XML component for the application](#BKMK_Step4).
+-   [Step 4: Create the migration XML component for the application](#bkmk-step4).
 
--   [Step 5: Test the application settings migration](#BKMK_Step5).
+-   [Step 5: Test the application settings migration](#bkmk-step5).
 
-## Before You Begin
+## <a href="" id="bkmk-beforebegin"></a>Before You Begin
 
 
 You should identify a test computer that contains the operating system of your source computers, and the application whose settings you want to migrate. For example, if you are planning on migrating from Windows 7 to Windows 10, install Windows 7 on your test computer and then install the application.
 
-## Step 1: Verify that the application is installed on the source computer, and that it is the same version as the version to be installed on the destination computer.
+## <a href="" id="bkmk-step1"></a>Step 1: Verify that the application is installed on the source computer, and that it is the same version as the version to be installed on the destination computer.
 
 
 Before USMT migrates the settings, you need it to check whether the application is installed on the source computer, and that it is the correct version. If the application is not installed on the source computer, you probably do not want USMT to spend time searching for the application’s settings. More importantly, if USMT collects settings for an application that is not installed, it may migrate settings that will cause the destination computer to function incorrectly. You should also investigate whether there is more than one version of the application. This is because the new version may not store the settings in the same place, which may lead to unexpected results on the destination computer.
@@ -54,12 +54,12 @@ Usually, you can find this key by searching under **HKEY\_LOCAL\_MACHINE\\SOFTWA
 
 You should also check the application binaries for the executable that installed the application. To do this, you will first need to determine where the application is installed and what the name of the executable is. Most applications store the installation location of the application binaries in the registry. You should search the registry for the name of the application, the name of the application executable, or for the name of the company that makes the application, until you find the registry value that contains the installation path. Once you have determined the path to the application executable, you can use the **DoesFileVersionMatch** helper function to check for the correct version of the application executable. For an example of how to do this, see the Windows Live™ Messenger section of the MigApp.xml file.
 
-## Step 2: Identify settings to collect and determine where each setting is stored on the computer.
+## <a href="" id="bkmk-step2"></a>Step 2: Identify settings to collect and determine where each setting is stored on the computer.
 
 
 Next, you should go through the user interface and make a list of all of the available settings. You can reduce the list if there are settings that you do not want to migrate. To determine where each setting is stored, you will need to change each setting and monitor the activity on the registry and the file system. You do not need to migrate the binary files and registry settings that are made when the application is installed. This is because you will need to reinstall the application onto the destination computer. You only need to migrate those settings that are customizable.
 
-### 
+### <a href="" id="bkmkdetermine"></a>
 
 **How To Determine Where Each Setting is Stored**
 
@@ -83,7 +83,7 @@ Next, you should go through the user interface and make a list of all of the ava
 
      
 
-## Step 3: Identify how to apply the gathered settings.
+## <a href="" id="bkmk-step3"></a>Step 3: Identify how to apply the gathered settings.
 
 
 If the version of the application on the source computer is the same as the one on the destination computer, then you do not have to modify the collected files and registry keys. By default, USMT migrates the files and registry keys from the source location to the corresponding location on the destination computer. For example, if a file was collected from the C:\\Documents and Settings\\User1\\My Documents folder and the profile directory on the destination computer is located at D:\\Users\\User1, then USMT will automatically migrate the file to D:\\Users\\User1\\My Documents. However, you may need to modify the location of some settings in the following three cases:
@@ -94,9 +94,9 @@ In this case, the newer version of the application may be able to read the setti
 
 -   **The newer version of the application has the ability to import settings from an older version.** This mapping usually happens the first time a user runs the newer version after the settings have been migrated. Some applications do this automatically after settings are migrated; however, other applications will only do this if the application was upgraded from the older version. When the application is upgraded, a set of files and/or registry keys is installed that indicates the older version of the application was previously installed. If you perform a clean installation of the newer version (which is the case in most migrations), the computer does not contain this set of files and registry keys so the mapping does not occur. In order to trick the newer version of the application into initiating this import process, your migration script may need to create these files and/or registry keys on the destination computer.
 
-    To identify which files and/or registry keys/values need to be created to cause the import, you should upgrade the older version of the application to the newer one and monitor the changes made to the file system and registry by using the same process described in [How To determine where each setting is stored](#BKMKDetermine). Once you know the set of files that the computer needs, you can use the &lt;`addObjects`&gt; element to add them to the destination computer.
+    To identify which files and/or registry keys/values need to be created to cause the import, you should upgrade the older version of the application to the newer one and monitor the changes made to the file system and registry by using the same process described in [How To determine where each setting is stored](#bkmkdetermine). Once you know the set of files that the computer needs, you can use the &lt;`addObjects`&gt; element to add them to the destination computer.
 
--   [The newer version of the application cannot read settings from the source computer and it is also unable to import the settings into the new format.](#BKMKDetermine) In this case, you will need to create a mapping for each setting from the old locations to the new locations. To do this, determine where the newer version stores each setting using the process described in How to determine where each setting is stored. After you have created the mapping, apply the settings to the new location on the destination computer using the &lt;`locationModify`&gt; element, and the **RelativeMove** and **ExactMove** helper functions.
+-   [The newer version of the application cannot read settings from the source computer and it is also unable to import the settings into the new format.](#bkmkdetermine) In this case, you will need to create a mapping for each setting from the old locations to the new locations. To do this, determine where the newer version stores each setting using the process described in How to determine where each setting is stored. After you have created the mapping, apply the settings to the new location on the destination computer using the &lt;`locationModify`&gt; element, and the **RelativeMove** and **ExactMove** helper functions.
 
 ### Case 2: The destination computer already contains settings for the application.
 
@@ -106,7 +106,7 @@ We recommend that you migrate the settings after you install the application, bu
 
 We recommend that you migrate the settings after you install the application, but before the user runs the application for the first time. We recommend this because this ensures that there are no settings on the destination computer when you migrate the settings. Also, when some applications are installed, they overwrite any existing settings that are on the computer. In this scenario, if you migrated the data before you installed the application, your customized settings would be overwritten. This is common for applications that store settings in locations that are outside of the user profile (typically these are settings that apply to all users). These universal settings are sometimes overwritten when an application is installed, and they are replaced by default values. To avoid this, you must install these applications before migrating the files and settings to the destination computer. By default with USMT, data from the source computer overwrites data that already exists in the same location on the destination computer.
 
-## Step 4: Create the migration XML component for the application
+## <a href="" id="bkmk-step4"></a>Step 4: Create the migration XML component for the application
 
 
 After you have completed steps 1 through 3, you will need to create a custom migration .xml file that migrates the application based on the information that you now have. You can use the MigApp.xml file as a model because it contains examples of many of the concepts discussed in this topic. You can also see [Custom XML Examples](custom-xml-examples-usmt-win7-usmt-win8.md) for another sample .xml file.
@@ -139,7 +139,7 @@ Your script should do the following:
 
 For information about the .xml elements and helper functions, see [XML Elements Library](xml-elements-library-usmt-win7-usmt-win8.md).
 
-## Step 5: Test the application settings migration
+## <a href="" id="bkmk-step5"></a>Step 5: Test the application settings migration
 
 
 On a test computer, install the operating system that will be installed on the destination computers. For example, if you are planning on migrating from Windows 7 to Windows 10, install Windows 10 and the application. Next, run LoadState on the test computer and verify that all settings migrate. Make corrections if necessary and repeat the process until all the necessary settings are migrated correctly.
diff --git a/windows/deploy/migrate-user-accounts-usmt.md b/windows/deploy/migrate-user-accounts-usmt.md
index 2d1651ea11..478cab9257 100644
--- a/windows/deploy/migrate-user-accounts-usmt.md
+++ b/windows/deploy/migrate-user-accounts-usmt.md
@@ -16,13 +16,13 @@ By default, all users are migrated. The only way to specify which users to inclu
 ## In this Topic
 
 
--   [To migrate all user accounts and user settings](#BKMK_MigrateAll)
+-   [To migrate all user accounts and user settings](#bkmk-migrateall)
 
--   [To migrate two domain accounts (User1 and User2)](#BKMK_MigrateTwo)
+-   [To migrate two domain accounts (User1 and User2)](#bkmk-migratetwo)
 
--   [To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain](#BKMK_MigrateMoveUserOne)
+-   [To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain](#bkmk-migratemoveuserone)
 
-## To migrate all user accounts and user settings
+## <a href="" id="bkmk-migrateall"></a>To migrate all user accounts and user settings
 
 
 1.  Log on to the source computer as an administrator, and specify the following in a **Command-Prompt** window:
@@ -46,7 +46,7 @@ By default, all users are migrated. The only way to specify which users to inclu
 
          
 
-## To migrate two domain accounts (User1 and User2)
+## <a href="" id="bkmk-migratetwo"></a>To migrate two domain accounts (User1 and User2)
 
 
 1.  Log on to the source computer as an administrator, and specify:
@@ -59,7 +59,7 @@ By default, all users are migrated. The only way to specify which users to inclu
 
     `loadstate \\server\share\migration\mystore /i:migdocs.xml /i:migapp.xml`
 
-## To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain
+## <a href="" id="bkmk-migratemoveuserone"></a>To migrate two domain accounts (User1 and User2) and move User1 from the Contoso domain to the Fabrikam domain
 
 
 1.  Log on to the source computer as an administrator, and type the following at the command-line prompt:
diff --git a/windows/deploy/migration-store-types-overview.md b/windows/deploy/migration-store-types-overview.md
index d2a022979d..ec76f7eaee 100644
--- a/windows/deploy/migration-store-types-overview.md
+++ b/windows/deploy/migration-store-types-overview.md
@@ -16,13 +16,13 @@ When planning your migration, you should determine which migration store type be
 ## In This Topic
 
 
-[Migration Store Types](#BKMK_Types)
+[Migration Store Types](#bkmk-types)
 
-[Local Store vs. Remote Store](#BKMK_LocalVRemote)
+[Local Store vs. Remote Store](#bkmk-localvremote)
 
-[The /localonly Command-Line Option](#BKMK_LocalOnly)
+[The /localonly Command-Line Option](#bkmk-localonly)
 
-## Migration Store Types
+## <a href="" id="bkmk-types"></a>Migration Store Types
 
 
 This section describes the three migration store types available in USMT.
@@ -45,7 +45,7 @@ The following flowchart illustrates the procedural differences between a local m
 
 ![migration store comparison](images/dep-win8-l-usmt-migrationcomparemigstores.gif)
 
-## Local Store vs. Remote Store
+## <a href="" id="bkmk-localvremote"></a>Local Store vs. Remote Store
 
 
 If you have enough space and you are migrating the user state back to the same computer, storing data on a local device is normally the best option to reduce server storage costs and network performance issues. You can store the data locally either on a different partition or on a removable device such as a USB flash drive (UFD). Also, depending on the imaging technology that you are using, you might be able to store the data on the partition that is being re-imaged, if the data will be protected from deletion during the process. To increase performance, store the data on high-speed drives that use a high-speed network connection. It is also good practice to ensure that the migration is the only task the server is performing.
@@ -57,7 +57,7 @@ If possible, have users store their data within their %UserProfile%\\My Document
 
  
 
-### The /localonly Command-Line Option
+### <a href="" id="bkmk-localonly"></a>The /localonly Command-Line Option
 
 You should use this option to exclude the data from removable drives and network drives mapped on the source computer. For more information about what is excluded when you specify **/LocalOnly**, see [ScanState Syntax](scanstate-syntax-usmt-win7-usmt-win8.md).
 
diff --git a/windows/deploy/monitor-the-windows-81-deployment-with-configuration-manager.md b/windows/deploy/monitor-the-windows-81-deployment-with-configuration-manager.md
index 6cc9eae12c..fc9f1fa1ba 100644
--- a/windows/deploy/monitor-the-windows-81-deployment-with-configuration-manager.md
+++ b/windows/deploy/monitor-the-windows-81-deployment-with-configuration-manager.md
@@ -19,7 +19,7 @@ author: CFaw
 **In this article**
 
 -   [](#)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to monitor a Windows 10 deployment that was started previously using Microsoft System Center 2012 R2 Configuration Manager and the Microsoft Deployment Toolkit (MDT) Deployment Workbench. You will also use the Deployment Workbench to access the computer remotely via the Microsoft Diagnostics and Recovery Toolkit (DaRT) Remote Connection feature.
 
diff --git a/windows/deploy/offline-migration-reference.md b/windows/deploy/offline-migration-reference.md
index cbabd15764..5c0149bf07 100644
--- a/windows/deploy/offline-migration-reference.md
+++ b/windows/deploy/offline-migration-reference.md
@@ -28,19 +28,19 @@ When you use User State Migration Tool (USMT) 10.0 to gather and restore user s
 ## In This Topic
 
 
--   [What Will Migrate Offline?](#BKMK_WhatWillMigrate)
+-   [What Will Migrate Offline?](#bkmk-whatwillmigrate)
 
--   [What Offline Environments are Supported?](#BKMK_OfflineEnvironments)
+-   [What Offline Environments are Supported?](#bkmk-offlineenvironments)
 
--   [User-Group Membership and Profile Control](#BKMK_UserGroupMembership)
+-   [User-Group Membership and Profile Control](#bkmk-usergroupmembership)
 
--   [Command-Line Options](#BKMK_CommandLineOptions)
+-   [Command-Line Options](#bkmk-commandlineoptions)
 
--   [Environment Variables](#BKMK_EnvironmentVariables)
+-   [Environment Variables](#bkmk-environmentvariables)
 
--   [Offline.xml Elements](#BKMK_OfflineXML)
+-   [Offline.xml Elements](#bkmk-offlinexml)
 
-## What Will Migrate Offline?
+## <a href="" id="bkmk-whatwillmigrate"></a>What Will Migrate Offline?
 
 
 The following user data and settings migrate offline, similar to an online migration:
@@ -59,7 +59,7 @@ The following user data and settings migrate offline, similar to an online migra
 
 For exceptions to what you can migrate offline, see [What Does USMT Migrate?](what-does-usmt-migrate-usmt-win7-usmt-win8.md)
 
-## What Offline Environments are Supported?
+## <a href="" id="bkmk-offlineenvironments"></a>What Offline Environments are Supported?
 
 
 The following table defines the supported combination of online and offline operating systems in USMT.
@@ -94,7 +94,7 @@ It is possible to run the ScanState tool while the drive remains encrypted by su
 
  
 
-## User-Group Membership and Profile Control
+## <a href="" id="bkmk-usergroupmembership"></a>User-Group Membership and Profile Control
 
 
 User-group membership is not preserved during offline migrations. You must configure a **&lt;ProfileControl&gt;** section in the Config.xml file to specify the groups that the migrated users should be made members of. The following example places all migrated users into the Users group:
@@ -117,7 +117,7 @@ User-group membership is not preserved during offline migrations. You must confi
 
 For information about the format of a Config.xml file, see [Config.xml File](configxml-file-usmt-win7-usmt-win8.md).
 
-## Command-Line Options
+## <a href="" id="bkmk-commandlineoptions"></a>Command-Line Options
 
 
 An offline migration can either be enabled by using a configuration file on the command line, or by using one of the following command line options:
@@ -158,7 +158,7 @@ An offline migration can either be enabled by using a configuration file on the
 
 You can use only one of the **/offline**,**/offlineWinDir** , or **/OfflineWinOld** command-line options at a time; USMT does not support using more than one together.
 
-## Environment Variables
+## <a href="" id="bkmk-environmentvariables"></a>Environment Variables
 
 
 The following system environment variables are necessary in the scenarios outlined below.
@@ -194,24 +194,24 @@ The following system environment variables are necessary in the scenarios outlin
 
  
 
-## Offline.xml Elements
+## <a href="" id="bkmk-offlinexml"></a>Offline.xml Elements
 
 
 Use an offline.xml file when running the ScanState tool on a computer that has multiple Windows directories. The offline.xml file specifies which directories to scan for windows files. An offline.xml file can be used with the /offline option as an alternative to specifying a single Windows directory path with the /offlineDir option.
 
-### &lt;offline&gt;
+### <a href="" id="-offline-"></a>&lt;offline&gt;
 
 This element contains other elements that define how an offline migration is to be performed.
 
 Syntax: &lt;offline&gt; &lt;/offline&gt;
 
-### &lt;winDir&gt;
+### <a href="" id="-windir-"></a>&lt;winDir&gt;
 
 This element is a required child of **&lt;offline&gt;** and contains information about how the offline volume can be selected. The migration will be performed from the first element of **&lt;winDir&gt;** that contains a valid Windows system volume.
 
 Syntax: &lt; winDir &gt; &lt;/ winDir &gt;
 
-### &lt;path&gt;
+### <a href="" id="-path-"></a>&lt;path&gt;
 
 This element is a required child of **&lt;winDir&gt;** and contains a file path pointing to a valid Windows directory. Relative paths are interpreted from the ScanState tool’s working directory.
 
@@ -221,13 +221,13 @@ Syntax: &lt;path&gt; c:\\windows &lt;/path&gt;
 
 Syntax, when used with the **&lt;mappings&gt;** element: &lt;path&gt; C:\\, D:\\ &lt;/path&gt;
 
-### &lt;mappings&gt;
+### <a href="" id="-mappings-"></a>&lt;mappings&gt;
 
 This element is an optional child of **&lt;offline&gt;**. When specified, the **&lt;mappings&gt;** element will override the automatically detected WinPE drive mappings. Each child **&lt;path&gt;** element will provide a mapping from one system volume to another. Additionally, mappings between folders can be provided, since an entire volume can be mounted to a specific folder.
 
 Syntax: &lt;mappings&gt; &lt;/mappings&gt;
 
-### &lt;failOnMultipleWinDir&gt;
+### <a href="" id="-failonmultiplewindir-"></a>&lt;failOnMultipleWinDir&gt;
 
 This element is an optional child of **&lt;offline&gt;**. The **&lt;failOnMultipleWinDir&gt;** element allows the user to specify that the migration should fail when USMT detects that there are multiple instances of Windows installed on the source machine. When the **&lt;failOnMultipleWinDir&gt;** element isn’t present, the default behavior is that the migration does not fail.
 
diff --git a/windows/deploy/prepare-for-deployment-with-mdt-2013.md b/windows/deploy/prepare-for-deployment-with-mdt-2013.md
index 0654421e74..99c5933f50 100644
--- a/windows/deploy/prepare-for-deployment-with-mdt-2013.md
+++ b/windows/deploy/prepare-for-deployment-with-mdt-2013.md
@@ -25,13 +25,13 @@ author: CFaw
 -   [Create the MDT service account](#sec05)
 -   [Create and share the logs folder](#sec06)
 -   [Use CMTrace to read log files (optional)](#sec07)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT) 2013 Update 1. It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the files system and in Active Directory.
 
 For the purposes of this topic, we will use two machines: DC01 and MDT01. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. MDT01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md#proof).
 
-## System requirements
+## <a href="" id="sec01"></a>System requirements
 
 
 MDT 2013 Update 1 requires the following components:
@@ -58,7 +58,7 @@ MDT 2013 Update 1 requires the following components:
 
 -   Microsoft .NET Framework
 
-## Install Windows ADK for Windows 10
+## <a href="" id="sec02"></a>Install Windows ADK for Windows 10
 
 
 These steps assume that you have the MDT01 member server installed and configured and that you have downloaded [Windows ADK for Windows 10](http://go.microsoft.com/fwlink/p/?LinkId=526803) to the E:\\Downloads\\ADK folder.
@@ -75,7 +75,7 @@ These steps assume that you have the MDT01 member server installed and configure
 
     3.  User State Migration Tool (UMST)
 
-## Install MDT 2013 Update 1
+## <a href="" id="sec03"></a>Install MDT 2013 Update 1
 
 
 These steps assume that you have downloaded [MDT 2013 Update 1](http://go.microsoft.com/fwlink/p/?LinkId=618117 ) to the E:\\Downloads\\MDT 2013 folder on MDT01.
@@ -84,7 +84,7 @@ These steps assume that you have downloaded [MDT 2013 Update 1](http://go.micros
 
 2.  Install **MDT** (E:\\Downloads\\MDT 2013\\MicrosoftDeploymentToolkit2013\_x64.msi) with the default settings.
 
-## Create the OU structure
+## <a href="" id="sec04"></a>Create the OU structure
 
 
 If you do not have an organizational unit (OU) structure in your Active Directory, you should create one. In this section, you create an OU structure and a service account for MDT 2013 Update 1.
@@ -121,7 +121,7 @@ If you do not have an organizational unit (OU) structure in your Active Director
 
 Figure 6. A sample of how the OU structure will look after all the OUs are created.
 
-## Create the MDT service account
+## <a href="" id="sec05"></a>Create the MDT service account
 
 
 When creating a reference image, you need an account for MDT. The MDT Build Account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01.
@@ -142,7 +142,7 @@ When creating a reference image, you need an account for MDT. The MDT Build Acco
 
     6.  Password never expires: Selected
 
-## Create and share the logs folder
+## <a href="" id="sec06"></a>Create and share the logs folder
 
 
 By default MDT stores the log files locally on the client. In order to capture a reference image, you will need to enable server-side logging and, to do that, you will need to have a folder in which to store the logs. For more information, see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md).
@@ -161,7 +161,7 @@ By default MDT stores the log files locally on the client. In order to capture a
 
 Figure 7. The Sharing tab of the E:\\Logs folder after sharing it with PowerShell.
 
-## Use CMTrace to read log files (optional)
+## <a href="" id="sec07"></a>Use CMTrace to read log files (optional)
 
 
 The log files in MDT Lite Touch are formatted to be read by Configuration Manager Trace (CMTrace), which is available as part [of Microsoft System Center 2012 R2 Configuration Manager Toolkit](http://go.microsoft.com/fwlink/p/?LinkId=734717). You can use Notepad, but CMTrace formatting makes the logs easier to read.
diff --git a/windows/deploy/prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md b/windows/deploy/prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md
index b6f79c355d..3a26d0da3a 100644
--- a/windows/deploy/prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md
+++ b/windows/deploy/prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md
@@ -26,7 +26,7 @@ author: CFaw
 -   [Configure the client settings](#sec06)
 -   [Configure the Network Access account](#sec07)
 -   [Enable PXE on the CM01 distribution point](#sec08)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will walk you through the process of integrating Microsoft System Center 2012 R2 Configuration Manager SP1 with Microsoft Deployment Toolkit (MDT) 2013 Update 1, as well as the other preparations needed to deploying Windows 10 via Zero Touch Installation. Additional preparations include the installation of hotfixes as well as activities that speed up the Pre-Boot Execution Environment (PXE).
 
@@ -51,7 +51,7 @@ In this topic, you will use an existing Configuration Manager server structure t
 
 For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. DC01 and CM01 are both members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md).
 
-## Create the Configuration Manager service accounts
+## <a href="" id="sec01"></a>Create the Configuration Manager service accounts
 
 
 To configure permissions for the various service accounts needed for operating system deployment in Configuration Manager, you use a role-based model. To create the Configuration Manager Join Domain account as well as the Configuration Manager Network Access account, follow these steps:
@@ -84,7 +84,7 @@ To configure permissions for the various service accounts needed for operating s
 
 Figure 6. The Configuration Manager service accounts used for operating system deployment.
 
-## Configure Active Directory permissions
+## <a href="" id="sec02"></a>Configure Active Directory permissions
 
 
 In order for the Configuration Manager Join Domain Account (CM\_JD) to join machines into the contoso.com domain you need to configure permissions in Active Directory. These steps assume you have downloaded the sample [Set-OUPermissions.ps1 script](http://go.microsoft.com/fwlink/p/?LinkId=619362) and copied it to C:\\Setup\\Scripts on DC01.
@@ -128,7 +128,7 @@ In order for the Configuration Manager Join Domain Account (CM\_JD) to join mach
 
     12. Validated write to service principal name
 
-## Review the Sources folder structure
+## <a href="" id="sec03"></a>Review the Sources folder structure
 
 
 To support the packages you create in this section, the following folder structure should be created on the Configuration Manager primary site server (CM01):
@@ -164,7 +164,7 @@ In most production environments, the packages are stored on a Distributed File S
 
 Figure 7. The E:\\Sources\\OSD folder structure.
 
-## Integrate Configuration Manager with MDT
+## <a href="" id="sec04"></a>Integrate Configuration Manager with MDT
 
 
 To extend the Configuration Manager console with MDT 2013 Update 1 wizards and templates, you install MDT 2013 Update 1 in the default location and run the integration setup. In these steps, we assume you have downloaded MDT 2013 Update 1 to the C:\\Setup\\MDT2013 folder on CM01.
@@ -187,7 +187,7 @@ To extend the Configuration Manager console with MDT 2013 Update 1 wizards and t
 
 Figure 8. Set up the MDT 2013 Update 1 integration with Configuration Manager.
 
-## Configure the client settings
+## <a href="" id="sec06"></a>Configure the client settings
 
 
 Most organizations want to display their name during deployment. In this section, you configure the default Configuration Manager client settings with the Contoso organization name.
@@ -206,7 +206,7 @@ Figure 9. Configure the organization name in client settings.
 
 Figure 10. The Contoso organization name displayed during deployment.
 
-## Configure the Network Access account
+## <a href="" id="sec07"></a>Configure the Network Access account
 
 
 Configuration Manager uses the Network Access account during the Windows 10 deployment process to access content on the distribution point(s). In this section, you configure the Network Access account.
@@ -221,7 +221,7 @@ Configuration Manager uses the Network Access account during the Windows 10 depl
 
 Figure 11. Test the connection for the Network Access account.
 
-## Enable PXE on the CM01 distribution point
+## <a href="" id="sec08"></a>Enable PXE on the CM01 distribution point
 
 
 Configuration Manager has many options for starting a deployment, but starting via PXE is certainly the most flexible in a large environment. In this section, you enable PXE on the CM01 distribution point.
diff --git a/windows/deploy/recognized-environment-variables-usmt-win7-usmt-win8.md b/windows/deploy/recognized-environment-variables-usmt-win7-usmt-win8.md
index 669d061d51..2984748171 100644
--- a/windows/deploy/recognized-environment-variables-usmt-win7-usmt-win8.md
+++ b/windows/deploy/recognized-environment-variables-usmt-win7-usmt-win8.md
@@ -16,11 +16,11 @@ When using the XML files MigDocs.xml, MigApp.xml, and MigUser.xml, you can use e
 ## In This Topic
 
 
--   [Variables that are processed for the operating system and in the context of each user](#BKMK_1)
+-   [Variables that are processed for the operating system and in the context of each user](#bkmk-1)
 
--   [Variables that are recognized only in the user context](#BKMK_2)
+-   [Variables that are recognized only in the user context](#bkmk-2)
 
-## Variables that are processed for the operating system and in the context of each user
+## <a href="" id="bkmk-1"></a>Variables that are processed for the operating system and in the context of each user
 
 
 You can use these variables within sections in the .xml files with `context=UserAndSystem`, `context=User`, and `context=System`.
@@ -266,7 +266,7 @@ You can use these variables within sections in the .xml files with `context=User
 
  
 
-## Variables that are recognized only in the user context
+## <a href="" id="bkmk-2"></a>Variables that are recognized only in the user context
 
 
 You can use these variables in the .xml files within sections with `context=User` and `context=UserAndSystem`.
diff --git a/windows/deploy/refresh-a-windows-7-computer-with-windows-81.md b/windows/deploy/refresh-a-windows-7-computer-with-windows-81.md
index fed3f67c8a..3aae2f7064 100644
--- a/windows/deploy/refresh-a-windows-7-computer-with-windows-81.md
+++ b/windows/deploy/refresh-a-windows-7-computer-with-windows-81.md
@@ -21,7 +21,7 @@ author: CFaw
 -   [The computer refresh process](#sec01)
 -   [Create a custom User State Migration Tool (USMT) template](#sec02)
 -   [Refresh a Windows 7 SP1 client](#sec03)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will show you how to use MDT 2013 Update 1 Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. The refresh scenario, or computer refresh, is a reinstallation of an operating system on the same machine. You can refresh the machine to the same operating system as it is currently running, or to a later version.
 
@@ -31,7 +31,7 @@ For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0
 
 Figure 1. The machines used in this topic.
 
-## The computer refresh process
+## <a href="" id="sec01"></a>The computer refresh process
 
 
 Even though a computer will appear, to the end user, to be upgraded, a computer refresh is not, technically, an in-place upgrade. A computer refresh also involves taking care of user data and settings from the old installation and making sure to restore those at the end of the installation.
@@ -70,7 +70,7 @@ You also can combine the preceding switches with the /uel switch, which excludes
 
 In addition to the command-line switches that control which profiles to migrate, the XML templates control exactly what data is being migrated. You can control data within and outside the user profiles
 
-## Create a custom User State Migration Tool (USMT) template
+## <a href="" id="sec02"></a>Create a custom User State Migration Tool (USMT) template
 
 
 In this section, you learn to migrate additional data using a custom template. You configure the environment to use a custom USMT XML template that will:
@@ -101,7 +101,7 @@ In order to use the custom MigContosoData.xml USMT template, you need to copy it
 
 3.  Save the CustomSettings.ini file.
 
-## Refresh a Windows 7 SP1 client
+## <a href="" id="sec03"></a>Refresh a Windows 7 SP1 client
 
 
 After adding the additional USMT template and configuring the CustomSettings.ini file to use it, you are now ready to refresh a Windows 7 SP1 client to Windows 10. In these steps, we assume you have a Windows 7 SP1 client named PC0001 in your environment that is ready for a refresh to Windows 10.
diff --git a/windows/deploy/refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md b/windows/deploy/refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md
index 3fcae5adee..98438e2940 100644
--- a/windows/deploy/refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md
+++ b/windows/deploy/refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md
@@ -21,7 +21,7 @@ author: CFaw
 -   [Create a device collection and add the PC0003 computer](#sec01)
 -   [Create a new deployment](#sec02)
 -   [Initiate a computer refresh](#sec03)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will show you how to use a previously created task sequence to refresh a Windows 7 SP1 client with Windows 10 using Microsoft System Center 2012 R2 Configuration Manager and Microsoft Deployment Toolkit (MDT) 2013 Update 1. When refreshing a machine to a later version, it appears as an upgrade to the end user, but technically it is not an in-place upgrade. A computer refresh also involves taking care of user data and settings from the old installation and making sure to restore those at the end of the installation. For more information, see [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md).
 
@@ -41,7 +41,7 @@ For the purposes of this topic, we will use three machines: DC01, CM01, and PC00
 
 In this topic, we assume that you have a Windows 7 SP1 client named PC0003 with the Configuration Manager client installed.
 
-## Create a device collection and add the PC0003 computer
+## <a href="" id="sec01"></a>Create a device collection and add the PC0003 computer
 
 
 1.  On CM01, using the Configuration Manager console, in the Asset and Compliance workspace, right-click **Device Collections**, and then select **Create Device Collection**. Use the following settings:
@@ -73,7 +73,7 @@ It may take a short while for the collection to refresh; you can view progress v
 
  
 
-## Create a new deployment
+## <a href="" id="sec02"></a>Create a new deployment
 
 
 Using the Configuration Manager console, in the Software Library workspace, select **Task Sequences**, right-click **Windows 10 Enterprise x64 RTM**, and then select **Deploy**. Use the following settings:
@@ -109,7 +109,7 @@ Using the Configuration Manager console, in the Software Library workspace, sele
 
     -   &lt;default&gt;
 
-## Initiate a computer refresh
+## <a href="" id="sec03"></a>Initiate a computer refresh
 
 
 Now you can start the computer refresh on PC0003.
diff --git a/windows/deploy/replace-a-windows-7-computer-with-a-windows-81-computer.md b/windows/deploy/replace-a-windows-7-computer-with-a-windows-81-computer.md
index 356686b495..ab75a44ad2 100644
--- a/windows/deploy/replace-a-windows-7-computer-with-a-windows-81-computer.md
+++ b/windows/deploy/replace-a-windows-7-computer-with-a-windows-81-computer.md
@@ -20,7 +20,7 @@ author: CFaw
 
 -   [Prepare for the computer replace](#sec01)
 -   [Perform the computer replace](#sec02)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 A computer replace scenario for Windows 10 is quite similar to a computer refresh for Windows 10; however, because you are replacing a machine, you cannot store the backup on the old computer. Instead you need to store the backup to a location where the new computer can read it.
 
@@ -30,7 +30,7 @@ For the purposes of this topic, we will use four machines: DC01, MDT01, PC0002,
 
 Figure 1. The machines used in this topic.
 
-## Prepare for the computer replace
+## <a href="" id="sec01"></a>Prepare for the computer replace
 
 
 When preparing for the computer replace, you need to create a folder in which to store the backup, and a backup only task sequence that you run on the old computer.
@@ -74,7 +74,7 @@ When preparing for the computer replace, you need to create a folder in which to
 
     Figure 2. The Backup Only Task Sequence action list.
 
-## Perform the computer replace
+## <a href="" id="sec02"></a>Perform the computer replace
 
 
 During a computer replace, these are the high-level steps that occur:
diff --git a/windows/deploy/replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md b/windows/deploy/replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md
index 4dc93c3e2a..6c14b65cfa 100644
--- a/windows/deploy/replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md
+++ b/windows/deploy/replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md
@@ -24,7 +24,7 @@ author: CFaw
 -   [Create a new deployment](#sec04)
 -   [Verify the backup](#sec05)
 -   [Deploy the new computer](#sec06)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to replacing a Windows 7 SP1 computer using Microsoft System Center 2012 R2 Configuration Manager. This process is similar to refreshing a computer, but since you are replacing the machine, you have to run the backup job separately from the deployment of Windows 10.
 
@@ -32,7 +32,7 @@ For the purposes of this topic, we will use three machines: DC01, CM01, and PC00
 
 In this topic, you will create a backup-only task sequence that you run on PC0004, the machine you are replacing. For more information, see [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md).
 
-## Create a replace task sequence
+## <a href="" id="sec01"></a>Create a replace task sequence
 
 
 1.  On CM01, using the Configuration Manager Console, in the Software Library workspace, expand **Operating Systems**, right-click **Task Sequences**, and select **Create MDT Task Sequence**.
@@ -63,7 +63,7 @@ In this topic, you will create a backup-only task sequence that you run on PC000
 
 Figure 34. The backup-only task sequence (named Replace Task Sequence).
 
-## Associate the new machine with the old computer
+## <a href="" id="sec02"></a>Associate the new machine with the old computer
 
 
 This section walks you through the process of associating a blank machine, PC0006, with an old machine, PC0004, for the purpose of replacing PC0004 with PC0006. PC0006 can be either a physical or virtual machine.
@@ -100,7 +100,7 @@ This section walks you through the process of associating a blank machine, PC000
 
 11. Review the Install Windows 10 Enterprise x64 collection. Do not continue until you see the PC0006 machine in the collection. You might have to update and refresh the collection again.
 
-## Create a device collection and add the PC0004 computer
+## <a href="" id="sec03"></a>Create a device collection and add the PC0004 computer
 
 
 1.  On CM01, using the Configuration Manager console, in the Asset and Compliance workspace, right-click **Device Collections**, and then select **Create Device Collection**. Use the following settings.
@@ -127,7 +127,7 @@ This section walks you through the process of associating a blank machine, PC000
 
 2.  Review the USMT Backup (Replace) collection. Do not continue until you see the PC0004 machine in the collection.
 
-## Create a new deployment
+## <a href="" id="sec04"></a>Create a new deployment
 
 
 Using the Configuration Manager console, in the Software Library workspace, select **Task Sequences**, right-click **Replace Task Sequence**, and then select **Deploy**. Use the following settings:
@@ -158,7 +158,7 @@ Using the Configuration Manager console, in the Software Library workspace, sele
 
     -   &lt;default&gt;
 
-## Verify the backup
+## <a href="" id="sec05"></a>Verify the backup
 
 
 This section assumes that you have a machine named PC0004 with the Configuration Manager 2012 client installed.
@@ -187,7 +187,7 @@ It may take a few minutes for the user state store location to be populated.
 
  
 
-## Deploy the new computer
+## <a href="" id="sec06"></a>Deploy the new computer
 
 
 1.  Start the PC0006 virtual machine, press **F12** to Pre-Boot Execution Environment (PXE) boot when prompted. Allow it to boot Windows Preinstallation Environment (Windows PE), and then complete the deployment wizard using the following settings:
diff --git a/windows/deploy/reroute-files-and-settings-usmt.md b/windows/deploy/reroute-files-and-settings-usmt.md
index 8a6dc28a97..cc0699e990 100644
--- a/windows/deploy/reroute-files-and-settings-usmt.md
+++ b/windows/deploy/reroute-files-and-settings-usmt.md
@@ -15,13 +15,13 @@ To reroute files and settings, create a custom .xml file and specify this file n
 
 In this topic:
 
--   [Reroute a Folder](#BKMK_RerouteFolder)
+-   [Reroute a Folder](#bkmk-reroutefolder)
 
--   [Reroute a Specific File Type](#BKMK_RerouteSpecFileType)
+-   [Reroute a Specific File Type](#bkmk-reroutespecfiletype)
 
--   [Reroute a Specific File](#BKMK_RerouteSpecificFile)
+-   [Reroute a Specific File](#bkmk-reroutespecificfile)
 
-## Reroute a Folder
+## <a href="" id="bkmk-reroutefolder"></a>Reroute a Folder
 
 
 The following custom .xml file migrates the directories and files from C:\\EngineeringDrafts into the My Documents folder of every user. %CSIDL\_PERSONAL% is the virtual folder representing the My Documents desktop item, which is equivalent to CSIDL\_MYDOCUMENTS.
@@ -50,7 +50,7 @@ The following custom .xml file migrates the directories and files from C:\\Engin
 </migration>
 ```
 
-## Reroute a Specific File Type
+## <a href="" id="bkmk-reroutespecfiletype"></a>Reroute a Specific File Type
 
 
 The following custom .xml file reroutes .mp3 files located in the fixed drives on the source computer into the C:\\Music folder on the destination computer.
@@ -78,7 +78,7 @@ The following custom .xml file reroutes .mp3 files located in the fixed drives o
 </migration> 
 ```
 
-## Reroute a Specific File
+## <a href="" id="bkmk-reroutespecificfile"></a>Reroute a Specific File
 
 
 The following custom .xml file migrates the Sample.doc file from C:\\EngineeringDrafts into the My Documents folder of every user. %CSIDL\_PERSONAL% is the virtual folder representing the My Documents desktop item, which is equivalent to CSIDL\_MYDOCUMENTS.
diff --git a/windows/deploy/return-codes-usmt-win8.md b/windows/deploy/return-codes-usmt-win8.md
index 3e5a3bf445..967a8edf1d 100644
--- a/windows/deploy/return-codes-usmt-win8.md
+++ b/windows/deploy/return-codes-usmt-win8.md
@@ -18,13 +18,13 @@ Understanding the requirements for running USMT can help minimize errors in your
 ## In This Topic
 
 
-[USMT Return Codes](#BKMK_ReturnCodes)
+[USMT Return Codes](#bkmk-returncodes)
 
-[USMT Error Messages](#BKMK_ErrorMessages)
+[USMT Error Messages](#bkmk-errormessages)
 
-[Troubleshooting Return Codes and Error Messages](#BKMK_TSCodesErrors)
+[Troubleshooting Return Codes and Error Messages](#bkmk-tscodeserrors)
 
-## USMT Return Codes
+## <a href="" id="bkmk-returncodes"></a>USMT Return Codes
 
 
 If you encounter an error in your USMT migration, you can use return codes and the more specific information provided in the associated USMT error messages to troubleshoot the issue and to identify mitigation steps.
@@ -43,14 +43,14 @@ Fatal Errors
 
 As a best practice, we recommend that you set verbosity level to 5, **/v***:5*, on the **ScanState**, **LoadState**, and **USMTUtils** command lines so that the most detailed reporting is available in the respective USMT logs. You can use a higher verbosity level if you want the log files output to go to a debugger.
 
-## USMT Error Messages
+## <a href="" id="bkmk-errormessages"></a>USMT Error Messages
 
 
 Error messages provide more detailed information about the migration problem than the associated return code. For example, the **ScanState**, **LoadState**, or **USMTUtils** tool might return a code of "11” (for “USMT\_INVALID\_PARAMETERS") and a related error message that reads "/key and /keyfile both specified". The error message is displayed at the command prompt and is identified in the **ScanState**, **LoadState**, or **USMTUtils** log files to help you determine why the return code was received.
 
 You can obtain more information about any listed Windows application programming interface (API) system error codes by typing **net helpmsg** on the command line and, then typing the error code number. For more information about System Error Codes, see [this Microsoft Web site](http://go.microsoft.com/fwlink/p/?LinkId=147060).
 
-## Troubleshooting Return Codes and Error Messages
+## <a href="" id="bkmk-tscodeserrors"></a>Troubleshooting Return Codes and Error Messages
 
 
 The following table lists each return code by numeric value, along with the associated error messages and suggested troubleshooting actions.
diff --git a/windows/deploy/scanstate-syntax-usmt-win7-usmt-win8.md b/windows/deploy/scanstate-syntax-usmt-win7-usmt-win8.md
index fbb4372415..9b5dd7f428 100644
--- a/windows/deploy/scanstate-syntax-usmt-win7-usmt-win8.md
+++ b/windows/deploy/scanstate-syntax-usmt-win7-usmt-win8.md
@@ -16,23 +16,23 @@ The ScanState command is used with the User State Migration Tool (USMT) 10.0 to
 ## In This Topic
 
 
-[Before You Begin](#BKMK_BeforeYouBegin)
+[Before You Begin](#bkmk-beforeyoubegin)
 
-[Syntax](#BKMK_Syntax)
+[Syntax](#bkmk-syntax)
 
-[Storage Options](#BKMK_StorageOptions)
+[Storage Options](#bkmk-storageoptions)
 
-[Migration Rule Options](#BKMK_MigrationRuleOptions)
+[Migration Rule Options](#bkmk-migrationruleoptions)
 
-[Monitoring Options](#BKMK_MonitoringOptions)
+[Monitoring Options](#bkmk-monitoringoptions)
 
-[User Options](#BKMK_UserOptions)
+[User Options](#bkmk-useroptions)
 
-[Encrypted File Options](#BKMK_efs)
+[Encrypted File Options](#bkmk-efs)
 
-[Incompatible Command-Line Options](#BKMK_ICLO)
+[Incompatible Command-Line Options](#bkmk-iclo)
 
-## Before You Begin
+## <a href="" id="bkmk-beforeyoubegin"></a>Before You Begin
 
 
 Before you run the **ScanState** command, note the following:
@@ -47,11 +47,11 @@ Before you run the **ScanState** command, note the following:
 
 -   You can gather domain accounts without the source computer having domain controller access. This functionality is available without any additional configuration.
 
--   The [Incompatible Command-Line Options](#BKMK_ICLO) table lists which options you can use together and which command-line options are incompatible.
+-   The [Incompatible Command-Line Options](#bkmk-iclo) table lists which options you can use together and which command-line options are incompatible.
 
 -   The directory location where you save the migration store will be excluded from the scan. For example, if you save the migration store to the root of the D drive, the D drive and all of its subdirectories will be excluded from the scan.
 
-## Syntax
+## <a href="" id="bkmk-syntax"></a>Syntax
 
 
 This section explains the syntax and usage of the **ScanState** command-line options. The options can be specified in any order. If the option contains a parameter, you can use either a colon or a space separator.
@@ -70,7 +70,7 @@ To create an encrypted store using the Config.xml file and the default migration
 
 `scanstate \\server\share\migration\mystore /i:migapp.xml /i:migdocs.xml /o /config:config.xml /v:13 /encrypt /key:"mykey"`
 
-## Storage Options
+## <a href="" id="bkmk-storageoptions"></a>Storage Options
 
 
 <table>
@@ -136,7 +136,7 @@ To create an encrypted store using the Config.xml file and the default migration
 
  
 
-## Run the ScanState Command on an Offline Windows System
+## <a href="" id="run-the-scanstate-command-on-an-offline-windows-system-"></a>Run the ScanState Command on an Offline Windows System
 
 
 You can run the **ScanState** command in Windows Preinstallation Environment (WinPE). In addition, USMT supports migrations from previous installations of Windows contained in Windows.old directories. The offline directory can be a Windows directory when you run the **ScanState** command in WinPE or a Windows.old directory when you run the **ScanState** command in Windows.
@@ -191,7 +191,7 @@ There are several benefits to running the **ScanState** command on an offline Wi
 
  
 
-## Migration Rule Options
+## <a href="" id="bkmk-migrationruleoptions"></a>Migration Rule Options
 
 
 USMT provides the following options to specify what files you want to migrate.
@@ -295,7 +295,7 @@ USMT provides the following options to specify what files you want to migrate.
 
  
 
-## Monitoring Options
+## <a href="" id="bkmk-monitoringoptions"></a>Monitoring Options
 
 
 USMT provides several options that you can use to analyze problems that occur during migration.
@@ -422,7 +422,7 @@ The ScanState log is created by default, but you can specify the name and locati
 
  
 
-## User Options
+## <a href="" id="bkmk-useroptions"></a>User Options
 
 
 By default, all users are migrated. The only way to specify which users to include and exclude is by using the following options. You cannot exclude users in the migration .xml files or using the Config.xml file. For more information, see [Identify Users](identify-users-usmt-win7-usmt-win8.md) and [Migrate User Accounts](migrate-user-accounts-usmt.md).
@@ -599,7 +599,7 @@ The /**uel** option takes precedence over the /**ue** option. If a user has logg
 
  
 
-## Encrypted File Options
+## <a href="" id="bkmk-efs"></a>Encrypted File Options
 
 
 You can use the following options to migrate encrypted files. In all cases, by default, USMT fails if an encrypted file is found unless you specify an /**efs** option. To migrate encrypted files, you must change the default behavior.
@@ -662,7 +662,7 @@ Take caution when migrating encrypted files. If you migrate an encrypted file wi
 
  
 
-## Incompatible Command-Line Options
+## <a href="" id="bkmk-iclo"></a>Incompatible Command-Line Options
 
 
 The following table indicates which command-line options are not compatible with the **ScanState** command. If the table entry for a particular combination is blank, the options are compatible and you can use them together. The X symbol means that the options are not compatible. For example, you cannot use the **/nocompress** option with the **/encrypt** option.
diff --git a/windows/deploy/scenario-1-online-activation-vamt-30-win8.md b/windows/deploy/scenario-1-online-activation-vamt-30-win8.md
index 6fcfe9b67a..6f71f429ed 100644
--- a/windows/deploy/scenario-1-online-activation-vamt-30-win8.md
+++ b/windows/deploy/scenario-1-online-activation-vamt-30-win8.md
@@ -30,32 +30,32 @@ The Secure Zone represents higher-security Core Network computers that have addi
 ## In This Topic
 
 
--   [Install and start VAMT on a networked host computer](#BKMK_PartOne)
+-   [Install and start VAMT on a networked host computer](#bkmk-partone)
 
--   [Configure the Windows Management Instrumentation firewall exception on target computers](#BKMK_PartTwo)
+-   [Configure the Windows Management Instrumentation firewall exception on target computers](#bkmk-parttwo)
 
--   [Connect to VAMT database](#BKMK_PartThree)
+-   [Connect to VAMT database](#bkmk-partthree)
 
--   [Discover products](#BKMK_PartFour)
+-   [Discover products](#bkmk-partfour)
 
--   [Sort and filter the list of computers](#BKMK_PartFive)
+-   [Sort and filter the list of computers](#bkmk-partfive)
 
--   [Collect status information from the computers in the list](#BKMK_PartSix)
+-   [Collect status information from the computers in the list](#bkmk-partsix)
 
--   [Add product keys and determine the remaining activation count](#BKMK_PartSeven)
+-   [Add product keys and determine the remaining activation count](#bkmk-partseven)
 
--   [Install the product keys](#BKMK_PartEight)
+-   [Install the product keys](#bkmk-parteight)
 
--   [Activate the client products](#BKMK_PartNine)
+-   [Activate the client products](#bkmk-partnine)
 
-## Part 1: Install and Start VAMT on a Networked Host Computer
+## <a href="" id="bkmk-partone"></a>Part 1: Install and Start VAMT on a Networked Host Computer
 
 
 1.  Install VAMT on the host computer.
 
 2.  Click the VAMT icon in the **Start** menu to open VAMT.
 
-## Part 2: Configure the Windows Management Instrumentation Firewall Exception on Target Computers
+## <a href="" id="bkmk-parttwo"></a>Part 2: Configure the Windows Management Instrumentation Firewall Exception on Target Computers
 
 
 -   Ensure that the Windows Management Instrumentation (WMI) firewall exception has been enabled for all target computers. For more information, see [Configure Client Computers](configure-client-computers-vamt-30-win8.md).
@@ -65,7 +65,7 @@ To retrieve product license status, VAMT must have administrative permissions on
 
  
 
-## Part 3: Connect to a VAMT Database
+## <a href="" id="bkmk-partthree"></a>Part 3: Connect to a VAMT Database
 
 
 1.  If you are not already connected to a database, the **Database Connection Settings** dialog box appears when you open VAMT. Select the server and database where the keys that must be activated are located.
@@ -74,7 +74,7 @@ To retrieve product license status, VAMT must have administrative permissions on
 
 3.  If you are already connected to a database, VAMT displays an inventory of the products and product keys in the center pane, and a license overview of the computers in the database. If you need to connect to a different database, click **Successfully connected to Server** to open **the Database Connection Settings** dialog box. For more information about how to create VAMT databases and adding VAMT data, see [Manage VAMT Data](manage-vamt-data-vamt-30-win8.md)
 
-## Part 4: Discover
+## <a href="" id="bkmk-partfour"></a>Part 4: Discover
 
 
 1.  In the left-side pane, in the **Products** node Products, click the product that you want to activate.
@@ -95,7 +95,7 @@ To retrieve product license status, VAMT must have administrative permissions on
 
 When the search is complete, the products that VAMT discovers appear in the product list view in the center pane.
 
-## Part 5: Sort and Filter the List of Computers
+## <a href="" id="bkmk-partfive"></a>Part 5: Sort and Filter the List of Computers
 
 
 You can sort the list of products so that it is easier to find the computers that require product keys to be activated:
@@ -114,7 +114,7 @@ You can sort the list of products so that it is easier to find the computers tha
 
 5.  Click **Filter**. VAMT displays the filtered list in the product list view in the center pane.
 
-## Part 6: Collect Status Information from the Computers in the List
+## <a href="" id="bkmk-partsix"></a>Part 6: Collect Status Information from the Computers in the List
 
 
 To collect the status from select computers in the database, you can select computers in the product list view by using one of the following methods:
@@ -134,7 +134,7 @@ If a computer has more than one supported product installed, VAMT adds an entry
 
  
 
-## Part 7: Add Product Keys and Determine the Remaining Activation Count
+## <a href="" id="bkmk-partseven"></a>Part 7: Add Product Keys and Determine the Remaining Activation Count
 
 
 1.  Click the **Product Keys** node in the left-side pane, and then click **Add Product Keys** in the right-side pane to open the **Add Product Keys** dialog box.
@@ -152,12 +152,12 @@ If you are activating many products with a MAK, refresh the activation count of
 
  
 
-## Part 8: Install the Product Keys
+## <a href="" id="bkmk-parteight"></a>Part 8: Install the Product Keys
 
 
 1.  In the left-side pane, click the product that you want to install keys on to.
 
-2.  If necessary, sort and filter the list of products so that it is easier to find the computers that must have a product key installed. See [Part 5: Sort and filter the list of computers](#BKMK_PartFive).
+2.  If necessary, sort and filter the list of products so that it is easier to find the computers that must have a product key installed. See [Part 5: Sort and filter the list of computers](#bkmk-partfive).
 
 3.  In the **Products** list view pane, select the individual products which must have keys installed. You can use the **CTRL** key or the **SHIFT** key to select more than one product.
 
@@ -174,7 +174,7 @@ Product key installation will fail if VAMT finds mismatched key types or edition
 
  
 
-## Part 9: Activate the Client Products
+## <a href="" id="bkmk-partnine"></a>Part 9: Activate the Client Products
 
 
 1.  Select the individual products that you want to activate in the list-view pane.
diff --git a/windows/deploy/scenario-2-proxy-activation-vamt-30-win8.md b/windows/deploy/scenario-2-proxy-activation-vamt-30-win8.md
index 999bef6ca7..84d42fe369 100644
--- a/windows/deploy/scenario-2-proxy-activation-vamt-30-win8.md
+++ b/windows/deploy/scenario-2-proxy-activation-vamt-30-win8.md
@@ -41,7 +41,7 @@ To retrieve the license status on the selected computers, VAMT must have adminis
 
 3.  If you are already connected to a database, in the center pane VAMT displays an inventory of the products and product keys, and a license overview of the computers in the database. If you need to connect to a different database, click **Successfully connected to the Server** to open the **Database Connection Settings** dialog box. For more information about how to create VAMT databases and adding VAMT data, see [Manage VAMT Data.](manage-vamt-data-vamt-30-win8.md)
 
-## Part 4: Discover Products
+## <a href="" id="part-4--discover-products-"></a>Part 4: Discover Products
 
 
 1.  In the left-side pane, in the **Products** node, click the product that you want to activate.
@@ -64,7 +64,7 @@ The **Finding Computers** window appears and displays the search progress as the
 
 When the search is complete, the products that VAMT discovers appear in the list view in the center pane.
 
-## Part 5: Sort and Filter the List of Computers
+## <a href="" id="bkmk-step5"></a>Part 5: Sort and Filter the List of Computers
 
 
 You can sort the list of products so that it is easier to find the computers that require product keys to be activated:
@@ -121,7 +121,7 @@ If a computer has more than one supported product installed, VAMT adds an entry
 
 1.  In the left-side pane, in the **Products** node click the product that you want to install keys onto.
 
-2.  If necessary, sort and filter the list of products so that it is easier to find the computers that must have a product key installed. See [Step 5: Sort the list of computers](#BKMK_Step5).
+2.  If necessary, sort and filter the list of products so that it is easier to find the computers that must have a product key installed. See [Step 5: Sort the list of computers](#bkmk-step5).
 
 3.  In the **Products** list view pane, select the individual products which must have keys installed. You can use the **CTRL** key or the **SHIFT** key to select more than one product.
 
@@ -212,7 +212,7 @@ VAMT displays the **Applying Confirmation Id** dialog box while it installs the
 
 The same status appears under the **Status of Last Action** column in the product list view in the center pane.
 
-## Part 13: (Optional) Reactivating Reimaged Computers in the Isolated Lab
+## <a href="" id="part-13---optional--reactivating-reimaged-computers-in-the-isolated-lab-"></a>Part 13: (Optional) Reactivating Reimaged Computers in the Isolated Lab
 
 
 If you have captured new images of the computers in the isolated lab, but the underlying hardware of those computers has not changed, VAMT can reactivate those computers using the CIDs that are stored in the database.
diff --git a/windows/deploy/set-up-mdt-2013-for-bitlocker.md b/windows/deploy/set-up-mdt-2013-for-bitlocker.md
index 2855dc53b2..71c80ec52f 100644
--- a/windows/deploy/set-up-mdt-2013-for-bitlocker.md
+++ b/windows/deploy/set-up-mdt-2013-for-bitlocker.md
@@ -17,7 +17,7 @@ author: CFaw
 -   [Configure Active Directory for BitLocker](#sec01)
 -   [Add BIOS configuration tools from Dell, HP, and Lenovo](#sec02)
 -   [Configure the Windows 10 task sequence to enable BitLocker](#sec03)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic will show you how to configure your environment for BitLocker, the disk volume encryption built into Windows 10 Enterprise and Windows 10 Pro, using MDT. BitLocker in Windows 10 has two requirements in regard to an operating system deployment:
 
@@ -42,7 +42,7 @@ Even though it is not a BitLocker requirement, we recommend configuring BitLocke
 
 For the purposes of this topic, we will use DC01, a domain controller that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md#proof).
 
-## Configure Active Directory for BitLocker
+## <a href="" id="sec01"></a>Configure Active Directory for BitLocker
 
 
 To enable BitLocker to store the recovery key and TPM information in Active Directory, you need to create a Group Policy for it in Active Directory. For this section, we are running Windows Server 2012 R2, so you do not need to extend the Schema. You do, however, need to set the appropriate permissions in Active Directory.
@@ -135,7 +135,7 @@ In addition to the Group Policy created previously, you need to configure permis
 
 Figure 4. Running the Add-TPMSelfWriteACE.vbs script on DC01.
 
-## Add BIOS configuration tools from Dell, HP, and Lenovo
+## <a href="" id="sec02"></a>Add BIOS configuration tools from Dell, HP, and Lenovo
 
 
 If you want to automate enabling the TPM chip as part of the deployment process, you need to download the vendor tools and add them to your task sequences, either directly or in a script wrapper.
@@ -178,7 +178,7 @@ The Lenovo tools are a set of VBScripts available as part of the Lenovo BIOS Set
 cscript.exe SetConfig.vbs SecurityChip Active
 ```
 
-## Configure the Windows 10 task sequence to enable BitLocker
+## <a href="" id="sec03"></a>Configure the Windows 10 task sequence to enable BitLocker
 
 
 When configuring a task sequence to run any BitLocker tool, either directly or using a custom script, it is helpful if you also add some logic to detect whether the BIOS is already configured on the machine. In this task sequence, we are using a sample script (ZTICheckforTPM.wsf) from the Deployment Guys web page to check the status on the TPM chip. You can download this script from the Deployment Guys Blog post, [Check to see if the TPM is enabled](http://go.microsoft.com/fwlink/p/?LinkId=619549). In the following task sequence, we have added five actions:
diff --git a/windows/deploy/sideload-apps-in-windows-10.md b/windows/deploy/sideload-apps-in-windows-10.md
index 156962e8d3..4b1d63c9dd 100644
--- a/windows/deploy/sideload-apps-in-windows-10.md
+++ b/windows/deploy/sideload-apps-in-windows-10.md
@@ -19,8 +19,8 @@ author: CFaw
 **In this article**
 
 -   [Requirements](#requirements)
--   [How do I sideload an app on desktop](#how_do_i_sideload_an_app_on_desktop)
--   [How do I sideload an app on mobile](#how_do_i_sideload_an_app_on_mobile)
+-   [How do I sideload an app on desktop](#how-do-i-sideload-an-app-on-desktop)
+-   [How do I sideload an app on mobile](#how-do-i-sideload-an-app-on-mobile)
 
 Sideload line-of-business apps in Windows 10.
 
diff --git a/windows/deploy/understanding-migration-xml-files.md b/windows/deploy/understanding-migration-xml-files.md
index 96a3f88687..a3e06e6d3c 100644
--- a/windows/deploy/understanding-migration-xml-files.md
+++ b/windows/deploy/understanding-migration-xml-files.md
@@ -18,31 +18,31 @@ This topic provides an overview of the default and custom migration XML files an
 ## In This Topic
 
 
-[Overview of the Config.xml file](#BKMK_Config)
+[Overview of the Config.xml file](#bkmk-config)
 
-[Overview of the MigApp.xml file](#BKMK_MigApp)
+[Overview of the MigApp.xml file](#bkmk-migapp)
 
-[Overview of the MigDocs.xml file](#BKMK_MigDocs)
+[Overview of the MigDocs.xml file](#bkmk-migdocs)
 
-[Overview of the MigUser.xml file](#BKMK_MigUser)
+[Overview of the MigUser.xml file](#bkmk-miguser)
 
-[Using multiple XML files](#BKMK_Multiple)
+[Using multiple XML files](#bkmk-multiple)
 
-[XML rules for migrating user files](#BKMK_UserFiles)
+[XML rules for migrating user files](#bkmk-userfiles)
 
-[The GenerateDocPatterns function](#BKMK_Generate)
+[The GenerateDocPatterns function](#bkmk-generate)
 
-[Understanding the system and user context](#BKMK_Context)
+[Understanding the system and user context](#bkmk-context)
 
-[Sample migration rules for customized versions of XML files](#BKMK_Samples)
+[Sample migration rules for customized versions of XML files](#bkmk-samples)
 
-[Exclude rules usage examples](#BKMK_Exclude)
+[Exclude rules usage examples](#bkmk-exclude)
 
-[Include rules usage examples](#BKMK_Include)
+[Include rules usage examples](#bkmk-include)
 
-[Next Steps](#BKMK_Next)
+[Next Steps](#bkmk-next)
 
-## Overview of the Config.xml file
+## <a href="" id="bkmk-config"></a>Overview of the Config.xml file
 
 
 The Config.xml file is the configuration file created by the `/genconfig` option of the ScanState tool; it can be used to modify which operating-system components are migrated by USMT. The Config.xml file can be used in conjunction with other XML files, such as in the following example: `scanstate /i:migapps.xml /i:migdocs.xml /genconfig:c:\myFolder\config.xml`. When used this way, the Config.xml file tightly controls aspects of the migration, including user profiles, data, and settings, without modifying or creating other XML files. For more information about the Config.xml file, see [Customize USMT XML Files](customize-usmt-xml-files-usmt-win7-usmt-win8.md) and [Config.xml File](configxml-file-usmt-win7-usmt-win8.md).
@@ -52,17 +52,17 @@ When modifying the XML elements in the Config.xml file, you should edit an eleme
 
  
 
-## Overview of the MigApp.xml file
+## <a href="" id="bkmk-migapp"></a>Overview of the MigApp.xml file
 
 
 The MigApp.xml file installed with USMT includes instructions to migrate the settings for the applications listed in [What Does USMT Migrate?](what-does-usmt-migrate-usmt-win7-usmt-win8.md). You must include the MigApp.xml file when using the ScanState and LoadState tools, by using the `/i` option in order to migrate application settings. The MigDocs.xml and MigUser.xml files do not migrate application settings. You can create a custom XML file to include additional applications. For more information, see [Customize USMT XML Files](customize-usmt-xml-files-usmt-win7-usmt-win8.md).
 
 **Important**  
-The MigApps.xml file will only detect and migrate .pst files that are linked to Microsoft Office Outlook. See the [Sample migration rules for customized versions of XML files](#BKMK_Samples) section of this document for more information about migrating .pst files that are not linked to Outlook.
+The MigApps.xml file will only detect and migrate .pst files that are linked to Microsoft Office Outlook. See the [Sample migration rules for customized versions of XML files](#bkmk-samples) section of this document for more information about migrating .pst files that are not linked to Outlook.
 
  
 
-## Overview of the MigDocs.xml file
+## <a href="" id="bkmk-migdocs"></a>Overview of the MigDocs.xml file
 
 
 The MigDocs.xml file uses the new **GenerateDocPatterns** helper function to create instructions for USMT to migrate files from the source computer, based on the location of the files. You can use the MigDocs.xml file with the ScanState and LoadState tools to perform a more targeted migration than using USMT without XML instructions.
@@ -133,7 +133,7 @@ The default MigDocs.xml file will not migrate the following:
 
 You can also use the **/genmigxml** option with the ScanState tool to review and modify what files will be migrated.
 
-## Overview of the MigUser.xml file
+## <a href="" id="bkmk-miguser"></a>Overview of the MigUser.xml file
 
 
 The MigUser.xml file includes instructions for USMT to migrate user files based on file name extensions. You can use the MigUser.xml file with the ScanState and LoadState tools to perform a more targeted migration than using USMT without XML instructions. The MigUser.xml file will gather all files from the standard user-profile folders, as well as any files on the computer with the specified file name extensions.
@@ -175,11 +175,11 @@ The default MigUser.xml file does not migrate the following:
 You can make a copy of the MigUser.xml file and modify it to include or exclude standard user-profile folders and file name extensions. If you know all of the extensions for the files you want to migrate from the source computer, use the MigUser.xml file to move all of your relevant data, regardless of the location of the files. However, this may result in a migration that contains more files than intended. For example, if you choose to migrate all .jpg files, you may migrate image files such as thumbnails and logos from legacy applications that are installed on the source computer.
 
 **Note**  
-Each file name extension you include in the rules within the MigUser.xml file increases the amount of time needed for the ScanState tool to gather the files for the migration. If you are migrating more than three hundred file types, you may experience a slow migration. For more information about other ways to organize the migration of your data, see the [Using multiple XML files](#BKMK_Multiple) section of this document.
+Each file name extension you include in the rules within the MigUser.xml file increases the amount of time needed for the ScanState tool to gather the files for the migration. If you are migrating more than three hundred file types, you may experience a slow migration. For more information about other ways to organize the migration of your data, see the [Using multiple XML files](#bkmk-multiple) section of this document.
 
  
 
-## Using multiple XML files
+## <a href="" id="bkmk-multiple"></a>Using multiple XML files
 
 
 You can use multiple XML files with the ScanState and LoadState tools. Each of the default XML files included with or generated by USMT is configured for a specific component of the migration. You can also use custom XML files to supplement these default files with additional migration rules.
@@ -224,7 +224,7 @@ For example, you can use all of the XML migration file types for a single migrat
 Scanstate <store> /config:c:\myFolder\config.xml /i:migapps.xml /i:migdocs.xml /i:customrules.xml
 ```
 
-### XML rules for migrating user files
+### <a href="" id="bkmk-userfiles"></a>XML rules for migrating user files
 
 **Important**  
 You should not use the MigUser.xml and MigDocs.xml files together in the same command. Using both XML files can result in duplication of some migrated files. This occurs when conflicting target-location instructions are given in each XML file. The target file will be stored once during the migration, but will be applied by each XML file to a different location on the destination computer.
@@ -233,9 +233,9 @@ You should not use the MigUser.xml and MigDocs.xml files together in the same co
 
 If your data set is unknown or if many files are stored outside of the standard user-profile folders, the MigDocs.xml is a better choice than the MigUser.xml file, because the MigDocs.xml file will gather a broader scope of data. The MigDocs.xml file migrates folders of data based on location. The MigUser.xml file migrates only the files with the specified file name extensions.
 
-If you want more control over the migration, you can create custom XML files. See the [Creating and editing a custom ,xml file](#BKMK_CreateXML) section of this document.
+If you want more control over the migration, you can create custom XML files. See the [Creating and editing a custom ,xml file](#bkmk-createxml) section of this document.
 
-## Creating and editing a custom XML file
+## <a href="" id="bkmk-createxml"></a>Creating and editing a custom XML file
 
 
 You can use the **/genmigxml** command-line option to determine which files will be included in your migration. The **/genmigxml** option creates a file in a location you specify, so that you can review the XML rules and make modifications as necessary.
@@ -265,7 +265,7 @@ To generate the XML migration rules file for a source computer:
     scanstate.exe /genmigxml:"C:\Documents and Settings\USMT Tester\Desktop\genMig.xml"
     ```
 
-### The GenerateDocPatterns function
+### <a href="" id="bkmk-generate"></a>The GenerateDocPatterns function
 
 The MigDocs.xml file calls the **GenerateDocPatterns** function, which takes three Boolean values. You can change the settings to modify the way the MigDocs.xml file generates the XML rules for migration.
 
@@ -342,7 +342,7 @@ To create exclude data patterns:
 </exclude>
 ```
 
-### Understanding the system and user context
+### <a href="" id="bkmk-context"></a>Understanding the system and user context
 
 The migration XML files contain two &lt;component&gt; elements with different **context** settings. The system context applies to files on the computer that are not stored in the User Profiles directory, while the user context applies to files that are particular to an individual user.
 
@@ -399,14 +399,14 @@ Rules contained in a component that is assigned the user context will be run for
 
  
 
-### Sample migration rules for customized versions of XML files
+### <a href="" id="bkmk-samples"></a>Sample migration rules for customized versions of XML files
 
 **Note**  
 For best practices and requirements for customized XML files in USMT, see [Customize USMT XML Files](customize-usmt-xml-files-usmt-win7-usmt-win8.md) and [General Conventions](general-conventions-usmt-win7-usmt-win8.md).
 
  
 
-### Exclude rules usage examples
+### <a href="" id="bkmk-exclude"></a>Exclude rules usage examples
 
 In the examples below, the source computer has a .txt file called "new text document" in a directory called "new folder". The default MigDocs.xml behavior migrates the new text document.txt file and all files contained in the "new folder" directory. The rules generated by the function are:
 
@@ -477,7 +477,7 @@ If you want the &lt;UnconditionalExclude&gt; element to apply to both the system
 
 For more examples of exclude rules that you can use in custom migration XML files, see [Exclude Files and Settings](exclude-files-and-settings-usmt.md).
 
-### Include rules usage examples
+### <a href="" id="bkmk-include"></a>Include rules usage examples
 
 The application data directory is the most common location that you would need to add an include rule for. The **GenerateDocPatterns** function excludes this location by default. If your company uses an application that saves important data to this location, you can create include rules to migrate the data. For example, the default location for .pst files is: `%CSIDL_LOCAL_APPDATA%\Microsoft\Outlook`. The Migapp.xml file contains migration rules to move only those .pst files that are linked to Microsoft Outlook. To include .pst files that are not linked, you can do the following:
 
@@ -512,7 +512,7 @@ For more information about the order of precedence for XML migration rules, see
 
  
 
-## Next steps
+## <a href="" id="bkmk-next"></a>Next steps
 
 
 You can include additional rules for the migration in the MigDocs.xml file or other XML migration files. For example, you can use the &lt;locationModify&gt; element to move files from the folder where they were gathered to a different folder, when they are applied to the destination computer.
diff --git a/windows/deploy/update-windows-10-images-with-provisioning-packages.md b/windows/deploy/update-windows-10-images-with-provisioning-packages.md
index 18c4c383d7..4c3c450570 100644
--- a/windows/deploy/update-windows-10-images-with-provisioning-packages.md
+++ b/windows/deploy/update-windows-10-images-with-provisioning-packages.md
@@ -20,10 +20,10 @@ author: CFaw
 **In this article**
 
 -   [Advantages](#advantages)
--   [Create package](#create_package)
--   [Add package to image](#add_package_to_image)
--   [Learn more](#learn_more)
--   [Related topics](#related_topics)
+-   [Create package](#create-package)
+-   [Add package to image](#add-package-to-image)
+-   [Learn more](#learn-more)
+-   [Related topics](#related-topics)
 
 Use a provisioning package to apply settings, profiles, and file assets to a Windows 10 image.
 
diff --git a/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md b/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md
index b7a577b8f8..0d7e867bba 100644
--- a/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md
+++ b/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md
@@ -17,14 +17,14 @@ author: CFaw
 
 **In this article**
 
--   [Proof-of-concept environment](#proof-of-concept_environment)
--   [Upgrade to Windows 10 with System Center 2012 R2 Configuration Manager](#upgrade_to_windows_10_with_system_center_2012_r2_configuration_manager)
--   [Create the task sequence](#create_the_task_sequence)
--   [Create a device collection](#create_a_device_collection)
--   [Deploy the Windows 10 upgrade](#deploy_the_windows_10_upgrade)
--   [Start the Windows 10 upgrade](#start_the_windows_10_upgrade)
--   [Upgrade to Windows 10 with the next version of System Center Configuration Manager](#upgrade_to_windows_10_with_the_next_version_of_system_center_configuration_manager)
--   [Related topics](#related_topics)
+-   [Proof-of-concept environment](#proof-of-concept-environment)
+-   [Upgrade to Windows 10 with System Center 2012 R2 Configuration Manager](#upgrade-to-windows-10-with-system-center-2012-r2-configuration-manager)
+-   [Create the task sequence](#create-the-task-sequence)
+-   [Create a device collection](#create-a-device-collection)
+-   [Deploy the Windows 10 upgrade](#deploy-the-windows-10-upgrade)
+-   [Start the Windows 10 upgrade](#start-the-windows-10-upgrade)
+-   [Upgrade to Windows 10 with the next version of System Center Configuration Manager](#upgrade-to-windows-10-with-the-next-version-of-system-center-configuration-manager)
+-   [Related topics](#related-topics)
 
 The simplest path to upgrade PCs currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a System Center Configuration Manager task sequence to completely automate the process.
 
diff --git a/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md
index 8897dff324..b8c60bec0c 100644
--- a/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md
+++ b/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md
@@ -18,13 +18,13 @@ author: CFaw
 
 **In this article**
 
--   [Proof-of-concept environment](#proof-of-concept_environment)
--   [Set up the upgrade task sequence](#set_up_the_upgrade_task_sequence)
--   [Create the MDT production deployment share](#create_the_mdt_production_deployment_share)
--   [Add Windows 10 Enterprise x64 (full source)](#add_windows_10_enterprise_x64__full_source_)
--   [Create a task sequence to upgrade to Windows 10 Enterprise](#create_a_task_sequence_to_upgrade_to_windows_10_enterprise)
--   [Perform the Windows 10 upgrade](#perform_the_windows_10_upgrade)
--   [Related topics](#related_topics)
+-   [Proof-of-concept environment](#proof-of-concept-environment)
+-   [Set up the upgrade task sequence](#set-up-the-upgrade-task-sequence)
+-   [Create the MDT production deployment share](#create-the-mdt-production-deployment-share)
+-   [Add Windows 10 Enterprise x64 (full source)](#add-windows-10-enterprise-x64--full-source-)
+-   [Create a task sequence to upgrade to Windows 10 Enterprise](#create-a-task-sequence-to-upgrade-to-windows-10-enterprise)
+-   [Perform the Windows 10 upgrade](#perform-the-windows-10-upgrade)
+-   [Related topics](#related-topics)
 
 The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 1 task sequence to completely automate the process.
 
diff --git a/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md b/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md
index a336728f47..142d8c1778 100644
--- a/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md
+++ b/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md
@@ -17,9 +17,9 @@ author: CFaw
 -   [Orchestrator terminology](#sec01)
 -   [Create a sample runbook](#sec02)
 -   [Test the demo MDT runbook](#sec03)
--   [Use the MDT demo runbook from MDT](#use_the_mdt_demo_runbook_from_mdt)
--   [Run the orchestrator sample task sequence](#run_the_orchestrator_sample_task_sequence)
--   [Related topics](#related_topics)
+-   [Use the MDT demo runbook from MDT](#use-the-mdt-demo-runbook-from-mdt)
+-   [Run the orchestrator sample task sequence](#run-the-orchestrator-sample-task-sequence)
+-   [Related topics](#related-topics)
 
 This topic will show you how to integrate Microsoft System Center 2012 R2 Orchestrator with MDT to replace the existing web services that are used in deployment solutions.
 
@@ -30,7 +30,7 @@ If you are licensed to use Orchestrator, we highly recommend that you start usin
 
  
 
-## Orchestrator terminology
+## <a href="" id="sec01"></a>Orchestrator terminology
 
 
 Before diving into the core details, here is a quick course in Orchestrator terminology:
@@ -54,7 +54,7 @@ To find and download additional integration packs, see [Integration Packs for Sy
 
  
 
-## Create a sample runbook
+## <a href="" id="sec02"></a>Create a sample runbook
 
 
 This section assumes you have Orchestrator 2012 R2 installed on a server named OR01. In this section, you create a sample runbook, which is used to log some of the MDT deployment information into a text file on OR01.
@@ -134,7 +134,7 @@ This section assumes you have Orchestrator 2012 R2 installed on a server named O
 
 19. On the **Append Line Properties** page, click **Finish**.
 
-## Test the demo MDT runbook
+## <a href="" id="sec03"></a>Test the demo MDT runbook
 
 
 After the runbook is created, you are ready to test it.
diff --git a/windows/deploy/use-the-mdt-database-to-stage-windows-81-deployment-information.md b/windows/deploy/use-the-mdt-database-to-stage-windows-81-deployment-information.md
index a4472e3804..c1091e33d2 100644
--- a/windows/deploy/use-the-mdt-database-to-stage-windows-81-deployment-information.md
+++ b/windows/deploy/use-the-mdt-database-to-stage-windows-81-deployment-information.md
@@ -18,11 +18,11 @@ author: CFaw
 -   [Create the deployment database](#sec02)
 -   [Configure database permissions](#sec03)
 -   [Create an entry in the database](#sec04)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This topic is designed to teach you how to use the MDT database to pre-stage information on your Windows 10 deployment in a Microsoft SQL Server 2012 SP1 Express database, rather than include the information in a text file (CustomSettings.ini). You can use this process, for example, to add the client machines you want to deploy, specify their computer names and IP addresses, indicate applications to be deployed, and determine many additional settings for the machines.
 
-## Database prerequisites
+## <a href="" id="sec01"></a>Database prerequisites
 
 
 MDT can use either SQL Server Express or full SQL Server, but since the deployment database isn't big, even in large enterprise environments, we recommend using the free SQL Server 2012 SP1 Express database in your environment.
@@ -32,7 +32,7 @@ Be sure to enable Named Pipes when configuring the SQL Server 2012 SP1 Express d
 
  
 
-## Create the deployment database
+## <a href="" id="sec02"></a>Create the deployment database
 
 
 The MDT database is by default created and managed from the Deployment Workbench. In these steps, we assume you have installed SQL Server 2012 SP1 Express on MDT01.
@@ -62,7 +62,7 @@ Since SQL Server 2012 SP1 Express runs by default on a separate instance (SQLEXP
 
 Figure 8. The MDT database added to MDT01.
 
-## Configure database permissions
+## <a href="" id="sec03"></a>Configure database permissions
 
 
 After creating the database, you need to assign permissions to it. In MDT, the account you used to run the deployment is used to access the database. In this environment, the network access account is MDT\_BA.
@@ -89,7 +89,7 @@ After creating the database, you need to assign permissions to it. In MDT, the a
 
 Figure 10. Creating the login and settings permissions to the MDT database.
 
-## Create an entry in the database
+## <a href="" id="sec04"></a>Create an entry in the database
 
 
 To start using the database, you add a computer entry and assign a description and computer name. Use the computer's MAC Address as the identifier.
diff --git a/windows/deploy/use-web-services-in-mdt-2013.md b/windows/deploy/use-web-services-in-mdt-2013.md
index 0532d7758c..35f644f9cd 100644
--- a/windows/deploy/use-web-services-in-mdt-2013.md
+++ b/windows/deploy/use-web-services-in-mdt-2013.md
@@ -19,13 +19,13 @@ author: CFaw
 -   [Install the web service](#sec03)
 -   [Test the web service in Internet Explorer](#sec04)
 -   [Test the web service in the MDT simulation environment](#sec05)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 In this topic, you will learn how to create a simple web service that generates computer names and then configure MDT to use that service during your Windows 10 deployment. Web services provide a powerful way to assign settings during a deployment. Simply put, web services are web applications that run code on the server side, and MDT has built-in functions to call these web services.
 
 Using a web service in MDT is straightforward, but it does require that you have enabled the Web Server (IIS) role on the server. Developing web services involves a little bit of coding, but for most web services used with MDT, you can use the free Microsoft Visual Studio Express 2013 for Web.
 
-## Create a sample web service
+## <a href="" id="sec01"></a>Create a sample web service
 
 
 In these steps we assume you have installed Microsoft Visual Studio Express 2013 for Web on PC0001 (the Windows 10 client) and downloaded the [MDT Sample Web Service](http://go.microsoft.com/fwlink/p/?LinkId=619363) from the Microsoft Download Center and extracted it to C:\\Projects.
@@ -50,7 +50,7 @@ In these steps we assume you have installed Microsoft Visual Studio Express 2013
 
 Figure 15. The sample project in Microsoft Visual Studio Express 2013 for Web.
 
-## Create an application pool for the web service
+## <a href="" id="sec02"></a>Create an application pool for the web service
 
 
 This section assumes that you have enabled the Web Server (IIS) role on MDT01.
@@ -75,7 +75,7 @@ This section assumes that you have enabled the Web Server (IIS) role on MDT01.
 
 Figure 16. The new MDTSample application.
 
-## Install the web service
+## <a href="" id="sec03"></a>Install the web service
 
 
 1.  On MDT01, using Internet Information Services (IIS) Manager, expand **Sites**, right-click **Default Web Site**, and select **Add Application**. Use the following settings for the application:
@@ -100,7 +100,7 @@ Figure 16. The new MDTSample application.
 
 Figure 18. Configuring Authentication for the MDTSample web service.
 
-## Test the web service in Internet Explorer
+## <a href="" id="sec04"></a>Test the web service in Internet Explorer
 
 
 1.  On PC0001, using Internet Explorer, navigate to: **http://MDT01/MDTSample/mdtsample.asmx**.
@@ -121,7 +121,7 @@ Figure 18. Configuring Authentication for the MDTSample web service.
 
 Figure 20. The result from the MDT Sample web service.
 
-## Test the web service in the MDT simulation environment
+## <a href="" id="sec05"></a>Test the web service in the MDT simulation environment
 
 
 After verifying the web service using Internet Explorer, you are ready to do the same test in the MDT simulation environment.
diff --git a/windows/deploy/usmt-best-practices-usmt-win7-usmt-win8.md b/windows/deploy/usmt-best-practices-usmt-win7-usmt-win8.md
index 5d4ab8570c..806fbde67e 100644
--- a/windows/deploy/usmt-best-practices-usmt-win7-usmt-win8.md
+++ b/windows/deploy/usmt-best-practices-usmt-win7-usmt-win8.md
@@ -82,7 +82,7 @@ As the authorized administrator, it is your responsibility to protect the privac
 
     Before you migrate local accounts, see the Migrating Local Accounts section in the [Identify Users](identify-users-usmt-win7-usmt-win8.md) topic.
 
-## XML File Best Practices
+## <a href="" id="bkmk-bestpractices"></a>XML File Best Practices
 
 
 -   **Specify the same set of mig\*.xml files in both the ScanState and the LoadState tools**
diff --git a/windows/deploy/usmt-requirements-usmt-win7-usmt-win8.md b/windows/deploy/usmt-requirements-usmt-win7-usmt-win8.md
index 1fa6e63ac1..db2c363e71 100644
--- a/windows/deploy/usmt-requirements-usmt-win7-usmt-win8.md
+++ b/windows/deploy/usmt-requirements-usmt-win7-usmt-win8.md
@@ -14,15 +14,15 @@ author: CFaw
 ## In This Topic
 
 
--   [Supported Operating Systems](#BKMK_1)
+-   [Supported Operating Systems](#bkmk-1)
 
--   [Software Requirements](#BKMK_2)
+-   [Software Requirements](#bkmk-2)
 
--   [Hard Disk Requirements](#BKMK_3)
+-   [Hard Disk Requirements](#bkmk-3)
 
--   [User Prerequisites](#BKMK_UserPrereqs)
+-   [User Prerequisites](#bkmk-userprereqs)
 
-## Supported Operating Systems
+## <a href="" id="bkmk-1"></a>Supported Operating Systems
 
 
 The User State Migration Tool (USMT) 10.0 does not have any explicit RAM or CPU speed requirements for either the source or destination computers. If your computer complies with the system requirements of the operating system, it also complies with the requirements for USMT. You need an intermediate store location large enough to hold all of the migrated data and settings, and the same amount of hard disk space on the destination computer for the migrated files and settings.
@@ -105,10 +105,10 @@ USMT does not support any of the Windows Server® operating systems, Windows 20
 
  
 
-## Software Requirements
+## <a href="" id="bkmk-2"></a>Software Requirements
 
 
--   **Must use latest version of Window PE.** For example, to migrate to Windows 10, you'll need Windows PE 5.1. For more info, see [What's New in Windows PE](../p_adk_online/whats-new-in-windows-pe-s14.md).
+-   **Must use latest version of Window PE.** For example, to migrate to Windows 10, you'll need Windows PE 5.1. For more info, see [What's New in Windows PE](http://msdn.microsoft.com/library/windows/hardware/dn938350.aspx).
 
 -   **Must run in Administrator Mode** When manually running the **ScanState** and **LoadState** tools on Windows 7, Windows 8 or Windows 10 you must run them in Administrator mode from an account with administrative credentials to ensure that all specified users are migrated. This is because User Access Control (UAC) is enabled by default. If you do not run USMT in Administrator mode, only the user profile that is logged on will be included in the migration.
 
@@ -145,12 +145,12 @@ USMT does not support any of the Windows Server® operating systems, Windows 20
 
 -   **Install applications before running the LoadState command.** Install all applications on the destination computer before restoring the user state. This ensures that migrated settings are preserved.
 
-## Hard-Disk Requirements
+## <a href="" id="bkmk-3"></a>Hard-Disk Requirements
 
 
 Ensure that there is enough available space in the migration-store location and on the source and destination computers. For more information, see [Estimate Migration Store Size](estimate-migration-store-size-usmt-win7-usmt-win8.md).
 
-## User Prerequisites
+## <a href="" id="bkmk-userprereqs"></a>User Prerequisites
 
 
 This documentation assumes that IT professionals using USMT understand command-line tools. The documentation also assumes that IT professionals using USMT to author MigXML rules understand the following:
diff --git a/windows/deploy/usmtutils-syntax-usmt-win8.md b/windows/deploy/usmtutils-syntax-usmt-win8.md
index 13364b73a3..ce45cd93e6 100644
--- a/windows/deploy/usmtutils-syntax-usmt-win8.md
+++ b/windows/deploy/usmtutils-syntax-usmt-win8.md
@@ -24,13 +24,13 @@ This topic describes the syntax for the utilities available in User State Migrat
 ## In This Topic
 
 
-[Usmtutils.exe](#BKMK_Usmtutils_exe)
+[Usmtutils.exe](#bkmk-usmtutils-exe)
 
-[Verify Options](#BKMK_VerifyOptions)
+[Verify Options](#bkmk-verifyoptions)
 
-[Extract Options](#BKMK_ExtractOptions)
+[Extract Options](#bkmk-extractoptions)
 
-## Usmtutils.exe
+## <a href="" id="bkmk-usmtutils-exe"></a>Usmtutils.exe
 
 
 The following table lists command-line options for USMTutils.exe. The sections that follow provide further command-line options for the **/verify** and the **/extract** options.
@@ -68,19 +68,19 @@ usmtutils \[/ec | /rd *&lt;storeDir&gt;* | /verify *&lt;filepath&gt;* \[options\
 <tr class="even">
 <td align="left"><p><strong>/verify</strong></p></td>
 <td align="left"><p>Returns information on whether the compressed migration store is intact or whether it contains corrupted files or a corrupted catalog.</p>
-<p>See [Verify Options](#BKMK_VerifyOptions) for syntax and options to use with <strong>/verify</strong>.</p></td>
+<p>See [Verify Options](#bkmk-verifyoptions) for syntax and options to use with <strong>/verify</strong>.</p></td>
 </tr>
 <tr class="odd">
 <td align="left"><p><strong>/extract</strong></p></td>
 <td align="left"><p>Recovers files from a compressed USMT migration store.</p>
-<p>See [Extract Options](#BKMK_ExtractOptions) for syntax and options to use with <strong>/extract</strong>.</p></td>
+<p>See [Extract Options](#bkmk-extractoptions) for syntax and options to use with <strong>/extract</strong>.</p></td>
 </tr>
 </tbody>
 </table>
 
  
 
-## Verify Options
+## <a href="" id="bkmk-verifyoptions"></a>Verify Options
 
 
 Use the **/verify** option when you want to determine whether a compressed migration store is intact or whether it contains corrupted files or a corrupted catalog. For more information on how to use the **/verify** option, see [Verify the Condition of a Compressed Migration Store](verify-the-condition-of-a-compressed-migration-store.md).
@@ -199,7 +199,7 @@ Some examples of **/verify** commands:
 
 -   `usmtutils /verify:failureonly D:\MyMigrationStore\store.mig /decrypt:AES_192 /keyfile:D:\encryptionKey.txt`
 
-## Extract Options
+## <a href="" id="bkmk-extractoptions"></a>Extract Options
 
 
 Use the **/extract** option to recover files from a compressed USMT migration store if it will not restore normally with loadstate. For more information on how to use the **/extract** option, see [Extract Files from a Compressed USMT Migration Store](extract-files-from-a-compressed-usmt-migration-store.md).
diff --git a/windows/deploy/verify-the-condition-of-a-compressed-migration-store.md b/windows/deploy/verify-the-condition-of-a-compressed-migration-store.md
index b965143fed..cda27f1780 100644
--- a/windows/deploy/verify-the-condition-of-a-compressed-migration-store.md
+++ b/windows/deploy/verify-the-condition-of-a-compressed-migration-store.md
@@ -34,17 +34,17 @@ When you use the **/verify** option, you can specify what type of information to
 
 The following sections demonstrate how to run the **UsmtUtils** command with the **/verify** option, and how to specify the information to display in the UsmtUtils log file.
 
--   [The UsmtUtils syntax for the /verify option](#BKMK_verifySyntax)
+-   [The UsmtUtils syntax for the /verify option](#bkmk-verifysyntax)
 
--   [To verify that the migration store is intact](#BKMK_verifyIntactStore)
+-   [To verify that the migration store is intact](#bkmk-verifyintactstore)
 
--   [To verify the status of only the catalog file](#BKMK_verifyCatalog)
+-   [To verify the status of only the catalog file](#bkmk-verifycatalog)
 
--   [To verify the status of all files](#BKMK_verifyAllFiles)
+-   [To verify the status of all files](#bkmk-verifyallfiles)
 
--   [To verify the status of the files and return only the corrupted files](#BKMK_returnCorrupted)
+-   [To verify the status of the files and return only the corrupted files](#bkmk-returncorrupted)
 
-### The UsmtUtils Syntax for the /verify Option
+### <a href="" id="bkmk-verifysyntax"></a>The UsmtUtils Syntax for the /verify Option
 
 To verify the condition of a compressed migration store, use the following UsmtUtils syntax:
 
@@ -66,7 +66,7 @@ Where the placeholders have the following values:
 
 -   *&lt;filename&gt;* is the location and name of the text file that contains the encryption key.
 
-### To Verify that the Migration Store is Intact
+### <a href="" id="bkmk-verifyintactstore"></a>To Verify that the Migration Store is Intact
 
 To verify whether the migration store is intact or whether it contains corrupted files or a corrupted catalog, type:
 
@@ -76,7 +76,7 @@ usmtutils /verify D:\MyMigrationStore\store.mig
 
 Because no report type is specified, UsmtUtils displays the default summary report.
 
-### To Verify the Status of Only the Catalog File
+### <a href="" id="bkmk-verifycatalog"></a>To Verify the Status of Only the Catalog File
 
 To verify whether the catalog file is corrupted or intact, type:
 
@@ -84,7 +84,7 @@ To verify whether the catalog file is corrupted or intact, type:
 usmtutils /verify:catalog D:\MyMigrationStore\store.mig
 ```
 
-### To Verify the Status of all Files
+### <a href="" id="bkmk-verifyallfiles"></a>To Verify the Status of all Files
 
 To verify whether there are any corrupted files in the compressed migration store, and to specify the name and location of the log file, type:
 
@@ -92,7 +92,7 @@ To verify whether there are any corrupted files in the compressed migration stor
 
 In addition to verifying the status of all files, this example decrypts the files. Because no encryption algorithm is specified, UsmtUtils uses the default 3DES cryptographic algorithm.
 
-### To Verify the Status of the Files and Return Only the Corrupted Files
+### <a href="" id="bkmk-returncorrupted"></a>To Verify the Status of the Files and Return Only the Corrupted Files
 
 In this example, the log file will only list the files that became corrupted during the ScanState process. This list will include the catalog file if it is also corrupted.
 
diff --git a/windows/deploy/what-does-usmt-migrate-usmt-win7-usmt-win8.md b/windows/deploy/what-does-usmt-migrate-usmt-win7-usmt-win8.md
index dc9597257c..43e8e9af7a 100644
--- a/windows/deploy/what-does-usmt-migrate-usmt-win7-usmt-win8.md
+++ b/windows/deploy/what-does-usmt-migrate-usmt-win7-usmt-win8.md
@@ -14,17 +14,17 @@ author: CFaw
 ## In This Topic
 
 
--   [Default Migration Scripts](#BKMK_DefaultMigScripts)
+-   [Default Migration Scripts](#bkmk-defaultmigscripts)
 
--   [User Data](#BKMK_3)
+-   [User Data](#bkmk-3)
 
--   [Operating-System Components](#BKMK_4)
+-   [Operating-System Components](#bkmk-4)
 
--   [Supported Applications](#BKMK_2)
+-   [Supported Applications](#bkmk-2)
 
 -   [What USMT Does Not Migrate](#no)
 
-## Default Migration Scripts
+## <a href="" id="bkmk-defaultmigscripts"></a>Default Migration Scripts
 
 
 The User State Migration Tool (USMT) 10.0 is designed so that an IT engineer can precisely define migrations using the USMT .xml scripting language. USMT provides the following sample scripts:
@@ -43,7 +43,7 @@ The User State Migration Tool (USMT) 10.0 is designed so that an IT engineer ca
 
     -   Access control lists (ACLs) for folders outside the user profile.
 
-## User Data
+## <a href="" id="bkmk-3"></a>User Data
 
 
 This section describes the user data that USMT migrates by default, using the MigUser.xml file. It also defines how to migrate ACLs.
@@ -84,7 +84,7 @@ To migrate ACLs, you must specify the directory to migrate in the MigUser.xml fi
 
  
 
-## Operating-System Components
+## <a href="" id="bkmk-4"></a>Operating-System Components
 
 
 USMT migrates operating-system components to a destination computer from computers running Windows 7 and Windows 8
@@ -151,7 +151,7 @@ Some settings, such as fonts, are not applied by the LoadState tool until after
 
  
 
-## Supported Applications
+## <a href="" id="bkmk-2"></a>Supported Applications
 
 
 Although it is not required for all applications, it is good practice to install all applications on the destination computer before restoring the user state. Installing applications before migrating settings helps to ensure that the migrated settings are not overwritten by the application installers.
@@ -361,7 +361,7 @@ When you specify the MigApp.xml file, USMT migrates the settings for the followi
 
  
 
-## What USMT Does Not Migrate
+## <a href="" id="no"></a>What USMT Does Not Migrate
 
 
 The following is a list of the settings that USMT does not migrate. If you are having a problem that is not listed here, see [Common Issues](common-issues-usmt-win8.md).
diff --git a/windows/deploy/windows-10-deployment-scenarios.md b/windows/deploy/windows-10-deployment-scenarios.md
index a1f3a15be9..66b774892e 100644
--- a/windows/deploy/windows-10-deployment-scenarios.md
+++ b/windows/deploy/windows-10-deployment-scenarios.md
@@ -18,10 +18,10 @@ author: CFaw
 
 **In this article**
 
--   [In-place upgrade](#in_place_upgrade)
--   [Dynamic provisioning](#dynamic_provisioning)
--   [Traditional deployment](#traditional_deployment)
--   [Related topics](#related_topics)
+-   [In-place upgrade](#in-place-upgrade)
+-   [Dynamic provisioning](#dynamic-provisioning)
+-   [Traditional deployment](#traditional-deployment)
+-   [Related topics](#related-topics)
 
 To successfully deploy the Windows 10 operating system in your organization, it is important to understand the different ways that it can be deployed, especially now that there are new scenarios to consider. Choosing among these scenarios, and understanding the key capabilities and limitations of each, is a key task.
 
diff --git a/windows/deploy/windows-deployment-scenarios-and-tools.md b/windows/deploy/windows-deployment-scenarios-and-tools.md
index d578681718..03cf627003 100644
--- a/windows/deploy/windows-deployment-scenarios-and-tools.md
+++ b/windows/deploy/windows-deployment-scenarios-and-tools.md
@@ -23,7 +23,7 @@ author: CFaw
 -   [Internet Explorer Administration Kit 11](#sec12)
 -   [Windows Server Update Services](#sec13)
 -   [Unified Extensible Firmware Interface](#sec14)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 To successfully deploy the Windows 10 operating system and applications for your organization, it is essential that you know about the available tools to help with the process. In this topic, you will learn about the most commonly used tools for Windows 10 deployment.
 
@@ -31,7 +31,7 @@ Microsoft provides many tools, services, and solutions. These tools include Wind
 
 In this topic, you also learn about different types of reference images that you can build, and why reference images are beneficial for most organizations
 
-## Windows Assessment and Deployment Kit
+## <a href="" id="sec06"></a>Windows Assessment and Deployment Kit
 
 
 Windows ADK contains core assessment and deployment tools and technologies, including Deployment Image Servicing and Management (DISM), Windows Imaging and Configuration Designer (Windows ICD), Windows System Image Manager (Windows SIM), User State Migration Tool (USMT), Volume Activation Management Tool (VAMT), Windows Preinstallation Environment (Windows PE), Windows Assessment Services, Windows Performance Toolkit (WPT), Application Compatibility Toolkit (ACT), and Microsoft SQL Server 2012 Express. For more details, see [Windows ADK for Windows 10](http://go.microsoft.com/fwlink/p/?LinkId=526803  ) or [Windows ADK for Windows 10 scenarios for IT Pros](windows-adk-scenarios-for-it-pros.md).
@@ -159,7 +159,7 @@ Figure 7. A machine booted with the Windows ADK default Windows PE boot image.
 
 For more details on Windows PE, see [Windows PE (WinPE)](http://go.microsoft.com/fwlink/p/?LinkId=619233).
 
-## Windows Recovery Environment
+## <a href="" id="sec07"></a>Windows Recovery Environment
 
 
 Windows Recovery Environment (Windows RE) is a diagnostics and recovery toolset included in Windows Vista and later operating systems. The latest version of Windows RE is based on Windows PE. You can also extend Windows RE and add your own tools if needed. If a Windows installation fails to start and Windows RE is installed, you will see an automatic failover into Windows RE.
@@ -170,7 +170,7 @@ Figure 8. A Windows 10 client booted into Windows RE, showing Advanced options.
 
 For more information on Windows RE, see [Windows Recovery Environment](http://go.microsoft.com/fwlink/p/?LinkId=619236).
 
-## Windows Deployment Services
+## <a href="" id="sec08"></a>Windows Deployment Services
 
 
 Windows Deployment Services (WDS) has been updated and improved in several ways starting with Windows 8. Remember that the two main functions you will use are the PXE boot support and multicast. Most of the changes are related to management and increased performance. In Windows Server 2012 R2, WDS also can be used for the Network Unlock feature in BitLocker.
@@ -197,7 +197,7 @@ Also, there are a few new features related to TFTP performance:
 
 Figure 10. TFTP changes are now easy to perform.
 
-## Microsoft Deployment Toolkit 2013 Update 1
+## <a href="" id="sec09"></a>Microsoft Deployment Toolkit 2013 Update 1
 
 
 MDT 2013 Update 1 is a free deployment solution from Microsoft. It provides end-to-end guidance, best practices, and tools for planning, building, and deploying Windows operating systems. MDT builds on top of the core deployment tools in the Windows ADK by contributing guidance, reducing complexity, and adding critical features for an enterprise-ready deployment solution.
@@ -215,7 +215,7 @@ Figure 11. The Deployment Workbench in MDT 2013, showing a task sequence.
 
 For more information on MDT 2013 Update 1, see the [Microsoft Deployment Toolkit](http://go.microsoft.com/fwlink/p/?LinkId=618117) resource center.
 
-## Microsoft Security Compliance Manager 2013
+## <a href="" id="sec10"></a>Microsoft Security Compliance Manager 2013
 
 
 [Microsoft SCM](http://go.microsoft.com/fwlink/p/?LinkId=619246) is a free utility used to create baseline security settings for the Windows client and server environment. The baselines can be exported and then deployed via Group Policy, local policies, MDT, or Configuration Manager. The current version of Security Compliance Manager includes baselines for Windows 8.1 and several earlier versions of Windows, Windows Server, and Internet Explorer.
@@ -224,7 +224,7 @@ For more information on MDT 2013 Update 1, see the [Microsoft Deployment Toolkit
 
 Figure 12. The SCM console showing a baseline configuration for a fictional client's computer security compliance.
 
-## Microsoft Desktop Optimization Pack
+## <a href="" id="sec11"></a>Microsoft Desktop Optimization Pack
 
 
 MDOP is a suite of technologies available to Software Assurance customers through an additional subscription.
@@ -243,7 +243,7 @@ The following components are included in the MDOP suite:
 
 For more information on the benefits of an MDOP subscription, see [Microsoft Desktop Optimization Pack](http://go.microsoft.com/fwlink/p/?LinkId=619247).
 
-## Internet Explorer Administration Kit 11
+## <a href="" id="sec12"></a>Internet Explorer Administration Kit 11
 
 
 There has been a version of IEAK for every version of Internet Explorer since 3.0. It gives you the capability to customize Internet Explorer as you would like. The end result of using IEAK is an Internet Explorer package that can be deployed unattended. The wizard creates one .exe file and one .msi file.
@@ -254,7 +254,7 @@ Figure 13. The User Experience selection screen in IEAK 11.
 
 To download IEAK 11, see the [Internet Explorer Administration Kit (IEAK) Information and Downloads](http://go.microsoft.com/fwlink/p/?LinkId=619248) page.
 
-## Windows Server Update Services
+## <a href="" id="sec13"></a>Windows Server Update Services
 
 
 WSUS is a server role in Windows Server 2012 R2 that enables you to maintain a local repository of Microsoft updates and then distribute them to machines on your network. WSUS offers approval control and reporting of update status in your environment.
@@ -265,7 +265,7 @@ Figure 14. The Windows Server Update Services console.
 
 For more information on WSUS, see the [Windows Server Update Services Overview](http://go.microsoft.com/fwlink/p/?LinkId=619249).
 
-## Unified Extensible Firmware Interface
+## <a href="" id="sec14"></a>Unified Extensible Firmware Interface
 
 
 For many years BIOS has been the industry standard for booting a PC. BIOS has served us well, but it is time to replace it with something better. **UEFI** is the replacement for BIOS, so it is important to understand the differences between BIOS and UEFI. In this section, you learn the major differences between the two and how they affect operating system deployment.
diff --git a/windows/deploy/xml-elements-library-usmt-win7-usmt-win8.md b/windows/deploy/xml-elements-library-usmt-win7-usmt-win8.md
index a69178383b..2c2624cb51 100644
--- a/windows/deploy/xml-elements-library-usmt-win7-usmt-win8.md
+++ b/windows/deploy/xml-elements-library-usmt-win7-usmt-win8.md
@@ -21,17 +21,17 @@ This topic describes the XML elements and helper functions that you can employ t
 
 In addition to XML elements and helper functions, this topic describes how to specify encoded locations and locations patterns, functions that are for internal USMT use only, and the version tags that you can use with helper functions.
 
--   [Elements and helper functions](#Elements)
+-   [Elements and helper functions](#elements)
 
--   [Appendix](#Appendix)
+-   [Appendix](#appendix)
 
     -   [Specifying locations](#locations)
 
-    -   [Internal USMT functions](#InternalUSMTFunctions)
+    -   [Internal USMT functions](#internalusmtfunctions)
 
-    -   [Valid version tags](#Allowed)
+    -   [Valid version tags](#allowed)
 
-## Elements and Helper Functions
+## <a href="" id="elements"></a>Elements and Helper Functions
 
 
 The following table describes the XML elements and helper functions you can use with USMT.
@@ -51,40 +51,40 @@ The following table describes the XML elements and helper functions you can use
 </thead>
 <tbody>
 <tr class="odd">
-<td align="left"><p>[&lt;addObjects&gt;](#addObjects)</p>
+<td align="left"><p>[&lt;addObjects&gt;](#addobjects)</p>
 <p>[&lt;attributes&gt;](#attribute)</p>
 <p>[&lt;bytes&gt;](#bytes)</p>
-<p>[&lt;commandLine&gt;](#commandLine)</p>
+<p>[&lt;commandLine&gt;](#commandline)</p>
 <p>[&lt;component&gt;](#component)</p>
 <p>[&lt;condition&gt;](#condition)</p>
 <p>[&lt;conditions&gt;](#conditions)</p>
 <p>[&lt;content&gt;](#content)</p>
-<p>[&lt;contentModify&gt;](#contentModify)</p>
+<p>[&lt;contentModify&gt;](#contentmodify)</p>
 <p>[&lt;description&gt;](#description)</p>
-<p>[&lt;destinationCleanup&gt;](#destinationCleanup)</p>
+<p>[&lt;destinationCleanup&gt;](#destinationcleanup)</p>
 <p>[&lt;detect&gt;](#detect)</p>
 <p>[&lt;detects&gt;](#detects)</p>
 <p>[&lt;detection&gt;](#detection)</p>
-<p>[&lt;displayName&gt;](#displayName)</p>
-<p>[&lt;environment&gt;](#BKMK_environment)</p>
+<p>[&lt;displayName&gt;](#displayname)</p>
+<p>[&lt;environment&gt;](#bkmk-environment)</p>
 <p>[&lt;exclude&gt;](#exclude)</p>
-<p>[&lt;excludeAttributes&gt;](#excludeAttributes)</p>
+<p>[&lt;excludeAttributes&gt;](#excludeattributes)</p>
 <p>[&lt;extensions&gt;](#extensions)</p>
 <p>[&lt;extension&gt;](#extension)</p>
-<p>[&lt;externalProcess&gt;](#externalProcess)</p>
+<p>[&lt;externalProcess&gt;](#externalprocess)</p>
 <p>[&lt;icon&gt;](#icon)</p>
 <p>[&lt;include&gt;](#include)</p>
-<p>[&lt;includeAttribute&gt;](#includeAttributes)</p></td>
+<p>[&lt;includeAttribute&gt;](#includeattributes)</p></td>
 <td align="left"><p>[&lt;library&gt;](#library)</p>
 <p>[&lt;location&gt;](#location)</p>
-<p>[&lt;locationModify&gt;](#locationModify)</p>
-<p>[&lt;_locDefinition&gt;](#locDefinition)</p>
+<p>[&lt;locationModify&gt;](#locationmodify)</p>
+<p>[&lt;_locDefinition&gt;](#locdefinition)</p>
 <p>[&lt;manufacturer&gt;](#manufacturer)</p>
 <p>[&lt;merge&gt;](#merge)</p>
 <p>[&lt;migration&gt;](#migration)</p>
-<p>[&lt;namedElements&gt;](#namedElements)</p>
+<p>[&lt;namedElements&gt;](#namedelements)</p>
 <p>[&lt;object&gt;](#object)</p>
-<p>[&lt;objectSet&gt;](#objectSet)</p>
+<p>[&lt;objectSet&gt;](#objectset)</p>
 <p>[&lt;path&gt;](#path)</p>
 <p>[&lt;paths&gt;](#paths)</p>
 <p>[&lt;pattern&gt;](#pattern)</p>
@@ -94,25 +94,25 @@ The following table describes the XML elements and helper functions you can use
 <p>[&lt;rules&gt;](#rules)</p>
 <p>[&lt;script&gt;](#script)</p>
 <p>[&lt;text&gt;](#text)</p>
-<p>[&lt;unconditionalExclude&gt;](#unconditionalExclude)</p>
+<p>[&lt;unconditionalExclude&gt;](#unconditionalexclude)</p>
 <p>[&lt;variable&gt;](#variable)</p>
 <p>[&lt;version&gt;](#version)</p>
-<p>[&lt;windowsObjects&gt;](#windowsObjects)</p></td>
-<td align="left"><p>[&lt;condition&gt; functions](#ConditionFunctions)</p>
-<p>[&lt;content&gt; functions](#ContentFunctions)</p>
-<p>[&lt;contentModify&gt; functions](#ContentModifyFunctions)</p>
-<p>[&lt;include&gt; and &lt;exclude&gt; filter functions](#PersistFilterFunctions)</p>
-<p>[&lt;locationModify&gt; functions](#LocationModifyFunctions)</p>
-<p>[&lt;merge&gt; functions](#MergeFunctions)</p>
-<p>[&lt;script&gt; functions](#ScriptFunctions)</p>
-<p>[Internal USMT functions](#InternalUSMTFunctions)</p></td>
+<p>[&lt;windowsObjects&gt;](#windowsobjects)</p></td>
+<td align="left"><p>[&lt;condition&gt; functions](#conditionfunctions)</p>
+<p>[&lt;content&gt; functions](#contentfunctions)</p>
+<p>[&lt;contentModify&gt; functions](#contentmodifyfunctions)</p>
+<p>[&lt;include&gt; and &lt;exclude&gt; filter functions](#persistfilterfunctions)</p>
+<p>[&lt;locationModify&gt; functions](#locationmodifyfunctions)</p>
+<p>[&lt;merge&gt; functions](#mergefunctions)</p>
+<p>[&lt;script&gt; functions](#scriptfunctions)</p>
+<p>[Internal USMT functions](#internalusmtfunctions)</p></td>
 </tr>
 </tbody>
 </table>
 
  
 
-## &lt;addObjects&gt;
+## <a href="" id="addobjects"></a>&lt;addObjects&gt;
 
 
 The &lt;addObjects&gt; element emulates the existence of one or more objects on the source computer. The child &lt;object&gt; elements provide the details of the emulated objects. If the content is a &lt;script&gt; element, the result of the invocation will be an array of objects.
@@ -148,7 +148,7 @@ The following example is from the MigApp.xml file:
 </addObjects>
 ```
 
-## &lt;attributes&gt;
+## <a href="" id="attribute"></a>&lt;attributes&gt;
 
 
 The &lt;attributes&gt; element defines the attributes for a registry key or file.
@@ -215,7 +215,7 @@ The following example is from the MigApp.xml file:
 </object> 
 ```
 
-## &lt;bytes&gt;
+## <a href="" id="bytes"></a>&lt;bytes&gt;
 
 
 You must specify the &lt;bytes&gt; element only for files because, if &lt;location&gt; corresponds to a registry key or a directory, then &lt;bytes&gt; will be ignored.
@@ -278,14 +278,14 @@ The following example is from the MigApp.xml file:
 </object> 
 ```
 
-## &lt;commandLine&gt;
+## <a href="" id="commandline"></a>&lt;commandLine&gt;
 
 
 You might want to use the &lt;commandLine&gt; element if you want to start or stop a service or application before or after you run the ScanState and LoadState tools.
 
 -   **Number of occurrences:** unlimited
 
--   **Parent elements:**[&lt;externalProcess&gt;](#externalProcess)
+-   **Parent elements:**[&lt;externalProcess&gt;](#externalprocess)
 
 -   **Child elements:** none****
 
@@ -317,7 +317,7 @@ Syntax:
 
  
 
-## &lt;component&gt;
+## <a href="" id="component"></a>&lt;component&gt;
 
 
 The &lt;component&gt; element is required in a custom .xml file. This element defines the most basic construct of a migration .xml file. For example, in the MigApp.xml file, "Microsoft® Office 2003" is a component that contains another component, "Microsoft Office Access® 2003". You can use the child elements to define the component.
@@ -328,9 +328,9 @@ A component can be nested inside another component; that is, the &lt;component&g
 
 -   **Parent elements:**[&lt;migration&gt;](#migration), [&lt;role&gt;](#role)
 
--   **Required child elements:**[&lt;role&gt;](#role), [&lt;displayName&gt;](#displayName)
+-   **Required child elements:**[&lt;role&gt;](#role), [&lt;displayName&gt;](#displayname)
 
--   **Optional child elements:**[&lt;manufacturer&gt;](#manufacturer), [&lt;version&gt;](#version), [&lt;description&gt;](#description), [&lt;paths&gt;](#paths), [&lt;icon&gt;](#icon), [&lt;environment&gt;](#BKMK_environment), [&lt;extensions&gt;](#extensions)
+-   **Optional child elements:**[&lt;manufacturer&gt;](#manufacturer), [&lt;version&gt;](#version), [&lt;description&gt;](#description), [&lt;paths&gt;](#paths), [&lt;icon&gt;](#icon), [&lt;environment&gt;](#bkmk-environment), [&lt;extensions&gt;](#extensions)
 
 Syntax:
 
@@ -397,10 +397,10 @@ hidden="Yes|No"&gt;
 
 For an example, see any of the default migration .xml files.
 
-## &lt;condition&gt;
+## <a href="" id="condition"></a>&lt;condition&gt;
 
 
-Although the &lt;condition&gt; element under the &lt;detect&gt;, &lt;objectSet&gt;, and &lt;addObjects&gt; elements is supported, we recommend that you do not use it. This element might be deprecated in future versions of USMT, requiring you to rewrite your scripts. We recommend that, if you need to use a condition within the &lt;objectSet&gt; and &lt;addObjects&gt; elements, you use the more powerful [&lt;conditions&gt;](f#conditions) element, which allows you to formulate complex Boolean statements.
+Although the &lt;condition&gt; element under the &lt;detect&gt;, &lt;objectSet&gt;, and &lt;addObjects&gt; elements is supported, we recommend that you do not use it. This element might be deprecated in future versions of USMT, requiring you to rewrite your scripts. We recommend that, if you need to use a condition within the &lt;objectSet&gt; and &lt;addObjects&gt; elements, you use the more powerful [&lt;conditions&gt;](#conditions) element, which allows you to formulate complex Boolean statements.
 
 The &lt;condition&gt; element has a Boolean result. You can use this element to specify the conditions in which the parent element will be evaluated. If any of the present conditions return FALSE, the parent element will not be evaluated.
 
@@ -410,7 +410,7 @@ The &lt;condition&gt; element has a Boolean result. You can use this element to
 
 -   **Child elements:** none
 
--   **Helper functions:** You can use the following [&lt;condition&gt; functions](#ConditionFunctions) with this element: DoesOSMatch, IsNative64Bit(), IsOSLaterThan, IsOSEarlierThan, DoesObjectExist, DoesFileVersionMatch, IsFileVersionAbove, IsFileVersionBelow, IsSystemContext, DoesStringContentEqual, DoesStringContentContain, IsSameObject, IsSameContent, and IsSameStringContent.
+-   **Helper functions:** You can use the following [&lt;condition&gt; functions](#conditionfunctions) with this element: DoesOSMatch, IsNative64Bit(), IsOSLaterThan, IsOSEarlierThan, DoesObjectExist, DoesFileVersionMatch, IsFileVersionAbove, IsFileVersionBelow, IsSystemContext, DoesStringContentEqual, DoesStringContentContain, IsSameObject, IsSameContent, and IsSameStringContent.
 
 Syntax:
 
@@ -472,15 +472,15 @@ However, in the code sample below, the &lt;condition&gt; elements, A and B, are
 </detection>
 ```
 
-### &lt;condition&gt; functions
+### <a href="" id="conditionfunctions"></a>&lt;condition&gt; functions
 
 The &lt;condition&gt; functions return a Boolean value. You can use these elements in &lt;addObjects&gt; conditions.
 
--   [Operating system version functions](#OperatingSystemFunctions)
+-   [Operating system version functions](#operatingsystemfunctions)
 
--   [Object content functions](#ObjectContentFunctions)
+-   [Object content functions](#objectcontentfunctions)
 
-### Operating system version functions
+### <a href="" id="operatingsystemfunctions"></a>Operating system version functions
 
 -   **DoesOSMatch**
 
@@ -601,7 +601,7 @@ The &lt;condition&gt; functions return a Boolean value. You can use these elemen
 
      
 
-### Object content functions
+### <a href="" id="objectcontentfunctions"></a>Object content functions
 
 -   **DoesObjectExist**
 
@@ -668,7 +668,7 @@ The &lt;condition&gt; functions return a Boolean value. You can use these elemen
     <tr class="even">
     <td align="left"><p><em>VersionTag</em></p></td>
     <td align="left"><p>Yes</p></td>
-    <td align="left"><p>The [version tag](#Allowed) value that will be checked.</p></td>
+    <td align="left"><p>The [version tag](#allowed) value that will be checked.</p></td>
     </tr>
     <tr class="odd">
     <td align="left"><p><em>VersionValue</em></p></td>
@@ -714,7 +714,7 @@ The &lt;condition&gt; functions return a Boolean value. You can use these elemen
     <tr class="even">
     <td align="left"><p><em>VersionTag</em></p></td>
     <td align="left"><p>Yes</p></td>
-    <td align="left"><p>The [version tag](#Allowed) value that will be checked.</p></td>
+    <td align="left"><p>The [version tag](#allowed) value that will be checked.</p></td>
     </tr>
     <tr class="odd">
     <td align="left"><p><em>VersionValue</em></p></td>
@@ -752,7 +752,7 @@ The &lt;condition&gt; functions return a Boolean value. You can use these elemen
     <tr class="even">
     <td align="left"><p><em>VersionTag</em></p></td>
     <td align="left"><p>Yes</p></td>
-    <td align="left"><p>The [version tag](#Allowed) value that will be checked.</p></td>
+    <td align="left"><p>The [version tag](#allowed) value that will be checked.</p></td>
     </tr>
     <tr class="odd">
     <td align="left"><p><em>VersionValue</em></p></td>
@@ -995,14 +995,14 @@ The &lt;condition&gt; functions return a Boolean value. You can use these elemen
 
      
 
-## &lt;conditions&gt;
+## <a href="" id="conditions"></a>&lt;conditions&gt;
 
 
 The &lt;conditions&gt; element returns a Boolean result that is used to specify the conditions in which the parent element is evaluated. USMT evaluates the child elements, and then joins their results using the operators AND or OR according to the **operation** parameter.
 
--   **Number of occurrences:** Unlimited inside another &lt;conditions&gt; element. Limited to one occurrence in [&lt;detection&gt;](#detection), [&lt;rules&gt;](#rules), [&lt;addObjects&gt;](#addObjects), and [&lt;objectSet&gt;](#objectSet)
+-   **Number of occurrences:** Unlimited inside another &lt;conditions&gt; element. Limited to one occurrence in [&lt;detection&gt;](#detection), [&lt;rules&gt;](#rules), [&lt;addObjects&gt;](#addobjects), and [&lt;objectSet&gt;](#objectset)
 
--   **Parent elements:**[&lt;conditions&gt;](#conditions), [&lt;detection&gt;](#detection), [&lt;environment&gt;](#BKMK_environment), [&lt;rules&gt;](#rules), [&lt;addObjects&gt;](#addObjects), and [&lt;objectSet&gt;](#objectSet)
+-   **Parent elements:**[&lt;conditions&gt;](#conditions), [&lt;detection&gt;](#detection), [&lt;environment&gt;](#bkmk-environment), [&lt;rules&gt;](#rules), [&lt;addObjects&gt;](#addobjects), and [&lt;objectSet&gt;](#objectset)
 
 -   **Child elements:**[&lt;conditions&gt;](#conditions), [&lt;condition&gt;](#condition)
 
@@ -1049,18 +1049,18 @@ The following example is from the MigApp.xml file:
 </environment>
 ```
 
-## &lt;content&gt;
+## <a href="" id="content"></a>&lt;content&gt;
 
 
 You can use the &lt;content&gt; element to specify a list of object patterns to obtain an object set from the source computer. Each &lt;objectSet&gt; within a &lt;content&gt; element is evaluated. For each resulting object pattern list, the objects that match it are enumerated and their content is filtered by the filter parameter. The resulting string array is the output for the &lt;content&gt; element. The filter script returns an array of locations. The parent &lt;objectSet&gt; element can contain multiple child &lt;content&gt; elements.
 
 -   **Number of occurrences:** unlimited
 
--   **Parent elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Parent elements:**[&lt;objectSet&gt;](#objectset)
 
--   **Child elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Child elements:**[&lt;objectSet&gt;](#objectset)
 
--   **Helper functions:** You can use the following [&lt;content&gt; functions](#ContentFunctions) with this element: ExtractSingleFile, ExtractMultipleFiles, and ExtractDirectory.
+-   **Helper functions:** You can use the following [&lt;content&gt; functions](#contentfunctions) with this element: ExtractSingleFile, ExtractMultipleFiles, and ExtractDirectory.
 
 Syntax:
 
@@ -1093,7 +1093,7 @@ Syntax:
 
  
 
-### &lt;content&gt; functions
+### <a href="" id="contentfunctions"></a>&lt;content&gt; functions
 
 The following functions generate patterns out of the content of an object. These functions are called for every object that the parent &lt;ObjectSet&gt; element is enumerating.
 
@@ -1233,7 +1233,7 @@ The following functions generate patterns out of the content of an object. These
     </objectSet>
     ```
 
-## &lt;contentModify&gt;
+## <a href="" id="contentmodify"></a>&lt;contentModify&gt;
 
 
 The &lt;contentModify&gt; element modifies the content of an object before it is written to the destination computer. For each &lt;contentModify&gt; element there can be multiple &lt;objectSet&gt; elements. This element returns the new content of the object that is being processed.
@@ -1242,9 +1242,9 @@ The &lt;contentModify&gt; element modifies the content of an object before it is
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Required child elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Required child elements:**[&lt;objectSet&gt;](#objectset)
 
--   **Helper functions**: You can use the following [&lt;contentModify&gt; functions](#ContentModifyFunctions) with this element: ConvertToDWORD, ConvertToString, ConvertToBinary, KeepExisting, OffsetValue, SetValueByTable, MergeMultiSzContent, and MergeDelimitedContent.
+-   **Helper functions**: You can use the following [&lt;contentModify&gt; functions](#contentmodifyfunctions) with this element: ConvertToDWORD, ConvertToString, ConvertToBinary, KeepExisting, OffsetValue, SetValueByTable, MergeMultiSzContent, and MergeDelimitedContent.
 
 Syntax:
 
@@ -1277,7 +1277,7 @@ Syntax:
 
  
 
-### &lt;contentModify&gt; functions
+### <a href="" id="contentmodifyfunctions"></a>&lt;contentModify&gt; functions
 
 The following functions change the content of objects as they are migrated. These functions are called for every object that the parent &lt;ObjectSet&gt; element is enumerating.
 
@@ -1558,7 +1558,7 @@ The following functions change the content of objects as they are migrated. Thes
 
      
 
-## &lt;description&gt;
+## <a href="" id="description"></a>&lt;description&gt;
 
 
 The &lt;description&gt; element defines a description for the component but does not affect the migration.
@@ -1603,7 +1603,7 @@ The following code sample shows how the &lt;description&gt; element defines the
 <description>My custom component<description>
 ```
 
-## &lt;destinationCleanup&gt;
+## <a href="" id="destinationcleanup"></a>&lt;destinationCleanup&gt;
 
 
 The &lt;destinationCleanup&gt; element deletes objects, such as files and registry keys, from the destination computer before applying the objects from the source computer. This element is evaluated only when the LoadState tool is run on the destination computer. That is, this element is ignored by the ScanState tool.
@@ -1619,7 +1619,7 @@ For each &lt;destinationCleanup&gt; element there can be multiple &lt;objectSet&
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Child elements:**[&lt;objectSet&gt;](#objectSet) (Note that the destination computer will delete all child elements.)
+-   **Child elements:**[&lt;objectSet&gt;](#objectset) (Note that the destination computer will delete all child elements.)
 
 Syntax:
 
@@ -1663,7 +1663,7 @@ For example:
 </destinationCleanup>
 ```
 
-## &lt;detect&gt;
+## <a href="" id="detect"></a>&lt;detect&gt;
 
 
 Although the &lt;detect&gt; element is still supported, we do not recommend using it because it may be deprecated in future versions of USMT. In that case, you would have to rewrite your scripts. Instead, we recommend that you use the [&lt;detection&gt;](#detection)**element.**
@@ -1674,11 +1674,11 @@ For each &lt;detect&gt; element there can be multiple child &lt;condition&gt; or
 
 -   **Number of occurrences:** unlimited
 
--   **Parent elements:** &lt;detects&gt;, [&lt;namedElements&gt;](#namedElements)
+-   **Parent elements:** &lt;detects&gt;, [&lt;namedElements&gt;](#namedelements)
 
 -   **Required child elements:**[&lt;condition&gt;](#condition)
 
--   **Optional child elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Optional child elements:**[&lt;objectSet&gt;](#objectset)
 
 Syntax:
 
@@ -1725,7 +1725,7 @@ Syntax:
 
 For examples, see the examples for [&lt;detection&gt;](#detection).
 
-## &lt;detects&gt;
+## <a href="" id="detects"></a>&lt;detects&gt;
 
 
 Although the &lt;detects&gt; element is still supported, we recommend that you do not use it because it may be deprecated in future versions of USMT, which would require you to rewrite your scripts. Instead, we recommend that you use the [&lt;detection&gt;](#detection) element if the parent element is &lt;role&gt; or &lt;namedElements&gt;, and we recommend that you use the &lt;conditions&gt; element if the parent element is &lt;rules&gt;. Using &lt;detection&gt; allows you to more clearly formulate complex Boolean statements.
@@ -1740,7 +1740,7 @@ Syntax:
 
 -   **Number of occurrences:** Unlimited.
 
--   **Parent elements:**[&lt;role&gt;](#role), [&lt;rules&gt;](#rules), [&lt;namedElements&gt;](#namedElements)
+-   **Parent elements:**[&lt;role&gt;](#role), [&lt;rules&gt;](#rules), [&lt;namedElements&gt;](#namedelements)
 
 -   **Required child elements:** &lt;detect&gt;
 
@@ -1795,7 +1795,7 @@ The following example is from the MigApp.xml file.
 </detects>
 ```
 
-## &lt;detection&gt;
+## <a href="" id="detection"></a>&lt;detection&gt;
 
 
 The &lt;detection&gt; element is a container for one &lt;conditions&gt; element. The result of the child &lt;condition&gt; elements, located underneath the &lt;conditions&gt; element, determines the result of this element. For example, if all of the child &lt;conditions&gt; elements within the &lt;detection&gt; element resolve to TRUE, then the &lt;detection&gt; element resolves to TRUE. If any of the child &lt;conditions&gt; elements resolve to FALSE, then the &lt;detection&gt; element resolves to FALSE.
@@ -1806,7 +1806,7 @@ Use the &lt;detection&gt; element under the &lt;namedElements&gt; element if you
 
 -   **Number of occurrences:** Unlimited.
 
--   **Parent elements:**[&lt;role&gt;](#role), [&lt;namedElements&gt;](#namedElements)
+-   **Parent elements:**[&lt;role&gt;](#role), [&lt;namedElements&gt;](#namedelements)
 
 -   **Child elements:**[&lt;conditions&gt;](#conditions)
 
@@ -1876,7 +1876,7 @@ and
    </detection>
 ```
 
-## &lt;displayName&gt;
+## <a href="" id="displayname"></a>&lt;displayName&gt;
 
 
 The &lt;displayName&gt; element is a required field within each &lt;component&gt; element.
@@ -1926,14 +1926,14 @@ For example:
 <displayName>Command Prompt settings</displayName>
 ```
 
-## &lt;environment&gt;
+## <a href="" id="bkmk-environment"></a>&lt;environment&gt;
 
 
-The &lt;environment&gt; element is a container for &lt;variable&gt; elements in which you can define variables to use in your .xml file. All environment variables defined this way will be private. That is, they will be available only for their child components and the component in which they were defined. For two example scenarios, see [Examples](#EnvEx).
+The &lt;environment&gt; element is a container for &lt;variable&gt; elements in which you can define variables to use in your .xml file. All environment variables defined this way will be private. That is, they will be available only for their child components and the component in which they were defined. For two example scenarios, see [Examples](#envex).
 
 -   **Number of occurrences:** unlimited
 
--   **Parent elements:**[&lt;role&gt;](#role), [&lt;component&gt;](#component), [&lt;namedElements&gt;](#namedElements)
+-   **Parent elements:**[&lt;role&gt;](#role), [&lt;component&gt;](#component), [&lt;namedElements&gt;](#namedelements)
 
 -   **Required child elements:**[&lt;variable&gt;](#variable)
 
@@ -1982,7 +1982,7 @@ Syntax:
 
  
 
-## 
+## <a href="" id="envex"></a>
 
 
 ### Example scenario 1
@@ -1997,7 +1997,7 @@ In this scenario, you want to generate the location of objects at run time depen
 </environment>
 ```
 
-Then you can use an include rule as follows. You can use any of the [&lt;script&gt; functions](#ScriptFunctions) to perform similar tasks.
+Then you can use an include rule as follows. You can use any of the [&lt;script&gt; functions](#scriptfunctions) to perform similar tasks.
 
 ``` syntax
 <include>
@@ -2063,7 +2063,7 @@ Then, you can specify the variable in an &lt;include&gt; rule as follows:
 </include>
 ```
 
-## &lt;exclude&gt;
+## <a href="" id="exclude"></a>&lt;exclude&gt;
 
 
 The &lt;exclude&gt; element determines what objects will not be migrated, unless there is a more specific &lt;include&gt; element that migrates an object. If there is an &lt;include&gt; and &lt;exclude&gt; element for the same object, the object will be included. For each &lt;exclude&gt; element there can be multiple child &lt;objectSet&gt; elements.
@@ -2072,9 +2072,9 @@ The &lt;exclude&gt; element determines what objects will not be migrated, unless
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Child elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Child elements:**[&lt;objectSet&gt;](#objectset)
 
--   **Helper functions:** You can use the following [&lt;exclude&gt; filter functions](#PersistFilterFunctions) with this element: CompareStringContent, IgnoreIrrelevantLinks, AnswerNo, NeverRestore, and SameRegContent.
+-   **Helper functions:** You can use the following [&lt;exclude&gt; filter functions](#persistfilterfunctions) with this element: CompareStringContent, IgnoreIrrelevantLinks, AnswerNo, NeverRestore, and SameRegContent.
 
 Syntax:
 
@@ -2120,7 +2120,7 @@ For example, from the MigUser.xml file:
 </exclude>
 ```
 
-## &lt;excludeAttributes&gt;
+## <a href="" id="excludeattributes"></a>&lt;excludeAttributes&gt;
 
 
 You can use the &lt;excludeAttributes&gt; element to determine which parameters associated with an object will not be migrated. If there are conflicts between the &lt;includeAttributes&gt; and &lt;excludeAttributes&gt; elements, the most specific pattern determines the patterns that will not be migrated. If an object does not have an &lt;includeAttributes&gt; or &lt;excludeAttributes&gt; element, then all of its parameters will be migrated.
@@ -2129,7 +2129,7 @@ You can use the &lt;excludeAttributes&gt; element to determine which parameters
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Child elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Child elements:**[&lt;objectSet&gt;](#objectset)
 
 Syntax:
 
@@ -2216,7 +2216,7 @@ Example:
 </migration>
 ```
 
-## &lt;extensions&gt;
+## <a href="" id="extensions"></a>&lt;extensions&gt;
 
 
 The &lt;extensions&gt; element is a container for one or more &lt;extension&gt; elements.
@@ -2233,7 +2233,7 @@ Syntax:
 
 &lt;/extensions&gt;
 
-## &lt;extension&gt;
+## <a href="" id="extension"></a>&lt;extension&gt;
 
 
 You can use the &lt;extension&gt; element to specify documents of a specific extension.
@@ -2290,9 +2290,9 @@ is the same as specifying the following code below the &lt;rules&gt; element:
 </include>
 ```
 
-For another example of how to use the &lt;extension&gt; element, see the example for [&lt;excludeAttributes&gt;](#excludeAttributes).
+For another example of how to use the &lt;extension&gt; element, see the example for [&lt;excludeAttributes&gt;](#excludeattributes).
 
-## &lt;externalProcess&gt;
+## <a href="" id="externalprocess"></a>&lt;externalProcess&gt;
 
 
 You can use the &lt;externalProcess&gt; element to run a command line during the migration process. For example, you may want to run a command after the LoadState process completes.
@@ -2301,7 +2301,7 @@ You can use the &lt;externalProcess&gt; element to run a command line during the
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Required child elements:**[&lt;commandLine&gt;](#commandLine)
+-   **Required child elements:**[&lt;commandLine&gt;](#commandline)
 
 Syntax:
 
@@ -2341,14 +2341,14 @@ Syntax:
 
  
 
-For an example of how to use the &lt;externalProcess&gt; element, see the example for [&lt;excludeAttributes&gt;](#excludeAttributes).
+For an example of how to use the &lt;externalProcess&gt; element, see the example for [&lt;excludeAttributes&gt;](#excludeattributes).
 
-## &lt;icon&gt;
+## <a href="" id="icon"></a>&lt;icon&gt;
 
 
 This is an internal USMT element. Do not use this element.
 
-## &lt;include&gt;
+## <a href="" id="include"></a>&lt;include&gt;
 
 
 The &lt;include&gt; element determines what to migrate, unless there is a more specific [&lt;exclude&gt;](#exclude) rule. You can specify a script to be more specific to extend the definition of what you want to collect. For each &lt;include&gt; element there can be multiple &lt;objectSet&gt; elements.
@@ -2357,9 +2357,9 @@ The &lt;include&gt; element determines what to migrate, unless there is a more s
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Required child element:**[&lt;objectSet&gt;](#objectSet)
+-   **Required child element:**[&lt;objectSet&gt;](#objectset)
 
--   **Helper functions:** You can use the following [&lt;include&gt; filter functions](#PersistFilterFunctions) with this element: CompareStringContent, IgnoreIrrelevantLinks, AnswerNo, and NeverRestore.
+-   **Helper functions:** You can use the following [&lt;include&gt; filter functions](#persistfilterfunctions) with this element: CompareStringContent, IgnoreIrrelevantLinks, AnswerNo, and NeverRestore.
 
 Syntax:
 
@@ -2423,7 +2423,7 @@ The following example is from the MigUser.xml file:
     </component>
 ```
 
-### &lt;include&gt; and &lt;exclude&gt; filter functions
+### <a href="" id="persistfilterfunctions"></a>&lt;include&gt; and &lt;exclude&gt; filter functions
 
 The following functions return a Boolean value. You can use them to migrate certain objects based on when certain conditions are met.
 
@@ -2502,7 +2502,7 @@ The following functions return a Boolean value. You can use them to migrate cert
     </include>
     ```
 
-## &lt;includeAttributes&gt;
+## <a href="" id="includeattributes"></a>&lt;includeAttributes&gt;
 
 
 You can use the &lt;includeAttributes&gt; element to determine whether certain parameters associated with an object will be migrated along with the object itself. If there are conflicts between the &lt;includeAttributes&gt; and &lt;excludeAttributes&gt; elements, the most specific pattern will determine which parameters will be migrated. If an object does not have an &lt;includeAttributes&gt; or &lt;excludeAttributes&gt; element, then all of its parameters will be migrated.
@@ -2511,7 +2511,7 @@ You can use the &lt;includeAttributes&gt; element to determine whether certain p
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Child elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Child elements:**[&lt;objectSet&gt;](#objectset)
 
 Syntax:
 
@@ -2558,14 +2558,14 @@ Syntax:
 
  
 
-For an example of how to use the &lt;includeAttributes&gt; element, see the example for [&lt;excludeAttributes&gt;](#excludeAttributes).
+For an example of how to use the &lt;includeAttributes&gt; element, see the example for [&lt;excludeAttributes&gt;](#excludeattributes).
 
-## &lt;library&gt;
+## <a href="" id="library"></a>&lt;library&gt;
 
 
 This is an internal USMT element. Do not use this element.
 
-## &lt;location&gt;
+## <a href="" id="location"></a>&lt;location&gt;
 
 
 The &lt;location&gt; element defines the location of the &lt;object&gt; element.
@@ -2626,7 +2626,7 @@ The following example is from the MigApp.xml file:
 </addObjects>
 ```
 
-## &lt;locationModify&gt;
+## <a href="" id="locationmodify"></a>&lt;locationModify&gt;
 
 
 You can use the &lt;locationModify&gt; element to change the location and name of an object before it is migrated to the destination computer. The &lt;locationModify&gt; element is processed only when the LoadState tool is run on the destination computer. In other words, this element is ignored by the ScanState tool. The &lt;locationModify&gt; element will create the appropriate folder on the destination computer if it does not already exist.
@@ -2635,9 +2635,9 @@ You can use the &lt;locationModify&gt; element to change the location and name o
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Required child element:**[&lt;objectSet&gt;](#objectSet)
+-   **Required child element:**[&lt;objectSet&gt;](#objectset)
 
--   **Helper functions:** You can use the following [&lt;locationModify&gt; functions](#LocationModifyFunctions) with this element: ExactMove, RelativeMove, and Move.
+-   **Helper functions:** You can use the following [&lt;locationModify&gt; functions](#locationmodifyfunctions) with this element: ExactMove, RelativeMove, and Move.
 
 Syntax:
 
@@ -2680,7 +2680,7 @@ The following example is from the MigApp.xml file:
 </locationModify>
 ```
 
-### &lt;locationModify&gt; functions
+### <a href="" id="locationmodifyfunctions"></a>&lt;locationModify&gt; functions
 
 The following functions change the location of objects as they are migrated when using the &lt;locationModify&gt; element. These functions are called for every object that the parent &lt;ObjectSet&gt; element is enumerating. The &lt;locationModify&gt; element will create the appropriate folder on the destination computer if it does not already exist.
 
@@ -2804,12 +2804,12 @@ The following functions change the location of objects as they are migrated when
     </locationModify>
     ```
 
-## &lt;\_locDefinition&gt;
+## <a href="" id="locdefinition"></a>&lt;\_locDefinition&gt;
 
 
 This is an internal USMT element. Do not use this element.
 
-## &lt;manufacturer&gt;
+## <a href="" id="manufacturer"></a>&lt;manufacturer&gt;
 
 
 The &lt;manufacturer&gt; element defines the manufacturer for the component, but does not affect the migration.
@@ -2848,7 +2848,7 @@ Syntax:
 
  
 
-## &lt;merge&gt;
+## <a href="" id="merge"></a>&lt;merge&gt;
 
 
 The &lt;merge&gt; element determines what will happen when a collision occurs. A collision is when an object that is migrated is already present on the destination computer. If you do not specify this element, the default behavior for the registry is for the source object to overwrite the destination object. The default behavior for files is for the source file to be renamed to "OriginalFileName(1).OriginalExtension". This element specifies only what should be done when a collision occurs. It does not include objects. Therefore, for your objects to migrate, you must specify &lt;include&gt; rules along with the &lt;merge&gt; element. When an object is processed and a collision is detected, USMT will select the most specific merge rule and apply it to resolve the conflict. For example, if you have a &lt;merge&gt; rule C:\\\* \[\*\] set to &lt;sourcePriority&gt; and a &lt;merge&gt; rule C:\\subfolder\\\* \[\*\] set to &lt;destinationPriority&gt;, then USMT would use the &lt;destinationPriority&gt; rule because it is the more specific.
@@ -2859,9 +2859,9 @@ For an example of this element, see [Conflicts and Precedence](conflicts-and-pre
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Required child element:**[&lt;objectSet&gt;](#objectSet)
+-   **Required child element:**[&lt;objectSet&gt;](#objectset)
 
--   **Helper functions:** You can use the following [&lt;merge&gt; functions](#MergeFunctions) with this element: SourcePriority, DestinationPriority, FindFilePlaceByPattern, LeafPattern, NewestVersion, HigherValue(), and LowerValue().
+-   **Helper functions:** You can use the following [&lt;merge&gt; functions](#mergefunctions) with this element: SourcePriority, DestinationPriority, FindFilePlaceByPattern, LeafPattern, NewestVersion, HigherValue(), and LowerValue().
 
 Syntax:
 
@@ -2911,7 +2911,7 @@ The following example is from the MigUser.xml file:
 </rules>
 ```
 
-### &lt;merge&gt; functions
+### <a href="" id="mergefunctions"></a>&lt;merge&gt; functions
 
 These functions control how collisions are resolved.
 
@@ -3020,7 +3020,7 @@ These functions control how collisions are resolved.
     </merge>
     ```
 
-## &lt;migration&gt;
+## <a href="" id="migration"></a>&lt;migration&gt;
 
 
 The &lt;migration&gt; element is the single root element of a migration .xml file and is required. Each .xml file must have a unique migration urlid. The urlid of each file that you specify on the command line must be unique. This is because USMT uses the urlid to define the components within the file. For example, you must specify the following at the beginning of each file: &lt;CustomFileName&gt; is the name of the file; for example, "CustomApp".
@@ -3031,7 +3031,7 @@ The &lt;migration&gt; element is the single root element of a migration .xml fil
 
 -   **Required child elements:**[&lt;component&gt;](#component)
 
--   **Optional child elements:**[&lt;library&gt;](#library), [&lt;namedElements&gt;](#namedElements)
+-   **Optional child elements:**[&lt;library&gt;](#library), [&lt;namedElements&gt;](#namedelements)
 
 Syntax:
 
@@ -3127,7 +3127,7 @@ This filter helper function can be used to filter the migration of files based o
 </component>
 ```
 
-## &lt;namedElements&gt;
+## <a href="" id="namedelements"></a>&lt;namedElements&gt;
 
 
 You can use the **&lt;namedElements&gt;** element to define named elements. You can use these elements in any component throughout your .xml file. For an example of how to use this element, see the MigApp.xml file.
@@ -3142,18 +3142,18 @@ Syntax:
 
 -   **Parent elements:**[&lt;migration&gt;](#migration)
 
--   **Child elements:**[&lt;environment&gt;](#BKMK_environment), [&lt;rules&gt;](#rules), [&lt;conditions&gt;](#conditions), [&lt;detection&gt;](#detection), &lt;detects&gt;, &lt;detect&gt;
+-   **Child elements:**[&lt;environment&gt;](#bkmk-environment), [&lt;rules&gt;](#rules), [&lt;conditions&gt;](#conditions), [&lt;detection&gt;](#detection), &lt;detects&gt;, &lt;detect&gt;
 
 For an example of this element, see the MigApp.xml file.
 
-## &lt;object&gt;
+## <a href="" id="object"></a>&lt;object&gt;
 
 
 The &lt;object&gt; element represents a file or registry key.
 
 -   **Number of occurrences:** Unlimited
 
--   **Parent elements:**[&lt;addObjects&gt;](#addObjects)
+-   **Parent elements:**[&lt;addObjects&gt;](#addobjects)
 
 -   **Required child elements:**[&lt;location&gt;](#location), [&lt;attributes&gt;](#attribute)
 
@@ -3182,14 +3182,14 @@ The following example is from the MigApp.xml file:
 </addObjects>
 ```
 
-## &lt;objectSet&gt;
+## <a href="" id="objectset"></a>&lt;objectSet&gt;
 
 
 The &lt;objectSet&gt; element contains a list of object patterns ; for example, file paths, registry locations, and so on. Any child &lt;conditions&gt; elements will be evaluated first. If all child &lt;conditions&gt; elements return FALSE, the &lt;objectSet&gt; element will evaluate to an empty set. For each parent element, there can be only multiple &lt;objectSet&gt; elements.
 
 -   **Number of occurrences:** Unlimited
 
--   **Parent elements:**[&lt;variable&gt;](#variable), [&lt;content&gt;](#content), [&lt;include&gt;](#include), [&lt;exclude&gt;](#exclude), [&lt;merge&gt;](#merge), [&lt;contentModify&gt;](#contentModify), [&lt;locationModify&gt;](#locationModify), [&lt;destinationCleanup&gt;](#destinationCleanup), [&lt;includeAttributes&gt;](#includeAttributes), [&lt;excludeAttributes&gt;](#excludeAttributes), [&lt;unconditionalExclude&gt;](#unconditionalExclude), &lt;detect&gt;
+-   **Parent elements:**[&lt;variable&gt;](#variable), [&lt;content&gt;](#content), [&lt;include&gt;](#include), [&lt;exclude&gt;](#exclude), [&lt;merge&gt;](#merge), [&lt;contentModify&gt;](#contentmodify), [&lt;locationModify&gt;](#locationmodify), [&lt;destinationCleanup&gt;](#destinationcleanup), [&lt;includeAttributes&gt;](#includeattributes), [&lt;excludeAttributes&gt;](#excludeattributes), [&lt;unconditionalExclude&gt;](#unconditionalexclude), &lt;detect&gt;
 
 -   **Required child elements:** either [&lt;script&gt;](#script) or [&lt;pattern&gt;](#pattern)
 
@@ -3231,17 +3231,17 @@ The following example is from the MigUser.xml file:
 </component>
 ```
 
-## &lt;path&gt;
+## <a href="" id="path"></a>&lt;path&gt;
 
 
 This is an internal USMT element. Do not use this element.
 
-## &lt;paths&gt;
+## <a href="" id="paths"></a>&lt;paths&gt;
 
 
 This is an internal USMT element. Do not use this element.
 
-## &lt;pattern&gt;
+## <a href="" id="pattern"></a>&lt;pattern&gt;
 
 
 You can use this element to specify multiple objects. You can specify multiple &lt;pattern&gt; elements for each &lt;objectSet&gt; element and they will be combined. If you are specifying files, you may want to use GenerateDrivePatterns with &lt;script&gt; instead. GenerateDrivePatterns is basically the same as a &lt;pattern&gt; rule, without the drive letter specification. For example, the following two lines of code are similar:
@@ -3253,7 +3253,7 @@ You can use this element to specify multiple objects. You can specify multiple &
 
 -   **Number of occurrences:** Unlimited
 
--   **Parent elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Parent elements:**[&lt;objectSet&gt;](#objectset)
 
 -   **Child elements:** none but *Path* \[*object*\] must be valid.
 
@@ -3338,7 +3338,7 @@ For example:
 
 -   For more examples of how to use this element, see [Exclude Files and Settings](exclude-files-and-settings-usmt.md), [Reroute Files and Settings](reroute-files-and-settings-usmt.md), [Include Files and Settings](include-files-and-settings-usmt.md), and [Custom XML Examples](custom-xml-examples-usmt-win7-usmt-win8.md).
 
-## &lt;processing&gt;
+## <a href="" id="processing"></a>&lt;processing&gt;
 
 
 You can use this element to run a script during a specific point within the migration process. Return values are not expected from the scripts that you specify, and if there are return values, they will be ignored.
@@ -3387,12 +3387,12 @@ Syntax:
 
  
 
-## &lt;plugin&gt;
+## <a href="" id="plugin"></a>&lt;plugin&gt;
 
 
 This is an internal USMT element. Do not use this element.
 
-## &lt;role&gt;
+## <a href="" id="role"></a>&lt;role&gt;
 
 
 The &lt;role&gt; element is required in a custom .xml file. By specifying the &lt;role&gt; element, you can create a concrete component. The component will be defined by the parameters specified at the &lt;component&gt; level, and with the role that you specify here.
@@ -3403,7 +3403,7 @@ The &lt;role&gt; element is required in a custom .xml file. By specifying the &l
 
 -   **Required child elements:**[&lt;rules&gt;](#rules)
 
--   **Optional child elements:**[&lt;environment&gt;](#BKMK_environment), [&lt;detection&gt;](#detection), [&lt;component&gt;](#component), [&lt;role&gt;](#role), &lt;detects&gt;, &lt;plugin&gt;,
+-   **Optional child elements:**[&lt;environment&gt;](#bkmk-environment), [&lt;detection&gt;](#detection), [&lt;component&gt;](#component), [&lt;role&gt;](#role), &lt;detects&gt;, &lt;plugin&gt;,
 
 Syntax:
 
@@ -3487,18 +3487,18 @@ The following example is from the MigUser.xml file. For more examples, see the M
 </component>
 ```
 
-## &lt;rules&gt;
+## <a href="" id="rules"></a>&lt;rules&gt;
 
 
 The &lt;rules&gt; element is required in a custom .xml file. This element contains rules that will run during the migration if the parent &lt;component&gt; element is selected, unless the child &lt;conditions&gt; element, if present, evaluates to FALSE. For each &lt;rules&gt; element there can be multiple child &lt;rules&gt; elements.
 
 -   **Number of occurrences:** unlimited
 
--   **Parent elements:**[&lt;role&gt;](#role), [&lt;rules&gt;](#rules), [&lt;namedElements&gt;](#namedElements)
+-   **Parent elements:**[&lt;role&gt;](#role), [&lt;rules&gt;](#rules), [&lt;namedElements&gt;](#namedelements)
 
 -   **Required child elements:**[&lt;include&gt;](#include)
 
--   **Optional child elements:**[&lt;rules&gt;](#rules), [&lt;exclude&gt;](#exclude), [&lt;unconditionalExclude&gt;](#unconditionalExclude),[&lt;merge&gt;](#merge), [&lt;contentModify&gt;](#contentModify), [&lt;locationModify&gt;](#locationModify), [&lt;destinationCleanup&gt;](#destinationCleanup), [&lt;addObjects&gt;](#addObjects), [&lt;externalProcess&gt;](#externalProcess), [&lt;processing&gt;](#processing), [&lt;includeAttributes&gt;](#includeAttributes), [&lt;excludeAttributes&gt;](#excludeAttributes), [conditions](#conditions), &lt;detects&gt;
+-   **Optional child elements:**[&lt;rules&gt;](#rules), [&lt;exclude&gt;](#exclude), [&lt;unconditionalExclude&gt;](#unconditionalexclude),[&lt;merge&gt;](#merge), [&lt;contentModify&gt;](#contentmodify), [&lt;locationModify&gt;](#locationmodify), [&lt;destinationCleanup&gt;](#destinationcleanup), [&lt;addObjects&gt;](#addobjects), [&lt;externalProcess&gt;](#externalprocess), [&lt;processing&gt;](#processing), [&lt;includeAttributes&gt;](#includeattributes), [&lt;excludeAttributes&gt;](#excludeattributes), [conditions](#conditions), &lt;detects&gt;
 
 Syntax:
 
@@ -3573,14 +3573,14 @@ The following example is from the MigUser.xml file:
 </component>
 ```
 
-## &lt;script&gt;
+## <a href="" id="script"></a>&lt;script&gt;
 
 
 The return value that is required by &lt;script&gt; depends on the parent element.
 
-**Number of occurrences:** Once for [&lt;variable&gt;](#variable), unlimited for [&lt;objectSet&gt;](#objectSet) and [&lt;processing&gt;](#processing)
+**Number of occurrences:** Once for [&lt;variable&gt;](#variable), unlimited for [&lt;objectSet&gt;](#objectset) and [&lt;processing&gt;](#processing)
 
-**Parent elements:**[&lt;objectSet&gt;](#objectSet), [&lt;variable&gt;](#variable), [&lt;processing&gt;](#processing)
+**Parent elements:**[&lt;objectSet&gt;](#objectset), [&lt;variable&gt;](#variable), [&lt;processing&gt;](#processing)
 
 **Child elements:** none
 
@@ -3588,25 +3588,25 @@ The return value that is required by &lt;script&gt; depends on the parent elemen
 
 -   General Syntax: &lt;script&gt;*ScriptWithArguments*&lt;/script&gt;
 
--   You can use [GetStringContent](#ScriptFunctions) when &lt;script&gt; is within &lt;variable&gt;.
+-   You can use [GetStringContent](#scriptfunctions) when &lt;script&gt; is within &lt;variable&gt;.
 
     Syntax: &lt;script&gt;MigXmlHelper.GetStringContent("*ObjectType*","*EncodedLocationPattern*", "*ExpandContent*")&lt;/script&gt;
 
     Example:` <script>MigXMLHelper.GetStringContent("Registry","HKLM\Software\MyApp\Installer [EXEPATH]")</script>`
 
--   You can use [GenerateUserPatterns](#ScriptFunctions) when &lt;script&gt; is within &lt;objectSet&gt;.
+-   You can use [GenerateUserPatterns](#scriptfunctions) when &lt;script&gt; is within &lt;objectSet&gt;.
 
     Syntax: &lt;script&gt;MigXmlHelper.GenerateUserPatterns("*ObjectType*","*EncodedLocationPattern*","*ProcessCurrentUser*")&lt;/script&gt;
 
     Example: `<script>MigXmlHelper.GenerateUserPatterns ("File","%USERPROFILE%\* [*.doc]", "FALSE")</script>`
 
--   You can use [GenerateDrivePatterns](#ScriptFunctions) when &lt;script&gt; is within &lt;objectSet&gt;.
+-   You can use [GenerateDrivePatterns](#scriptfunctions) when &lt;script&gt; is within &lt;objectSet&gt;.
 
     Syntax: &lt;script&gt;MigXmlHelper.GenerateDrivePatterns("*PatternSegment*","*DriveType*")&lt;/script&gt;
 
     Example: `<script>MigXmlHelper.GenerateDrivePatterns("* [sample.doc]", "Fixed")</script>`
 
--   You can use the [Simple executing scripts](#ScriptFunctions) with &lt;script&gt; elements that are within &lt;processing&gt; elements: AskForLogoff, ConvertToShortFileName, KillExplorer, RemoveEmptyDirectories, RestartExplorer, RegisterFonts, StartService, StopService, SyncSCM.
+-   You can use the [Simple executing scripts](#scriptfunctions) with &lt;script&gt; elements that are within &lt;processing&gt; elements: AskForLogoff, ConvertToShortFileName, KillExplorer, RemoveEmptyDirectories, RestartExplorer, RegisterFonts, StartService, StopService, SyncSCM.
 
     Syntax: &lt;script&gt;MigXmlHelper.*ExecutingScript*&lt;/script&gt;
 
@@ -3660,15 +3660,15 @@ To migrate the Sample.doc file from any drive on the source computer, use &lt;sc
 
 For more examples of how to use this element, see [Exclude Files and Settings](exclude-files-and-settings-usmt.md), [Reroute Files and Settings](reroute-files-and-settings-usmt.md), and [Custom XML Examples](custom-xml-examples-usmt-win7-usmt-win8.md).
 
-### &lt;script&gt; functions
+### <a href="" id="scriptfunctions"></a>&lt;script&gt; functions
 
 You can use the following functions with the &lt;script&gt; element
 
--   [String and pattern generating functions](#StringGeneratingFunctions)
+-   [String and pattern generating functions](#stringgeneratingfunctions)
 
--   [Simple executing scripts](#Simple)
+-   [Simple executing scripts](#simple)
 
-### String and pattern generating functions
+### <a href="" id="stringgeneratingfunctions"></a>String and pattern generating functions
 
 These functions return either a string or a pattern.
 
@@ -3726,7 +3726,7 @@ These functions return either a string or a pattern.
 
 -   **GenerateDrivePatterns**
 
-    The GenerateDrivePatterns function will iterate all of the available drives and select the ones that match the requested drive type. It will then concatenate the selected drives with the end part of *PatternSegment* to form a full encoded file pattern. For example, if *PatternSegment* is `Path [file.txt]` and DriveType is `Fixed`, then the function will generate `C:\Path [file.txt]`, and other patterns if there are fixed drives other than C:. You cannot specify environment variables with this function. You can use GenerateDrivePatterns with &lt;script&gt; elements that are within [&lt;objectSet&gt;](#objectSet) that are within &lt;include&gt;/&lt;exclude&gt;.
+    The GenerateDrivePatterns function will iterate all of the available drives and select the ones that match the requested drive type. It will then concatenate the selected drives with the end part of *PatternSegment* to form a full encoded file pattern. For example, if *PatternSegment* is `Path [file.txt]` and DriveType is `Fixed`, then the function will generate `C:\Path [file.txt]`, and other patterns if there are fixed drives other than C:. You cannot specify environment variables with this function. You can use GenerateDrivePatterns with &lt;script&gt; elements that are within [&lt;objectSet&gt;](#objectset) that are within &lt;include&gt;/&lt;exclude&gt;.
 
     Syntax: GenerateDrivePatterns("*PatternSegment*","*DriveType*")
 
@@ -3905,7 +3905,7 @@ This helper function invokes the document finder to scan the system for all file
   </component>
 ```
 
-### Simple executing scripts
+### <a href="" id="simple"></a>Simple executing scripts
 
 The following scripts have no return value. You can use the following errors with &lt;script&gt; elements that are within &lt;processing&gt; elements
 
@@ -3951,7 +3951,7 @@ The following scripts have no return value. You can use the following errors wit
 
 -   **SyncSCM(ServiceShortName).** Reads the Start type value from the registry (HKLM\\System\\CurrentControlSet\\Services\\ServiceShortName \[Start\]) after it is changed by the migration engine, and then synchronizes Service Control Manager (SCM) with the new value.
 
-## &lt;text&gt;
+## <a href="" id="text"></a>&lt;text&gt;
 
 
 You can use the &lt;text&gt; element to set a value for any environment variables that are inside one of the migration .xml files.
@@ -3995,7 +3995,7 @@ For example:
 </variable>
 ```
 
-## &lt;unconditionalExclude&gt;
+## <a href="" id="unconditionalexclude"></a>&lt;unconditionalExclude&gt;
 
 
 The &lt;unconditionalExclude&gt; element excludes the specified files and registry values from the migration, regardless of the other include rules in any of the migration .xml files or in the Config.xml file. The objects declared here will not be migrated because this element takes precedence over all other rules. For example, even if there are explicit &lt;include&gt; rules to include .mp3 files, if you specify to exclude them with this option, then they will not be migrated.
@@ -4006,7 +4006,7 @@ Use this element if you want to exclude all .mp3 files from the source computer.
 
 -   **Parent elements:**[&lt;rules&gt;](#rules)
 
--   **Child elements:**[&lt;objectSet&gt;](#objectSet)
+-   **Child elements:**[&lt;objectSet&gt;](#objectset)
 
 Syntax:
 
@@ -4031,7 +4031,7 @@ The following .xml file excludes all .mp3 files from migration. For additional e
 </migration>
 ```
 
-## &lt;variable&gt;
+## <a href="" id="variable"></a>&lt;variable&gt;
 
 
 The &lt;variable&gt; element is required in an &lt;environment&gt; element. For each &lt;variable&gt; element there must be one &lt;objectSet&gt;, &lt;script&gt;, or &lt;text&gt; element. The content of the &lt;variable&gt; element assigns a text value to the environment variable. This element has the following three options:
@@ -4044,9 +4044,9 @@ The &lt;variable&gt; element is required in an &lt;environment&gt; element. For
 
 -   **Number of occurrences:** Unlimited
 
--   **Parent elements:**[&lt;environment&gt;](#BKMK_environment)
+-   **Parent elements:**[&lt;environment&gt;](#bkmk-environment)
 
--   **Required child elements:** either [&lt;text&gt;](#text), or [&lt;script&gt;](#script), or [&lt;objectSet&gt;](#objectSet)
+-   **Required child elements:** either [&lt;text&gt;](#text), or [&lt;script&gt;](#script), or [&lt;objectSet&gt;](#objectset)
 
 Syntax:
 
@@ -4096,7 +4096,7 @@ The following example is from the MigApp.xml file:
 </environment>
 ```
 
-## &lt;version&gt;
+## <a href="" id="version"></a>&lt;version&gt;
 
 
 The &lt;version&gt; element defines the version for the component, but does not affect the migration.
@@ -4141,7 +4141,7 @@ For example:
 <version>4.*</version>
 ```
 
-## &lt;windowsObjects&gt;
+## <a href="" id="windowsobjects"></a>&lt;windowsObjects&gt;
 
 
 The &lt;windowsObjects&gt; element is for USMT internal use only. Do not use this element.
@@ -4149,7 +4149,7 @@ The &lt;windowsObjects&gt; element is for USMT internal use only. Do not use thi
 ## Appendix
 
 
-### Specifying locations
+### <a href="" id="locations"></a>Specifying locations
 
 -   **Specifying encoded locations**. The encoded location used in all of the helper functions is an unambiguous string representation for the name of an object. It is composed of the node part, optionally followed by the leaf enclosed in square brackets. This makes a clear distinction between nodes and leaves.
 
@@ -4161,7 +4161,7 @@ The &lt;windowsObjects&gt; element is for USMT internal use only. Do not use thi
 
     For example, the pattern `c:\Windows\*` will match the Windows directory and all subdirectories. But it will not match any of the files in those directories. To match the files as well, you must specify `c:\Windows\*[*]`.
 
-### Internal USMT functions
+### <a href="" id="internalusmtfunctions"></a>Internal USMT functions
 
 The following functions are for internal USMT use only. Do not use them in an .xml file.
 
@@ -4191,7 +4191,7 @@ The following functions are for internal USMT use only. Do not use them in an .x
 
 -   SetPstPathInMapiStruc
 
-### Valid version tags
+### <a href="" id="allowed"></a>Valid version tags
 
 You can use the following version tags with various helper functions:
 
diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md
index cdc1f32fc1..511d7736e5 100644
--- a/windows/keep-secure/TOC.md
+++ b/windows/keep-secure/TOC.md
@@ -1,4 +1,4 @@
-# [Keep Windows 10 secure](index.md)
+# [Keep Windows 10 secure]
 ## [Change history for Keep Windows 10 secure](change-history-for-keep-windows-10-secure.md)
 ## [Block untrusted fonts in an enterprise](block-untrusted-fonts-in-an-enterprise.md)
 ## [Device Guard certification and compliance](device-guard-certification-and-compliance.md)
diff --git a/windows/keep-secure/access-credential-manager-as-a-trusted-caller.md b/windows/keep-secure/access-credential-manager-as-a-trusted-caller.md
index a9badbf0b3..a08cdbd7f2 100644
--- a/windows/keep-secure/access-credential-manager-as-a-trusted-caller.md
+++ b/windows/keep-secure/access-credential-manager-as-a-trusted-caller.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Access Credential Manager as a trusted caller** security policy setting.
 
diff --git a/windows/keep-secure/access-this-computer-from-the-network.md b/windows/keep-secure/access-this-computer-from-the-network.md
index 76d64b555f..5949a109ca 100644
--- a/windows/keep-secure/access-this-computer-from-the-network.md
+++ b/windows/keep-secure/access-this-computer-from-the-network.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Access this computer from the network** security policy setting.
 
diff --git a/windows/keep-secure/account-lockout-duration.md b/windows/keep-secure/account-lockout-duration.md
index 270cbe5e40..173dbb051d 100644
--- a/windows/keep-secure/account-lockout-duration.md
+++ b/windows/keep-secure/account-lockout-duration.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Account lockout duration** security policy setting.
 
diff --git a/windows/keep-secure/account-lockout-threshold.md b/windows/keep-secure/account-lockout-threshold.md
index 7fbc7b7087..e045e25829 100644
--- a/windows/keep-secure/account-lockout-threshold.md
+++ b/windows/keep-secure/account-lockout-threshold.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Account lockout threshold** security policy setting.
 
@@ -42,14 +42,14 @@ It is possible to configure the following values for the **Account lockout thres
 
 -   Not defined
 
-Because vulnerabilities can exist when this value is configured and when it is not, organizations should weigh their identified threats and the risks that they are trying to mitigate. For information these settings, see [Countermeasure](#BKMK_Countermeasure) in this topic
+Because vulnerabilities can exist when this value is configured and when it is not, organizations should weigh their identified threats and the risks that they are trying to mitigate. For information these settings, see [Countermeasure](#bkmk-countermeasure) in this topic
 
 ### Best practices
 
 The threshold that you select is a balance between operational efficiency and security, and it depends on your organization's risk level. To allow for user error and to thwart brute force attacks, a setting above 4 and below 10 could be an acceptable starting point for your organization.
 
 **Important**  
-Implementation of this policy setting is dependent on your operational environment; threat vectors, deployed operating systems, and deployed apps. For more information, see [Implementation considerations](#BKMK_ImpleConsiderations) in this topic.
+Implementation of this policy setting is dependent on your operational environment; threat vectors, deployed operating systems, and deployed apps. For more information, see [Implementation considerations](#bkmk-impleconsiderations) in this topic.
 
  
 
@@ -110,7 +110,7 @@ This section describes features and tools that are available to help you manage
 
 None. Changes to this policy setting become effective without a computer restart when they are saved locally or distributed through Group Policy.
 
-### Implementation considerations
+### <a href="" id="bkmk-impleconsiderations"></a>Implementation considerations
 
 Implementation of this policy setting is dependent on your operational environment. You should consider threat vectors, deployed operating systems, and deployed apps, for example:
 
@@ -136,7 +136,7 @@ Offline password attacks are not countered by this policy setting.
 
  
 
-### Countermeasure
+### <a href="" id="bkmk-countermeasure"></a>Countermeasure
 
 Because vulnerabilities can exist when this value is configured and when it is not configured, two distinct countermeasures are defined. Organizations should weigh the choice between the two, based on their identified threats and the risks that they want to mitigate. The two countermeasure options are:
 
diff --git a/windows/keep-secure/accounts-administrator-account-status.md b/windows/keep-secure/accounts-administrator-account-status.md
index 3a6c635e98..af54566272 100644
--- a/windows/keep-secure/accounts-administrator-account-status.md
+++ b/windows/keep-secure/accounts-administrator-account-status.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Accounts: Administrator account status** security policy setting.
 
diff --git a/windows/keep-secure/accounts-block-microsoft-accounts.md b/windows/keep-secure/accounts-block-microsoft-accounts.md
index bf85474e4d..038268f183 100644
--- a/windows/keep-secure/accounts-block-microsoft-accounts.md
+++ b/windows/keep-secure/accounts-block-microsoft-accounts.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management, and security considerations for the **Accounts: Block Microsoft accounts** security policy setting.
 
diff --git a/windows/keep-secure/accounts-guest-account-status.md b/windows/keep-secure/accounts-guest-account-status.md
index f9f6e0cbec..a3ff8c451a 100644
--- a/windows/keep-secure/accounts-guest-account-status.md
+++ b/windows/keep-secure/accounts-guest-account-status.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Accounts: Guest account status** security policy setting.
 
diff --git a/windows/keep-secure/accounts-rename-administrator-account.md b/windows/keep-secure/accounts-rename-administrator-account.md
index 56a28f1a14..11090216e9 100644
--- a/windows/keep-secure/accounts-rename-administrator-account.md
+++ b/windows/keep-secure/accounts-rename-administrator-account.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 This security policy reference topic for the IT professional describes the best practices, location, values, and security considerations for this policy setting.
 
diff --git a/windows/keep-secure/accounts-rename-guest-account.md b/windows/keep-secure/accounts-rename-guest-account.md
index 6d3d3224cd..5cf5dbabbc 100644
--- a/windows/keep-secure/accounts-rename-guest-account.md
+++ b/windows/keep-secure/accounts-rename-guest-account.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Accounts: Rename guest account** security policy setting.
 
diff --git a/windows/keep-secure/act-as-part-of-the-operating-system.md b/windows/keep-secure/act-as-part-of-the-operating-system.md
index fd9d165415..1d5c561158 100644
--- a/windows/keep-secure/act-as-part-of-the-operating-system.md
+++ b/windows/keep-secure/act-as-part-of-the-operating-system.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Act as part of the operating system** security policy setting.
 
diff --git a/windows/keep-secure/add-workstations-to-domain.md b/windows/keep-secure/add-workstations-to-domain.md
index 44bdff59e1..10b7e6e407 100644
--- a/windows/keep-secure/add-workstations-to-domain.md
+++ b/windows/keep-secure/add-workstations-to-domain.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Add workstations to domain** security policy setting.
 
diff --git a/windows/keep-secure/adjust-memory-quotas-for-a-process.md b/windows/keep-secure/adjust-memory-quotas-for-a-process.md
index 88277b2975..69e6d57cdd 100644
--- a/windows/keep-secure/adjust-memory-quotas-for-a-process.md
+++ b/windows/keep-secure/adjust-memory-quotas-for-a-process.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Adjust memory quotas for a process** security policy setting.
 
diff --git a/windows/keep-secure/administer-applocker.md b/windows/keep-secure/administer-applocker.md
index f44808d4fa..f2aa9aa68d 100644
--- a/windows/keep-secure/administer-applocker.md
+++ b/windows/keep-secure/administer-applocker.md
@@ -100,7 +100,7 @@ For more info about enhanced capabilities of AppLocker to control Windows apps,
 
  
 
-## Using the MMC snap-ins to administer AppLocker
+## <a href="" id="bkmk-using-snapins"></a>Using the MMC snap-ins to administer AppLocker
 
 
 You can administer AppLocker policies by using the Group Policy Management Console to create or edit a Group Policy Object (GPO), or to create or edit an AppLocker policy on a local computer by using the Local Group Policy Editor snap-in or the Local Security Policy snap-in (secpol.msc).
diff --git a/windows/keep-secure/administer-security-policy-settings.md b/windows/keep-secure/administer-security-policy-settings.md
index 5ac2f19ae7..8bbd2771c1 100644
--- a/windows/keep-secure/administer-security-policy-settings.md
+++ b/windows/keep-secure/administer-security-policy-settings.md
@@ -17,13 +17,13 @@ author: brianlic-msft
 
 **In this article**
 
--   [What’s changed in how settings are administered?](#what_s_changed_in_how_settings_are_administered_)
--   [Using the Local Security Policy snap-in](#BKMK_SecPol)
--   [Using the secedit command-line tool](#BKMK_Secedit)
--   [Using the Security Compliance Manager](#BKMK_SCM)
--   [Using the Security Configuration Wizard](#BKMK_SCW)
--   [Working with the Security Configuration Manager](#BKMK_SCMtool)
--   [Working with Group Policy tools](#BKMK_GroupPolicy)
+-   [What’s changed in how settings are administered?](#what-s-changed-in-how-settings-are-administered-)
+-   [Using the Local Security Policy snap-in](#bkmk-secpol)
+-   [Using the secedit command-line tool](#bkmk-secedit)
+-   [Using the Security Compliance Manager](#bkmk-scm)
+-   [Using the Security Configuration Wizard](#bkmk-scw)
+-   [Working with the Security Configuration Manager](#bkmk-scmtool)
+-   [Working with Group Policy tools](#bkmk-grouppolicy)
 
 This article discusses different methods to administer security policy settings on a local device or throughout a small- or medium-sized organization.
 
@@ -49,7 +49,7 @@ To manage security configurations for multiple computers, you can use one of the
 
 -   Use the Security Templates snap-in to create a security template that contains the security policies you want to apply, and then import the security template into a Group Policy Object. A security template is a file that represents a security configuration, and it can be imported to a GPO, or applied to a local device, or it can be used to analyze security.
 
-## What’s changed in how settings are administered?
+## <a href="" id="what-s-changed-in-how-settings-are-administered-"></a>What’s changed in how settings are administered?
 
 
 Over time, new ways to manage security policy settings have been introduced, which include new operating system features and the addition of new settings. The following table lists different means by which security policy settings can be administered.
@@ -67,31 +67,31 @@ Over time, new ways to manage security policy settings have been introduced, whi
 </thead>
 <tbody>
 <tr class="odd">
-<td align="left"><p>[Security Policy snap-in](#BKMK_SecPol)</p></td>
+<td align="left"><p>[Security Policy snap-in](#bkmk-secpol)</p></td>
 <td align="left"><p>Secpol.msc</p>
 <p>MMC snap-in designed to manage only security policy settings.</p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Security editor command line tool](#BKMK_Secedit)</p></td>
+<td align="left"><p>[Security editor command line tool](#bkmk-secedit)</p></td>
 <td align="left"><p>Secedit.exe</p>
 <p>Configures and analyzes system security by comparing your current configuration to specified security templates.</p></td>
 </tr>
 <tr class="odd">
-<td align="left"><p>[Security Compliance Manager](#BKMK_SCM)</p></td>
+<td align="left"><p>[Security Compliance Manager](#bkmk-scm)</p></td>
 <td align="left"><p>Tool download</p>
 <p>A Solution Accelerator that helps you plan, deploy, operate, and manage your security baselines for Windows client and server operating systems, and Microsoft applications.</p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Security Configuration Wizard](#BKMK_SCW)</p></td>
+<td align="left"><p>[Security Configuration Wizard](#bkmk-scw)</p></td>
 <td align="left"><p>Scw.exe</p>
 <p>SCW is a role-based tool available on servers only: You can use it to create a policy that enables services, firewall rules, and settings that are required for a selected server to perform specific roles.</p></td>
 </tr>
 <tr class="odd">
-<td align="left"><p>[Security Configuration Manager tool](#BKMK_SCMtool)</p></td>
+<td align="left"><p>[Security Configuration Manager tool](#bkmk-scmtool)</p></td>
 <td align="left"><p>This tool set allows you to create, apply, and edit the security for your local device, organizational unit, or domain.</p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Group Policy](#BKMK_GroupPolicy)</p></td>
+<td align="left"><p>[Group Policy](#bkmk-grouppolicy)</p></td>
 <td align="left"><p>Gpmc.msc and Gpedit.msc</p>
 <p>The Group Policy Management Console uses the Group Policy Object editor to expose the local Security options, which can then be incorporated into Group Policy Objects for distribution throughout the domain. The Local Group Policy Editor performs similar functions on the local device.</p></td>
 </tr>
@@ -112,7 +112,7 @@ Over time, new ways to manage security policy settings have been introduced, whi
 
  
 
-## Using the Local Security Policy snap-in
+## <a href="" id="bkmk-secpol"></a>Using the Local Security Policy snap-in
 
 
 The Local Security Policy snap-in (Secpol.msc) restricts the view of local policy objects to the following policies and features:
@@ -137,9 +137,9 @@ The Local Security Policy snap-in (Secpol.msc) restricts the view of local polic
 
 Policies set locally might be overwritten if the computer is joined to the domain.
 
-The Local Security Policy snap-in is part of the Security Configuration Manager tool set. For info about other tools in this tool set, see [Working with the Security Configuration Manager](#BKMK_SCMtool) in this topic.
+The Local Security Policy snap-in is part of the Security Configuration Manager tool set. For info about other tools in this tool set, see [Working with the Security Configuration Manager](#bkmk-scmtool) in this topic.
 
-## Using the secedit command-line tool
+## <a href="" id="bkmk-secedit"></a>Using the secedit command-line tool
 
 
 The secedit command-line tool works with security templates and provides six primary functions:
@@ -156,7 +156,7 @@ The secedit command-line tool works with security templates and provides six pri
 
 -   The **Generate Rollback** parameter saves the server’s current security settings into a security template so it can be used to restore most of the server’s security settings to a known state. The exceptions are that, when applied, the rollback template will not change access control list entries on files or registry entries that were changed by the most recently applied template.
 
-## Using the Security Compliance Manager
+## <a href="" id="bkmk-scm"></a>Using the Security Compliance Manager
 
 
 The Security Compliance Manager is a downloadable tool that helps you plan, deploy, operate, and manage your security baselines for Windows client and server operating systems, and for Microsoft applications. It contains a complete database of recommended security settings, methods to customize your baselines, and the option to implement those settings in multiple formats—including XLS, GPOs, Desired Configuration Management (DCM) packs, or Security Content Automation Protocol (SCAP). The Security Compliance Manager is used to export the baselines to your environment to automate the security baseline deployment and compliance verification process.
@@ -171,7 +171,7 @@ The Security Compliance Manager is a downloadable tool that helps you plan, depl
 
 4.  Open the Help and follow instructions how to customize, compare, or merge your security baselines before deploying those baselines.
 
-## Using the Security Configuration Wizard
+## <a href="" id="bkmk-scw"></a>Using the Security Configuration Wizard
 
 
 The Security Configuration Wizard (SCW) guides you through the process of creating, editing, applying, or rolling back a security policy. A security policy that you create with SCW is an .xml file that, when applied, configures services, network security, specific registry values, and audit policy. SCW is a role-based tool: You can use it to create a policy that enables services, firewall rules, and settings that are required for a selected server to perform specific roles. For example, a server might be a file server, a print server, or a domain controller.
@@ -211,7 +211,7 @@ The Security Policy Wizard configures services and network security based on the
 
 For more information about SCW, including procedures, see [Security Configuration Wizard](http://technet.microsoft.com/library/cc754997.aspx).
 
-## Working with the Security Configuration Manager
+## <a href="" id="bkmk-scmtool"></a>Working with the Security Configuration Manager
 
 
 The Security Configuration Manager tool set allows you to create, apply, and edit the security for your local device, organizational unit, or domain.
@@ -233,19 +233,19 @@ The following table lists the features of the Security Configuration Manager.
 </thead>
 <tbody>
 <tr class="odd">
-<td align="left"><p>[Security Configuration and Analysis](#BKMK_SecCfgAna)</p></td>
+<td align="left"><p>[Security Configuration and Analysis](#bkmk-seccfgana)</p></td>
 <td align="left"><p>Defines a security policy in a template. These templates can be applied to Group Policy or to your local computer.</p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Security templates](#BKMK_SecTmpl)</p></td>
+<td align="left"><p>[Security templates](#bkmk-sectmpl)</p></td>
 <td align="left"><p>Defines a security policy in a template. These templates can be applied to Group Policy or to your local computer.</p></td>
 </tr>
 <tr class="odd">
-<td align="left"><p>[Security Settings extension to Group Policy](#BKMK_SecExtensions)</p></td>
+<td align="left"><p>[Security Settings extension to Group Policy](#bkmk-secextensions)</p></td>
 <td align="left"><p>Edits individual security settings on a domain, site, or organizational unit.</p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Local Security Policy](#BKMK_LocalSecPol)</p></td>
+<td align="left"><p>[Local Security Policy](#bkmk-localsecpol)</p></td>
 <td align="left"><p>Edits individual security settings on your local computer.</p></td>
 </tr>
 <tr class="odd">
@@ -257,11 +257,11 @@ The following table lists the features of the Security Configuration Manager.
 
  
 
-### Security Configuration and Analysis
+### <a href="" id="bkmk-seccfgana"></a>Security Configuration and Analysis
 
 Security Configuration and Analysis is an MMC snap-in for analyzing and configuring local system security.
 
-### Security analysis
+### <a href="" id="h2-359808543"></a>Security analysis
 
 The state of the operating system and apps on a device is dynamic. For example, you may need to temporarily change security levels so that you can immediately resolve an administration or network issue. However, this change can often go unreversed. This means that a computer may no longer meet the requirements for enterprise security.
 
@@ -269,11 +269,11 @@ Regular analysis enables you to track and ensure an adequate level of security o
 
 Security Configuration and Analysis enables you to quickly review security analysis results. It presents recommendations alongside of current system settings and uses visual flags or remarks to highlight any areas where the current settings do not match the proposed level of security. Security Configuration and Analysis also offers the ability to resolve any discrepancies that analysis reveals.
 
-### Security configuration
+### <a href="" id="h2-359810173"></a>Security configuration
 
 Security Configuration and Analysis can also be used to directly configure local system security. Through its use of personal databases, you can import security templates that have been created with Security Templates and apply these templates to the local computer. This immediately configures the system security with the levels specified in the template.
 
-### Security templates
+### <a href="" id="bkmk-sectmpl"></a>Security templates
 
 With the Security Templates snap-in for Microsoft Management Console, you can create a security policy for your device or for your network. It is a single point of entry where the full range of system security can be taken into account. The Security Templates snap-in does not introduce new security parameters, it simply organizes all existing security attributes into one place to ease security administration.
 
@@ -311,7 +311,7 @@ Security templates can be used to define:
 
 Each template is saved as a text-based .inf file. This enables you to copy, paste, import, or export some or all of the template attributes. With the exceptions of Internet Protocol security and public key policies, all security attributes can be contained in a security template.
 
-### Security settings extension to Group Policy
+### <a href="" id="bkmk-secextensions"></a>Security settings extension to Group Policy
 
 Organizational units, domains, and sites are linked to Group Policy Objects. The security settings tool allows you change the security configuration of the Group Policy Object, in turn, affecting multiple computers. With security settings, you can modify the security settings of many devices, depending on the Group Policy Object you modify, from just one device joined to a domain.
 
@@ -331,7 +331,7 @@ You can change the security configuration on multiple computers in two ways:
 
 -   Change a few select settings with security settings.
 
-### Local Security Policy
+### <a href="" id="bkmk-localsecpol"></a>Local Security Policy
 
 A security policy is a combination of security settings that affect the security on a device. You can use your local security policy to edit account policies and local policies on your local device
 
@@ -359,17 +359,17 @@ If you modify the security settings on your local device by using the local secu
 
 For procedures on how to use the Security Configuration Manager, see [Security Configuration Manager How To](http://technet.microsoft.com/library/cc784762(WS.10).aspx). This section contains information in this topic about:
 
--   [Applying security settings](#BKMK_ApplySecSettings)
+-   [Applying security settings](#bkmk-applysecsettings)
 
--   [Importing and exporting security templates](#BKMK_ImpExpSecTmpl)
+-   [Importing and exporting security templates](#bkmk-impexpsectmpl)
 
--   [Analyzing security and viewing results](#BKMK_AnaSecViewResults)
+-   [Analyzing security and viewing results](#bkmk-anasecviewresults)
 
--   [Resolving security discrepancies](#BKMK_ResolveSecDiffs)
+-   [Resolving security discrepancies](#bkmk-resolvesecdiffs)
 
--   [Automating security configuration tasks](#BKMK_AutoSecCfgTasks)
+-   [Automating security configuration tasks](#bkmk-autoseccfgtasks)
 
-### Applying security settings
+### <a href="" id="bkmk-applysecsettings"></a>Applying security settings
 
 Once you have edited the security settings, the settings are refreshed on the computers in the organizational unit linked to your Group Policy Object:
 
@@ -418,13 +418,13 @@ Registry and file settings will maintain the values applied through policy until
 
 You can also decide what users or groups will or will not have a Group Policy Object applied to them regardless of what computer they have logged onto by denying them either the Apply Group Policy or Read permission on that Group Policy Object. Both of these permissions are needed to apply Group Policy.
 
-### Importing and exporting security templates
+### <a href="" id="bkmk-impexpsectmpl"></a>Importing and exporting security templates
 
 Security Configuration and Analysis provides the ability to import and export security templates into or from a database.
 
 If you have made any changes to the analysis database, you can save those settings by exporting them into a template. The export feature provides the ability to save the analysis database settings as a new template file. This template file can then be used to analyze or configure a system, or it can be imported to a Group Policy Object.
 
-### Analyzing security and viewing results
+### <a href="" id="bkmk-anasecviewresults"></a>Analyzing security and viewing results
 
 Security Configuration and Analysis performs security analysis by comparing the current state of system security against an *analysis database*. During creation, the analysis database uses at least one security template. If you choose to import more than one security template, the database will merge the various templates and create one composite template. It resolves conflicts in order of import; the last template that is imported takes precedence.
 
@@ -472,7 +472,7 @@ If you choose to accept the current settings, the corresponding value in the bas
 
 To avoid continued flagging of settings that you have investigated and determined to be reasonable, you can modify the base configuration. The changes are made to a copy of the template.
 
-### Resolving security discrepancies
+### <a href="" id="bkmk-resolvesecdiffs"></a>Resolving security discrepancies
 
 You can resolve discrepancies between analysis database and system settings by:
 
@@ -486,13 +486,13 @@ Changes to the analysis database are made to the stored template in the database
 
 You should use **Configure Computer Now** only to modify security areas *not* affected by Group Policy settings, such as security on local files and folders, registry keys, and system services. Otherwise, when the Group Policy settings are applied, it will take precedence over local settings—such as account policies. In general, do not use **Configure Computer Now** when you are analyzing security for domain-based clients, since you will have to configure each client individually. In this case, you should return to Security Templates, modify the template, and reapply it to the appropriate Group Policy Object.
 
-### Automating security configuration tasks
+### <a href="" id="bkmk-autoseccfgtasks"></a>Automating security configuration tasks
 
 By calling the secedit.exe tool at a command prompt from a batch file or automatic task scheduler, you can use it to automatically create and apply templates, and analyze system security. You can also run it dynamically from a command prompt.
 
 Secedit.exe is useful when you have multiple devices on which security must be analyzed or configured, and you need to perform these tasks during off-hours.
 
-## Working with Group Policy tools
+## <a href="" id="bkmk-grouppolicy"></a>Working with Group Policy tools
 
 
 Group Policy is an infrastructure that allows you to specify managed configurations for users and computers through Group Policy settings and Group Policy Preferences. For Group Policy settings that affect only a local device or user, you can use the Local Group Policy Editor. You can manage Group Policy settings and Group Policy Preferences in an Active Directory Domain Services (AD DS) environment through the Group Policy Management Console (GPMC). Group Policy management tools also are included in the Remote Server Administration Tools pack to provide a way for you to administer Group Policy settings from your desktop.
diff --git a/windows/keep-secure/advanced-security-audit-policy-settings.md b/windows/keep-secure/advanced-security-audit-policy-settings.md
index c7fc7a5645..ddf52cfa1a 100644
--- a/windows/keep-secure/advanced-security-audit-policy-settings.md
+++ b/windows/keep-secure/advanced-security-audit-policy-settings.md
@@ -115,7 +115,7 @@ Logon/Logoff security policy settings and audit events allow you to track attemp
 
 Object Access policy settings and audit events allow you to track attempts to access specific objects or types of objects on a network or computer. To audit attempts to access a file, directory, registry key, or any other object, you must enable the appropriate object Aaccess auditing subcategory for success and/or failure events. For example, the file system subcategory needs to be enabled to audit file operations, and the Registry subcategory needs to be enabled to audit registry accesses.
 
-Proving that these audit policies are in effect to an external auditor is more difficult. There is no easy way to verify that the proper SACLs are set on all inherited objects. To address this issue, see [Global Object Access Auditing](#BKMK_GlobalObjectAccess).
+Proving that these audit policies are in effect to an external auditor is more difficult. There is no easy way to verify that the proper SACLs are set on all inherited objects. To address this issue, see [Global Object Access Auditing](#bkmk-globalobjectaccess).
 
 This category includes the following subcategories:
 
diff --git a/windows/keep-secure/advanced-security-auditing-faq.md b/windows/keep-secure/advanced-security-auditing-faq.md
index 6f75734820..b63076029e 100644
--- a/windows/keep-secure/advanced-security-auditing-faq.md
+++ b/windows/keep-secure/advanced-security-auditing-faq.md
@@ -17,50 +17,50 @@ author: brianlic-msft
 
 This topic for the IT professional lists questions and answers about understanding, deploying, and managing security audit policies.
 
--   [What is Windows security auditing and why might I want to use it?](#BKMK_1)
+-   [What is Windows security auditing and why might I want to use it?](#bkmk-1)
 
--   [What is the difference between audit policies located in Local Policies\\Audit Policy and audit policies located in Advanced Audit Policy Configuration?](#BKMK_2)
+-   [What is the difference between audit policies located in Local Policies\\Audit Policy and audit policies located in Advanced Audit Policy Configuration?](#bkmk-2)
 
--   [What is the interaction between basic audit policy settings and advanced audit policy settings?](#BKMK_3)
+-   [What is the interaction between basic audit policy settings and advanced audit policy settings?](#bkmk-3)
 
--   [How are audit settings merged by Group Policy?](#BKMK_4)
+-   [How are audit settings merged by Group Policy?](#bkmk-4)
 
--   [What is the difference between an object DACL and an object SACL?](#BKMK_14)
+-   [What is the difference between an object DACL and an object SACL?](#bkmk-14)
 
--   [Why are audit policies applied on a per-computer basis rather than per user?](#BKMK_13)
+-   [Why are audit policies applied on a per-computer basis rather than per user?](#bkmk-13)
 
--   [What are the differences in auditing functionality between versions of Windows?](#BKMK_12)
+-   [What are the differences in auditing functionality between versions of Windows?](#bkmk-12)
 
--   [Can I use advanced audit policy from a domain controller running Windows Server 2003 or Windows 2000 Server?](#BKMK_15)
+-   [Can I use advanced audit policy from a domain controller running Windows Server 2003 or Windows 2000 Server?](#bkmk-15)
 
--   [What is the difference between success and failure events? Is something wrong if I get a failure audit?](#BKMK_5)
+-   [What is the difference between success and failure events? Is something wrong if I get a failure audit?](#bkmk-5)
 
--   [How can I set an audit policy that affects all objects on a computer?](#BKMK_6)
+-   [How can I set an audit policy that affects all objects on a computer?](#bkmk-6)
 
--   [How do I figure out why someone was able to access a resource?](#BKMK_7)
+-   [How do I figure out why someone was able to access a resource?](#bkmk-7)
 
--   [How do I know when changes are made to access control settings, by whom, and what the changes were?](#BKMK_8)
+-   [How do I know when changes are made to access control settings, by whom, and what the changes were?](#bkmk-8)
 
--   [How can I roll back security audit policies from the advanced audit policy to the basic audit policy?](#BKMK_19)
+-   [How can I roll back security audit policies from the advanced audit policy to the basic audit policy?](#bkmk-19)
 
--   [How can I monitor if changes are made to audit policy settings?](#BKMK_10)
+-   [How can I monitor if changes are made to audit policy settings?](#bkmk-10)
 
--   [How can I minimize the number of events that are generated?](#BKMK_16)
+-   [How can I minimize the number of events that are generated?](#bkmk-16)
 
--   [What are the best tools to model and manage audit policy?](#BKMK_17)
+-   [What are the best tools to model and manage audit policy?](#bkmk-17)
 
--   [Where can I find information about all the possible events that I might receive?](#BKMK_11)
+-   [Where can I find information about all the possible events that I might receive?](#bkmk-11)
 
--   [Where can I find more detailed information?](#BKMK_18)
+-   [Where can I find more detailed information?](#bkmk-18)
 
-## What is Windows security auditing and why might I want to use it?
+## <a href="" id="bkmk-1"></a>What is Windows security auditing and why might I want to use it?
 
 
 Security auditing is a methodical examination and review of activities that may affect the security of a system. In the Windows operating systems, security auditing is more narrowly defined as the features and services that enable an administrator to log and review events for specified security-related activities.
 
 Hundreds of events occur as the Windows operating system and the applications that run on it perform their tasks. Monitoring these events can provide valuable information to help administrators troubleshoot and investigate security-related activities.
 
-## What is the difference between audit policies located in Local Policies\\Audit Policy and audit policies located in Advanced Audit Policy Configuration?
+## <a href="" id="bkmk-2"></a>What is the difference between audit policies located in Local Policies\\Audit Policy and audit policies located in Advanced Audit Policy Configuration?
 
 
 The basic security audit policy settings in **Security Settings\\Local Policies\\Audit Policy** and the advanced security audit policy settings in **Security Settings\\Advanced Audit Policy Configuration\\System Audit Policies** appear to overlap, but they are recorded and applied differently. When you apply basic audit policy settings to the local computer by using the Local Security Policy snap-in (secpol.msc), you are editing the effective audit policy, so changes made to basic audit policy settings will appear exactly as configured in Auditpol.exe.
@@ -73,7 +73,7 @@ In addition, if you enable success auditing for the basic **Audit account logon
 
 The nine basic settings under **Security Settings\\Local Policies\\Audit Policy** were introduced in Windows 2000. Therefore, they are available in all versions of Windows released since then. The advanced audit policy settings were introduced in Windows Vista and Windows Server 2008. The advanced settings can only be used on computers running Windows 7, Windows Server 2008, and later.
 
-## What is the interaction between basic audit policy settings and advanced audit policy settings?
+## <a href="" id="bkmk-3"></a>What is the interaction between basic audit policy settings and advanced audit policy settings?
 
 
 Basic audit policy settings are not compatible with advanced audit policy settings that are applied by using Group Policy. When advanced audit policy settings are applied by using Group Policy, the current computer's audit policy settings are cleared before the resulting advanced audit policy settings are applied. After you apply advanced audit policy settings by using Group Policy, you can only reliably set system audit policy for the computer by using the advanced audit policy settings.
@@ -87,7 +87,7 @@ If you use Advanced Audit Policy Configuration settings or use logon scripts to
 
  
 
-## How are audit settings merged by Group Policy?
+## <a href="" id="bkmk-4"></a>How are audit settings merged by Group Policy?
 
 
 By default, policy options that are set in GPOs and linked to higher levels of Active Directory sites, domains, and OUs are inherited by all OUs at lower levels. However, an inherited policy can be overridden by a GPO that is linked at a lower level.
@@ -135,7 +135,7 @@ The rules that govern how Group Policy settings are applied propagate to the sub
 
  
 
-## What is the difference between an object DACL and an object SACL?
+## <a href="" id="bkmk-14"></a>What is the difference between an object DACL and an object SACL?
 
 
 All objects in Active Directory Domain Services (AD DS), and all securable objects on a local computer or on the network, have security descriptors to help control access to the objects. Security descriptors include information about who owns an object, who can access it and in what way, and what types of access are audited. Security descriptors contain the access control list (ACL) of an object, which includes all of the security permissions that apply to that object. An object's security descriptor can contain two types of ACLs:
@@ -148,7 +148,7 @@ The access control model that is used in Windows is administered at the object l
 
 If auditing is configured for the object, its security descriptor also contains a SACL that controls how the security subsystem audits attempts to access the object. However, auditing is not completely configured unless a SACL has been configured for an object and a corresponding **Object Access** audit policy setting has been configured and applied.
 
-## Why are audit policies applied on a per-computer basis rather than per user?
+## <a href="" id="bkmk-13"></a>Why are audit policies applied on a per-computer basis rather than per user?
 
 
 In security auditing in Windows, the computer, objects on the computer, and related resources are the primary recipients of actions by clients including applications, other computers, and users. In a security breach, malicious users can use alternate credentials to hide their identity, or malicious applications can impersonate legitimate users to perform undesired tasks. Therefore, the most consistent way to apply an audit policy is to focus on the computer and the objects and resources on that computer.
@@ -157,17 +157,17 @@ In addition, because audit policy capabilities can vary between computers runnin
 
 However, in cases where you want audit settings to apply only to specified groups of users, you can accomplish this by configuring SACLs on the relevant objects to enable auditing for a security group that contains only the users you specify. For example, you can configure a SACL for a folder called Payroll Data on Accounting Server 1. This can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1, but because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder generates audit events.
 
-## What are the differences in auditing functionality between versions of Windows?
+## <a href="" id="bkmk-12"></a>What are the differences in auditing functionality between versions of Windows?
 
 
 Basic audit policy settings are available in all versions of Windows since Windows 2000, and they can be applied locally or by using Group Policy. Advanced audit policy settings were introduced in Windows Vista and Windows Server 2008, but the settings can only be applied by using logon scripts in those versions. Advanced audit policy settings, which were introduced in Windows 7 and Windows Server 2008 R2, can be configured and applied by using local and domain Group Policy settings.
 
-## Can I use advanced audit policies from a domain controller running Windows Server 2003 or Windows 2000 Server?
+## <a href="" id="bkmk-15"></a>Can I use advanced audit policies from a domain controller running Windows Server 2003 or Windows 2000 Server?
 
 
 To use advanced audit policy settings, your domain controller must be installed on a computer running Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003 with Service Pack 2 (SP2). Windows 2000 Server is not supported.
 
-## What is the difference between success and failure events? Is something wrong if I get a failure audit?
+## <a href="" id="bkmk-5"></a>What is the difference between success and failure events? Is something wrong if I get a failure audit?
 
 
 A success audit event is triggered when a defined action, such as accessing a file share, is completed successfully.
@@ -176,19 +176,19 @@ A failure audit event is triggered when a defined action, such as a user logon,
 
 The appearance of failure audit events in the event log does not necessarily mean that something is wrong with your system. For example, if you configure Audit Logon events, a failure event may simply mean that a user mistyped his or her password.
 
-## How can I set an audit policy that affects all objects on a computer?
+## <a href="" id="bkmk-6"></a>How can I set an audit policy that affects all objects on a computer?
 
 
 System administrators and auditors increasingly want to verify that an auditing policy is applied to all objects on a system. This has been difficult to accomplish because the system access control lists (SACLs) that govern auditing are applied on a per-object basis. Thus, to verify that an audit policy has been applied to all objects, you would have to check every object to be sure that no changes have been made—even temporarily to a single SACL.
 
 Introduced in Windows Server 2008 R2 and Windows 7, security auditing allows administrators to define global object access auditing policies for the entire file system or for the registry on a computer. The specified SACL is then automatically applied to every object of that type. This can be useful for verifying that all critical files, folders, and registry settings on a computer are protected, and for identifying when an issue with a system resource occurs. If a file or folder SACL and a global object access auditing policy (or a single registry setting SACL and a global object access auditing policy) are configured on a computer, the effective SACL is derived from combining the file or folder SACL and the global object access auditing policy. This means that an audit event is generated if an activity matches either the file or folder SACL or the global object access auditing policy.
 
-## How do I figure out why someone was able to access a resource?
+## <a href="" id="bkmk-7"></a>How do I figure out why someone was able to access a resource?
 
 
 Often it is not enough to know simply that an object such as a file or folder was accessed. You may also want to know why the user was able to access this resource. You can obtain this forensic data by configuring the **Audit Handle Manipulation** setting with the **Audit File System** or with the **Audit Registry** audit setting.
 
-## How do I know when changes are made to access control settings, by whom, and what the changes were?
+## <a href="" id="bkmk-8"></a>How do I know when changes are made to access control settings, by whom, and what the changes were?
 
 
 To track access control changes on computers running Windows Server 2016 Technical Preview, Windows Server 2012 R2, Windows Server 2012 Windows 7, Windows Server 2008 R2, Windows Vista, or Windows Server 2008, you need to enable the following settings, which track changes to DACLs:
@@ -201,7 +201,7 @@ To track access control changes on computers running Windows Server 2016 Techni
 
 In Windows XP and Windows Server 2003, you need to use the **Audit policy change** subcategory.
 
-## How can I roll back security audit policies from the advanced audit policy to the basic audit policy?
+## <a href="" id="bkmk-19"></a>How can I roll back security audit policies from the advanced audit policy to the basic audit policy?
 
 
 Applying advanced audit policy settings replaces any comparable basic security audit policy settings. If you subsequently change the advanced audit policy setting to **Not configured**, you need to complete the following steps to restore the original basic security audit policy settings:
@@ -214,7 +214,7 @@ Applying advanced audit policy settings replaces any comparable basic security a
 
 Unless you complete all of these steps, the basic audit policy settings will not be restored.
 
-## How can I monitor if changes are made to audit policy settings?
+## <a href="" id="bkmk-10"></a>How can I monitor if changes are made to audit policy settings?
 
 
 Changes to security audit policies are critical security events. You can use the **Audit Audit Policy Change** setting to determine if the operating system generates audit events when the following types of activities take place:
@@ -233,12 +233,12 @@ Changes to security audit policies are critical security events. You can use the
 
 -   A Special Groups list is changed
 
-## How can I minimize the number of events that are generated?
+## <a href="" id="bkmk-16"></a>How can I minimize the number of events that are generated?
 
 
 Finding the right balance between auditing enough network and computer activity and auditing too little network and computer activity can be challenging. You can achieve this balance by identifying the most important resources, critical activities, and users or groups of users. Then design a security audit policy that targets these resources, activities, and users. Useful guidelines and recommendations for developing an effective security auditing strategy can be found in [Planning and deploying advanced security audit policies](planning-and-deploying-advanced-security-audit-policies.md).
 
-## What are the best tools to model and manage audit policies?
+## <a href="" id="bkmk-17"></a>What are the best tools to model and manage audit policies?
 
 
 The integration of advanced audit policy settings with domain Group Policy, introduced in Windows 7 and Windows Server 2008 R2, is designed to simplify the management and implementation of security audit policies in an organization's network. As such, tools used to plan and deploy Group Policy Objects for a domain can also be used to plan and deploy security audit policies.
@@ -247,7 +247,7 @@ On an individual computer, the Auditpol command-line tool can be used to complet
 
 In addition, there are a number of computer management products, such as the Audit Collection Services in the Microsoft System Center Operations Manager products, which can be used to collect and filter event data.
 
-## Where can I find information about all the possible events that I might receive?
+## <a href="" id="bkmk-11"></a>Where can I find information about all the possible events that I might receive?
 
 
 Users who examine the security event log for the first time can be a bit overwhelmed by the number of audit events that are stored there (which can quickly number in the thousands) and by the structured information that is included for each audit event. Additional information about these events, and the settings used to generate them, can be obtained from the following resources:
@@ -260,7 +260,7 @@ Users who examine the security event log for the first time can be a bit overwhe
 
 -   [Advanced security audit policy settings](advanced-security-audit-policy-settings.md)
 
-## Where can I find more detailed information?
+## <a href="" id="bkmk-18"></a>Where can I find more detailed information?
 
 
 To learn more about security audit policies, see the following resources:
diff --git a/windows/keep-secure/allow-log-on-locally.md b/windows/keep-secure/allow-log-on-locally.md
index 1f0c5c9915..4c01928dd3 100644
--- a/windows/keep-secure/allow-log-on-locally.md
+++ b/windows/keep-secure/allow-log-on-locally.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Allow log on locally** security policy setting.
 
diff --git a/windows/keep-secure/allow-log-on-through-remote-desktop-services.md b/windows/keep-secure/allow-log-on-through-remote-desktop-services.md
index 237cc528bb..fe7ef33124 100644
--- a/windows/keep-secure/allow-log-on-through-remote-desktop-services.md
+++ b/windows/keep-secure/allow-log-on-through-remote-desktop-services.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Allow log on through Remote Desktop Services** security policy setting.
 
diff --git a/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md b/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md
index 6143ab96e7..a19b4b7e87 100644
--- a/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md
+++ b/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Audit: Audit the access of global system objects** security policy setting.
 
diff --git a/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md b/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md
index 3c8cd8dea4..3a0db486c3 100644
--- a/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md
+++ b/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Audit: Audit the use of Backup and Restore privilege** security policy setting.
 
diff --git a/windows/keep-secure/audit-force-audit-policy-subcategory-settings-to-override.md b/windows/keep-secure/audit-force-audit-policy-subcategory-settings-to-override.md
index 3fc67036ed..488b81fc4d 100644
--- a/windows/keep-secure/audit-force-audit-policy-subcategory-settings-to-override.md
+++ b/windows/keep-secure/audit-force-audit-policy-subcategory-settings-to-override.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** security policy setting.
 
diff --git a/windows/keep-secure/audit-shut-down-system-immediately-if-unable-to-log-security-audits.md b/windows/keep-secure/audit-shut-down-system-immediately-if-unable-to-log-security-audits.md
index 4791b78621..55fa18cbc7 100644
--- a/windows/keep-secure/audit-shut-down-system-immediately-if-unable-to-log-security-audits.md
+++ b/windows/keep-secure/audit-shut-down-system-immediately-if-unable-to-log-security-audits.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management practices, and security considerations for the **Audit: Shut down system immediately if unable to log security audits** security policy setting.
 
diff --git a/windows/keep-secure/back-up-files-and-directories.md b/windows/keep-secure/back-up-files-and-directories.md
index 3a807b61ab..492f0516cb 100644
--- a/windows/keep-secure/back-up-files-and-directories.md
+++ b/windows/keep-secure/back-up-files-and-directories.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Back up files and directories** security policy setting.
 
diff --git a/windows/keep-secure/backup-thetpm-recovery-information-to-ad-ds.md b/windows/keep-secure/backup-thetpm-recovery-information-to-ad-ds.md
index d7e7a1b653..83250faee4 100644
--- a/windows/keep-secure/backup-thetpm-recovery-information-to-ad-ds.md
+++ b/windows/keep-secure/backup-thetpm-recovery-information-to-ad-ds.md
@@ -35,17 +35,17 @@ This topic contains procedures, some of which are dependent on Visual Basic scri
 
 In this topic:
 
-1.  [Check status of prerequisites](#BKMK_PreReqs)
+1.  [Check status of prerequisites](#bkmk-prereqs)
 
-2.  [Set permissions to back up password information](#BKMK_SetPerms)
+2.  [Set permissions to back up password information](#bkmk-setperms)
 
-3.  [Configure Group Policy to back up TPM recovery information in AD DS](#BKMK_ConfigureGP)
+3.  [Configure Group Policy to back up TPM recovery information in AD DS](#bkmk-configuregp)
 
-4.  [Use AD DS to recover TPM information](#BKMK_UseIt)
+4.  [Use AD DS to recover TPM information](#bkmk-useit)
 
-5.  [Sample scripts](#BKMK_adds_tpm_scripts)
+5.  [Sample scripts](#bkmk-adds-tpm-scripts)
 
-## Check status of prerequisites
+## <a href="" id="bkmk-prereqs"></a>Check status of prerequisites
 
 
 Before you begin your backup, ensure that the following prerequisites are met:
@@ -59,10 +59,10 @@ Before you begin your backup, ensure that the following prerequisites are met:
 
 2.  You have domain administrator rights in the target forest, or you are using an account that has been granted appropriate permissions to extend the schema for the target forest. Members of the Enterprise Admins or Schema Admins groups are examples of accounts that have the appropriate permissions.
 
-## Set permissions to back up password information
+## <a href="" id="bkmk-setperms"></a>Set permissions to back up password information
 
 
-This procedure uses the sample script [Add-TPMSelfWriteACE.vbs](#BKMK_Add-TPMSelfWriteACE) to add an access control entry (ACE) so that backing up TPM recovery information is possible. A client computer cannot back up TPM owner information until this ACE is added.
+This procedure uses the sample script [Add-TPMSelfWriteACE.vbs](#bkmk-add-tpmselfwriteace) to add an access control entry (ACE) so that backing up TPM recovery information is possible. A client computer cannot back up TPM owner information until this ACE is added.
 
 This script is run on the domain controller that you will use to administer the TPM recovery information, and it operates under the following assumptions:
 
@@ -117,10 +117,10 @@ Complete the following procedure to check that the correct permissions are set a
 
     With this script you can optionally remove ACEs from BitLocker and TPM schema objects on the top-level domain.
 
-## Configure Group Policy to back up TPM recovery information in AD DS
+## <a href="" id="bkmk-configuregp"></a>Configure Group Policy to back up TPM recovery information in AD DS
 
 
-Use these procedures to configure the [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md#BKMK_tpmgp_addsbu) policy setting on a local computer. In a production environment, an efficient way to do this is to create or edit a Group Policy Object (GPO) that can target client computers in the domain.
+Use these procedures to configure the [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md#bkmk-tpmgp-addsbu) policy setting on a local computer. In a production environment, an efficient way to do this is to create or edit a Group Policy Object (GPO) that can target client computers in the domain.
 
 **To enable local policy setting to back up TPM recovery information to AD DS**
 
@@ -139,7 +139,7 @@ When this setting is enabled, the TPM owner password cannot be set or changed un
 
  
 
-## Use AD DS to recover TPM information
+## <a href="" id="bkmk-useit"></a>Use AD DS to recover TPM information
 
 
 When you need to recover the TPM owner information from AD DS and use it to manage the TPM, you need to read the **ms-TPM-OwnerInformation** object from AD DS, and then manually create a TPM owner password backup file that can be supplied when TPM owner credentials are required.
@@ -148,7 +148,7 @@ When you need to recover the TPM owner information from AD DS and use it to man
 
 1.  Sign in to a domain controller by using domain administrator credentials.
 
-2.  Copy the sample script file, [Get-TPMOwnerInfo.vbs](#ms-TPM-OwnerInformation), to a location on your computer.
+2.  Copy the sample script file, [Get-TPMOwnerInfo.vbs](#ms-tpm-ownerinformation), to a location on your computer.
 
 3.  Open a Command Prompt window, and change the default location to the location of the sample script files you saved in the previous step.
 
@@ -184,18 +184,18 @@ When you need to recover the TPM owner information from AD DS and use it to man
 
 6.  Save this file with a .tpm extension on a removable storage device, such as a USB flash drive. When you access the TPM, and you are required to provide the TPM owner password, choose the option for reading the password from a file and provide the path to this file.
 
-## Sample scripts
+## <a href="" id="bkmk-adds-tpm-scripts"></a>Sample scripts
 
 
 You can use all or portions of the following sample scripts, which are used in the preceding procedures, to configure AD DS for backing up TPM recovery information. Customization is required depending on how your environment is configured.
 
--   [Add-TPMSelfWriteACE.vbs: Use to add the access control entry (ACE) for the TPM to AD DS](#BKMK_Add-TPMSelfWriteACE)
+-   [Add-TPMSelfWriteACE.vbs: Use to add the access control entry (ACE) for the TPM to AD DS](#bkmk-add-tpmselfwriteace)
 
--   [List-ACEs.vbs: Use to list or remove the ACEs that are configured on BitLocker and TPM schema objects](#BKMK_List-ACEs)
+-   [List-ACEs.vbs: Use to list or remove the ACEs that are configured on BitLocker and TPM schema objects](#bkmk-list-aces)
 
--   [Get-TPMOwnerInfo.vbs: Use to retrieve the TPM recovery information from AD DS for a particular computer](#BKMK_Get-TPMOwnerInfo)
+-   [Get-TPMOwnerInfo.vbs: Use to retrieve the TPM recovery information from AD DS for a particular computer](#bkmk-get-tpmownerinfo)
 
-### Add-TPMSelfWriteACE.vbs
+### <a href="" id="bkmk-add-tpmselfwriteace"></a>Add-TPMSelfWriteACE.vbs
 
 This script adds the access control entry (ACE) for the TPM to AD DS so that the computer can back up TPM recovery information in AD DS.
 
@@ -326,7 +326,7 @@ objDomain.SetInfo
 WScript.Echo "SUCCESS!"
 ```
 
-### List-ACEs.vbs
+### <a href="" id="bkmk-list-aces"></a>List-ACEs.vbs
 
 This script lists or removes the ACEs that are configured on BitLocker and TPM schema objects for the top-level domain. This enables you to verify that the expected ACEs have been added appropriately or to remove any ACEs that are related to BitLocker or the TPM, if necessary.
 
@@ -571,7 +571,7 @@ else
 end if
 ```
 
-### Get-TPMOwnerInfo.vbs
+### <a href="" id="bkmk-get-tpmownerinfo"></a>Get-TPMOwnerInfo.vbs
 
 This script retrieves TPM recovery information from AD DS for a particular computer so that you can verify that only domain administrators (or delegated roles) can read backed up TPM recovery information and verify that the information is being backed up correctly.
 
diff --git a/windows/keep-secure/bitlocker-basic-deployment.md b/windows/keep-secure/bitlocker-basic-deployment.md
index 8d60f57dc6..66830c7a84 100644
--- a/windows/keep-secure/bitlocker-basic-deployment.md
+++ b/windows/keep-secure/bitlocker-basic-deployment.md
@@ -19,15 +19,15 @@ This topic for the IT professional explains how BitLocker features can be used t
 
 The following sections provide information that will help you put together your basic deployment plan for implementing BitLocker in your organization:
 
--   [Using BitLocker to encrypt volumes](#BKMK_dep1)
+-   [Using BitLocker to encrypt volumes](#bkmk-dep1)
 
--   [Down-level compatibility](#BKMK_dep2)
+-   [Down-level compatibility](#bkmk-dep2)
 
--   [Using manage-bde to encrypt volumes with BitLocker](#BKMK_dep3)
+-   [Using manage-bde to encrypt volumes with BitLocker](#bkmk-dep3)
 
--   [Using PowerShell to encrypt volumes with BitLocker](#BKMK_dep4)
+-   [Using PowerShell to encrypt volumes with BitLocker](#bkmk-dep4)
 
-## Using BitLocker to encrypt volumes
+## <a href="" id="bkmk-dep1"></a>Using BitLocker to encrypt volumes
 
 
 BitLocker provides full volume encryption (FVE) for operating system volumes, as well as fixed and removable data volumes. To support fully encrypted operating system volumes, BitLocker uses an unencrypted system volume for the files required to boot, decrypt, and load the operating system. This volume is automatically created during a new installation of both client and server operating systems.
@@ -146,7 +146,7 @@ With an encryption method chosen, a final confirmation screen displays before be
 
 Encryption status displays in the notification area or within the BitLocker control panel.
 
-###  OneDrive option
+### <a href="" id="-onedrive-option-"></a> OneDrive option
 
 There is a new option for storing the BitLocker recovery key using the OneDrive. This option requires that computers are not members of a domain and that the user is using a Microsoft Account. Local accounts do not give the option to utilize OneDrive. Using the OneDrive option is the default, recommended recovery key storage method for computers that are not joined to a domain.
 
@@ -156,7 +156,7 @@ Users can verify the recovery key was saved properly by checking their OneDrive
 
 Windows Explorer allows users to launch the BitLocker Drive Encryption wizard by right clicking on a volume and selecting **Turn On BitLocker**. This option is available on client computers by default. On servers, you must first install the BitLocker and Desktop-Experience features for this option to be available. After selecting **Turn on BitLocker**, the wizard works exactly as it does when launched using the BitLocker control panel.
 
-## Down-level compatibility
+## <a href="" id="bkmk-dep2"></a>Down-level compatibility
 
 
 The following table shows the compatibility matrix for systems that have been BitLocker enabled then presented to a different version of Windows.
@@ -274,7 +274,7 @@ manage-bde -protectors -add -pw C:
 manage-bde -on C:
 ```
 
-## Using manage-bde to encrypt volumes with BitLocker
+## <a href="" id="bkmk-dep3"></a>Using manage-bde to encrypt volumes with BitLocker
 
 
 ### Encrypting volumes using the BitLocker Windows PowerShell cmdlets
@@ -515,7 +515,7 @@ Active Directory-based protectors are normally used to unlock Failover Cluster e
 
  
 
-## Using PowerShell to encrypt volumes with BitLocker
+## <a href="" id="bkmk-dep4"></a>Using PowerShell to encrypt volumes with BitLocker
 
 
 ### Checking BitLocker status
diff --git a/windows/keep-secure/bitlocker-frequently-asked-questions--faq-.md b/windows/keep-secure/bitlocker-frequently-asked-questions--faq-.md
index a389626957..ce094d3d47 100644
--- a/windows/keep-secure/bitlocker-frequently-asked-questions--faq-.md
+++ b/windows/keep-secure/bitlocker-frequently-asked-questions--faq-.md
@@ -19,28 +19,28 @@ This topic for the IT professional answers frequently asked questions concerning
 
 BitLocker is a data protection feature that encrypts the hard drives on your computer to provide enhanced protection against data theft or exposure on computers and removable drives that are lost or stolen, and more secure data deletion when BitLocker-protected computers are decommissioned as it is much more difficult to recover deleted data from an encrypted drive than from a non-encrypted drive.
 
--   [Overview and requirements](#BKMK_Overview)
+-   [Overview and requirements](#bkmk-overview)
 
--   [Upgrading](#BKMK_Upgrading)
+-   [Upgrading](#bkmk-upgrading)
 
--   [Deployment and administration](#BKMK_Deploy)
+-   [Deployment and administration](#bkmk-deploy)
 
--   [Key management](#BKMK_KeyManagement)
+-   [Key management](#bkmk-keymanagement)
 
--   [BitLocker To Go](#BKMK_BTGsect)
+-   [BitLocker To Go](#bkmk-btgsect)
 
--   [Active Directory Domain Services (AD DS)](#BKMK_ADDS)
+-   [Active Directory Domain Services (AD DS)](#bkmk-adds)
 
--   [Security](#BKMK_Security)
+-   [Security](#bkmk-security)
 
--   [BitLocker Network Unlock](#BKMK_BNUsect)
+-   [BitLocker Network Unlock](#bkmk-bnusect)
 
--   [Other questions](#BKMK_Other)
+-   [Other questions](#bkmk-other)
 
-## Overview and requirements
+## <a href="" id="bkmk-overview"></a>Overview and requirements
 
 
-### How does BitLocker work?
+### <a href="" id="bkmk-whatisbitlocker"></a>How does BitLocker work?
 
 **How BitLocker works with operating system drives**
 
@@ -50,36 +50,36 @@ You can use BitLocker to mitigate unauthorized data access on lost or stolen com
 
 You can use BitLocker to encrypt the entire contents of a data drive. You can use Group Policy to require that BitLocker be enabled on a drive before the computer can write data to the drive. BitLocker can be configured with a variety of unlock methods for data drives, and a data drive supports multiple unlock methods.
 
-### Does BitLocker support multifactor authentication?
+### <a href="" id="bkmk-multifactorsupport"></a>Does BitLocker support multifactor authentication?
 
 Yes, BitLocker supports multifactor authentication for operating system drives. If you enable BitLocker on a computer that has a TPM version 1.2 or later, you can use additional forms of authentication with the TPM protection.
 
-### What are the BitLocker hardware and software requirements?
+### <a href="" id="bkmk-hsrequirements"></a>What are the BitLocker hardware and software requirements?
 
 **Note**  
 Dynamic disks are not supported by BitLocker. Dynamic data volumes will not be displayed in the Control Panel. Although the operating system volume will always be displayed in the Control Panel, regardless of whether it is a Dynamic disk, if it is a dynamic disk it is cannot be protected by BitLocker.
 
  
 
-### Why are two partitions required? Why does the system drive have to be so large?
+### <a href="" id="bkmk-partitions"></a>Why are two partitions required? Why does the system drive have to be so large?
 
 Two partitions are required to run BitLocker because pre-startup authentication and system integrity verification must occur on a separate partition from the encrypted operating system drive. This configuration helps protect the operating system and the information in the encrypted drive.
 
-### Which Trusted Platform Modules (TPMs) does BitLocker support?
+### <a href="" id="bkmk-tpmchipsupport"></a>Which Trusted Platform Modules (TPMs) does BitLocker support?
 
 BitLocker supports TPM version 1.2 or higher.
 
-### How can I tell if a TPM is on my computer?
+### <a href="" id="bkmk-havetpm"></a>How can I tell if a TPM is on my computer?
 
 Open the TPM MMC console (tpm.msc) and look under the **Status** heading.
 
-### Can I use BitLocker on an operating system drive without a TPM?
+### <a href="" id="bkmk-notpm"></a>Can I use BitLocker on an operating system drive without a TPM?
 
 Yes, you can enable BitLocker on an operating system drive without a TPM version 1.2 or higher, if the BIOS or UEFI firmware has the ability to read from a USB flash drive in the boot environment. This is because BitLocker will not unlock the protected drive until BitLocker's own volume master key is first released by either the computer's TPM or by a USB flash drive containing the BitLocker startup key for that computer. However, computers without TPMs will not be able to use the system integrity verification that BitLocker can also provide.
 
 To help determine whether a computer can read from a USB device during the boot process, use the BitLocker system check as part of the BitLocker setup process. This system check performs tests to confirm that the computer can properly read from the USB devices at the appropriate time and that the computer meets other BitLocker requirements.
 
-### How do I obtain BIOS support for the TPM on my computer?
+### <a href="" id="bkmk-biossupport"></a>How do I obtain BIOS support for the TPM on my computer?
 
 Contact the computer manufacturer to request a Trusted Computing Group (TCG)-compliant BIOS or UEFI boot firmware that meets the following requirements:
 
@@ -87,28 +87,28 @@ Contact the computer manufacturer to request a Trusted Computing Group (TCG)-com
 
 -   It has a secure update mechanism to help prevent a malicious BIOS or boot firmware from being installed on the computer.
 
-### What credentials are required to use BitLocker?
+### <a href="" id="bkmk-privs"></a>What credentials are required to use BitLocker?
 
 To turn on, turn off, or change configurations of BitLocker on operating system and fixed data drives, membership in the local **Administrators** group is required. Standard users can turn on, turn off, or change configurations of BitLocker on removable data drives.
 
-### What is the recommended boot order for computers that are going to be BitLocker-protected?
+### <a href="" id="bkmk-bootorder"></a>What is the recommended boot order for computers that are going to be BitLocker-protected?
 
 You should configure the startup options of your computer to have the hard disk drive first in the boot order, before any other drives such ach as CD/DVD drives or USB drives. If the hard disk is not first and you typically boot from hard disk, then a boot order change may be detected or assumed when removable media is found during boot. The boot order typically affects the system measurement that is verified by BitLocker and a change in boot order will cause you to be prompted for your BitLocker recovery key. For the same reason, if you have a laptop with a docking station, ensure that the hard disk drive is first in the boot order both when docked and undocked. 
 
-## Upgrading
+## <a href="" id="bkmk-upgrading"></a>Upgrading
 
 
-### Can I upgrade my Windows 7 or Windows 8 computer to Windows 10 with BitLocker enabled?
+### <a href="" id="bkmk-upgradev27"></a>Can I upgrade my Windows 7 or Windows 8 computer to Windows 10 with BitLocker enabled?
 
 Yes. Open the **BitLocker Drive Encryption** Control Panel, click **Manage BitLocker**, and then and click **Suspend**. Suspending protection does not decrypt the drive; it disables the authentication mechanisms used by BitLocker and uses a clear key on the drive to enable access. After the upgrade has completed, open Windows Explorer, right-click the drive, and then click **Resume Protection**. This reapplies the BitLocker authentication methods and deletes the clear key.
 
-### What is the difference between suspending and decrypting BitLocker?
+### <a href="" id="bkmk-disabledecrypt"></a>What is the difference between suspending and decrypting BitLocker?
 
 **Decrypt** completely removes BitLocker protection and fully decrypts the drive.
 
 **Suspend** keeps the data encrypted but encrypts the BitLocker volume master key with a clear key. The clear key is a cryptographic key stored unencrypted and unprotected on the disk drive. By storing this key unencrypted, the **Suspend** option allows for changes or upgrades to the computer without the time and cost of decrypting and re-encrypting the entire drive. After the changes are made and BitLocker is again enabled, BitLocker will reseal the encryption key to the new values of the measured components that changed as a part of the upgrade, the volume master key is changed, the protectors are updated to match and the clear key is erased.
 
-### Do I have to decrypt my BitLocker-protected drive to download and install system updates and upgrades?
+### <a href="" id="bkmk-decryptfirst"></a>Do I have to decrypt my BitLocker-protected drive to download and install system updates and upgrades?
 
 The following table lists what action you need to take before you perform an upgrade or update installation.
 
@@ -155,42 +155,42 @@ If you have suspended BitLocker, you can resume BitLocker protection after you h
 
  
 
-## Deployment and administration
+## <a href="" id="bkmk-deploy"></a>Deployment and administration
 
 
-### Can BitLocker deployment be automated in an enterprise environment?
+### <a href="" id="bkmk-automate"></a>Can BitLocker deployment be automated in an enterprise environment?
 
 Yes, you can automate the deployment and configuration of BitLocker and the TPM using either WMI or Windows PowerShell scripts. How you choose to implement the scripts depends on your environment. You can also use Manage-bde.exe to locally or remotely configure BitLocker. For more info about writing scripts that use the BitLocker WMI providers, see [BitLocker Drive Encryption Provider](http://go.microsoft.com/fwlink/p/?LinkId=80600). For more info about using Windows PowerShell cmdlets with BitLocker Drive Encryption, see [BitLocker Cmdlets in Windows PowerShell](http://technet.microsoft.com/library/jj649829.aspx).
 
-### Can BitLocker encrypt more than just the operating system drive?
+### <a href="" id="bkmk-os"></a>Can BitLocker encrypt more than just the operating system drive?
 
 Yes.
 
-### Is there a noticeable performance impact when BitLocker is enabled on a computer?
+### <a href="" id="bkmk-performance"></a>Is there a noticeable performance impact when BitLocker is enabled on a computer?
 
 Generally it imposes a single-digit percentage performance overhead.
 
-### How long will initial encryption take when BitLocker is turned on?
+### <a href="" id="bkmk-longencrypt"></a>How long will initial encryption take when BitLocker is turned on?
 
 Although BitLocker encryption occurs in the background while you continue to work, and the system remains usable, encryption times vary depending on the type of drive that is being encrypted, the size of the drive, and the speed of the drive. If you are encrypting very large drives, you may want to set encryption to occur during times when you will not be using the drive.
 
 You can also choose whether or not BitLocker should encrypt the entire drive or just the used space on the drive when you turn on BitLocker. On a new hard drive, encrypting just the used spaced can be considerably faster than encrypting the entire drive. When this encryption option is selected, BitLocker automatically encrypts data as it is saved, ensuring that no data is stored unencrypted.
 
-### What happens if the computer is turned off during encryption or decryption?
+### <a href="" id="bkmk-turnoff"></a>What happens if the computer is turned off during encryption or decryption?
 
 If the computer is turned off or goes into hibernation, the BitLocker encryption and decryption process will resume where it stopped the next time Windows starts. This is true even if the power is suddenly unavailable.
 
-### Does BitLocker encrypt and decrypt the entire drive all at once when reading and writing data?
+### <a href="" id="bkmk-entiredisk"></a>Does BitLocker encrypt and decrypt the entire drive all at once when reading and writing data?
 
 No, BitLocker does not encrypt and decrypt the entire drive when reading and writing data. The encrypted sectors in the BitLocker-protected drive are decrypted only as they are requested from system read operations. Blocks that are written to the drive are encrypted before the system writes them to the physical disk. No unencrypted data is ever stored on a BitLocker-protected drive.
 
-### How can I prevent users on a network from storing data on an unencrypted drive?
+### <a href="" id="bkmk-dataunencryptpart"></a>How can I prevent users on a network from storing data on an unencrypted drive?
 
 You can can Group Policy settings to require that data drives be BitLocker-protected before a BitLocker-protected computer can write data to them. For more info, see [BitLocker Group Policy settings](bitlocker-group-policy-settings.md).
 
 When these policy settings are enabled, the BitLocker-protected operating system will mount any data drives that are not protected by BitLocker as read-only.
 
-### What system changes would cause the integrity check on my operating system drive to fail?
+### <a href="" id="bkmk-integrityfail"></a>What system changes would cause the integrity check on my operating system drive to fail?
 
 The following types of system changes can cause an integrity check failure and prevent the TPM from releasing the BitLocker key to decrypt the protected operating system drive:
 
@@ -204,34 +204,34 @@ The following types of system changes can cause an integrity check failure and p
 
 -   Changing the BIOS, UEFI firmware, master boot record, boot sector, boot manager, option ROM, or other early boot components or boot configuration data.
 
-### What causes BitLocker to start into recovery mode when attempting to start the operating system drive?
+### <a href="" id="bkmk-examplesosrec"></a>What causes BitLocker to start into recovery mode when attempting to start the operating system drive?
 
 Because BitLocker is designed to protect your computer from numerous attacks, there are numerous reasons why BitLocker could start in recovery mode. In BitLocker, recovery consists of decrypting a copy of the volume master key using either a recovery key stored on a USB flash drive or a cryptographic key derived from a recovery password. The TPM is not involved in any recovery scenarios, so recovery is still possible if the TPM fails boot component validation, malfunctions, or is removed.
 
-### Can I swap hard disks on the same computer if BitLocker is enabled on the operating system drive?
+### <a href="" id="bkmk-driveswap"></a>Can I swap hard disks on the same computer if BitLocker is enabled on the operating system drive?
 
 Yes, you can swap multiple hard disks on the same computer if BitLocker is enabled, but only if the hard disks were BitLocker-protected on the same computer. The BitLocker keys are unique to the TPM and operating system drive, so if you want to prepare a backup operating system or data drive for use in case of disk failure, you need to make sure that they were matched with the correct TPM. You can also configure different hard drives for different operating systems and then enable BitLocker on each one with different authentication methods (such as one with TPM-only and one with TPM+PIN) without any conflicts.
 
-### Can I access my BitLocker-protected drive if I insert the hard disk into a different computer?
+### <a href="" id="bkmk-altpc"></a>Can I access my BitLocker-protected drive if I insert the hard disk into a different computer?
 
 Yes, if the drive is a data drive, you can unlock it from the **BitLocker Drive Encryption** Control Panel item just as you would any other data drive by using a password or smart card. If the data drive was configured for automatic unlock only, you will have to unlock it by using the recovery key. The encrypted hard disk can be unlocked by a data recovery agent (if one was configured) or it can be unlocked by using the recovery key.
 
-### Why is "Turn BitLocker on" not available when I right-click a drive?
+### <a href="" id="bkmk-noturnon"></a>Why is "Turn BitLocker on" not available when I right-click a drive?
 
 Some drives cannot be encrypted with BitLocker. Reasons a drive cannot be encrypted include insufficient disk size, an incompatible file system, if the drive is a dynamic disk, or a drive is designated as the system partition. By default, the system drive (or system partition) is hidden from display. However, if it is not created as a hidden drive when the operating system was installed due to a custom installation process, that drive might be displayed but cannot be encrypted.
 
-### What type of disk configurations are supported by BitLocker?
+### <a href="" id="bkmk-r2disks"></a>What type of disk configurations are supported by BitLocker?
 
 Any number of internal, fixed data drives can be protected with BitLocker. On some versions ATA and SATA-based, direct-attached storage devices are also supported.
 
-## Key management
+## <a href="" id="bkmk-keymanagement"></a>Key management
 
 
-### What is the difference between a TPM owner password, recovery password, recovery key, password, PIN, enhanced PIN, and startup key?
+### <a href="" id="bkmk-key"></a>What is the difference between a TPM owner password, recovery password, recovery key, password, PIN, enhanced PIN, and startup key?
 
 There are multiple keys that can be generated and used by BitLocker. Some keys are required and some are optional protectors you can choose to use depending on the level of security you require.
 
-### How can the recovery password and recovery key be stored?
+### <a href="" id="bkmk-recoverypass"></a>How can the recovery password and recovery key be stored?
 
 The recovery password and recovery key for an operating system drive or a fixed data drive can be saved to a folder, saved to one or more USB devices, saved to your Microsoft Account, or printed.
 
@@ -239,7 +239,7 @@ For removable data drives, the recovery password and recovery key can be saved t
 
 A domain administrator can additionally configure Group Policy to automatically generate recovery passwords and store them in Active Directory Domain Services (AD DS) for any BitLocker-protected drive.
 
-### Is it possible to add an additional method of authentication without decrypting the drive if I only have the TPM authentication method enabled?
+### <a href="" id="bkmk-enableauthwodecrypt"></a>Is it possible to add an additional method of authentication without decrypting the drive if I only have the TPM authentication method enabled?
 
 You can use the Manage-bde.exe command-line tool to replace your TPM-only authentication mode with a multifactor authentication mode. For example, if BitLocker is enabled with TPM authentication only and you want to add PIN authentication, use the following commands from an elevated command prompt, replacing *&lt;4-20 digit numeric PIN&gt;* with the numeric PIN you want to use:
 
@@ -247,7 +247,7 @@ You can use the Manage-bde.exe command-line tool to replace your TPM-only authen
 
 **manage-bde –protectors –add %systemdrive% -tpmandpin** *&lt;4-20 digit numeric PIN&gt;*
 
-### If I lose my recovery information, will the BitLocker-protected data be unrecoverable?
+### <a href="" id="bkmk-recoveryinfo"></a>If I lose my recovery information, will the BitLocker-protected data be unrecoverable?
 
 BitLocker is designed to make the encrypted drive unrecoverable without the required authentication. When in recovery mode, the user needs the recovery password or recovery key to unlock the encrypted drive.
 
@@ -256,43 +256,43 @@ Store the recovery information in AD DS, along with your Microsoft Account, or
 
  
 
-### Can the USB flash drive that is used as the startup key also be used to store the recovery key?
+### <a href="" id="bkmk-usbdrive"></a>Can the USB flash drive that is used as the startup key also be used to store the recovery key?
 
 While this is technically possible, it is not a best practice to use one USB flash drive to store both keys. If the USB flash drive that contains your startup key is lost or stolen, you also lose access to your recovery key. In addition, inserting this key would cause your computer to automatically boot from the recovery key even if TPM-measured files have changed, which circumvents the TPM's system integrity check.
 
-### Can I save the startup key on multiple USB flash drives?
+### <a href="" id="bkmk-startupkey"></a>Can I save the startup key on multiple USB flash drives?
 
 Yes, you can save a computer's startup key on multiple USB flash drives. Right-clicking a BitLocker-protected drive and selecting **Manage BitLocker** will provide you the options to duplicate the recovery keys as needed.
 
-### Can I save multiple (different) startup keys on the same USB flash drive?
+### <a href="" id="bkmk-multikeyoneusb"></a>Can I save multiple (different) startup keys on the same USB flash drive?
 
 Yes, you can save BitLocker startup keys for different computers on the same USB flash drive.
 
-### Can I generate multiple (different) startup keys for the same computer?
+### <a href="" id="bkmk-multikey"></a>Can I generate multiple (different) startup keys for the same computer?
 
 You can generate different startup keys for the same computer through scripting. However, for computers that have a TPM, creating different startup keys prevents BitLocker from using the TPM's system integrity check.
 
-### Can I generate multiple PIN combinations?
+### <a href="" id="bkmk-multipin"></a>Can I generate multiple PIN combinations?
 
 You cannot generate multiple PIN combinations.
 
-### What encryption keys are used in BitLocker? How do they work together?
+### <a href="" id="bkmk-encryptkeys"></a>What encryption keys are used in BitLocker? How do they work together?
 
 Raw data is encrypted with the full volume encryption key, which is then encrypted with the volume master key. The volume master key is in turn encrypted by one of several possible methods depending on your authentication (that is, key protectors or TPM) and recovery scenarios.
 
-### Where are the encryption keys stored?
+### <a href="" id="bkmk-keystorage"></a>Where are the encryption keys stored?
 
 The full volume encryption key is encrypted by the volume master key and stored in the encrypted drive. The volume master key is encrypted by the appropriate key protector and stored in the encrypted drive. If BitLocker has been suspended, the clear key that is used to encrypt the volume master key is also stored in the encrypted drive, along with the encrypted volume master key.
 
 This storage process ensures that the volume master key is never stored unencrypted and is protected unless you disable BitLocker. The keys are also saved to two additional locations on the drive for redundancy. The keys can be read and processed by the boot manager.
 
-### Why do I have to use the function keys to enter the PIN or the 48-character recovery password?
+### <a href="" id="bkmk-funckey"></a>Why do I have to use the function keys to enter the PIN or the 48-character recovery password?
 
 The F1 through F10 keys are universally mapped scan codes available in the pre-boot environment on all computers and in all languages. The numeric keys 0 through 9 are not usable in the pre-boot environment on all keyboards.
 
 When using an enhanced PIN, users should run the optional system check during the BitLocker setup process to ensure that the PIN can be entered correctly in the pre-boot environment.
 
-### How does BitLocker help prevent an attacker from discovering the PIN that unlocks my operating system drive?
+### <a href="" id="bkmk-youbrute"></a>How does BitLocker help prevent an attacker from discovering the PIN that unlocks my operating system drive?
 
 It is possible that a personal identification number (PIN) can be discovered by an attacker performing a brute force attack. A brute force attack occurs when an attacker uses an automated tool to try different PIN combinations until the correct one is discovered. For BitLocker-protected computers, this type of attack, also known as a dictionary attack, requires that the attacker have physical access to the computer.
 
@@ -300,11 +300,11 @@ The TPM has the built-in ability to detect and react to these types of attacks.
 
 After you have determined your TPM's manufacturer, contact the manufacturer to gather the TPM's vendor-specific information. Most manufacturers use the PIN authentication failure count to exponentially increase lockout time to the PIN interface. However, each manufacturer has different policies regarding when and how the failure counter is decreased or reset.
 
-### How can I determine the manufacturer of my TPM?
+### <a href="" id="bkmk-tpmprov"></a>How can I determine the manufacturer of my TPM?
 
 You can determine your TPM manufacturer in the TPM MMC console (tpm.msc) under the **TPM Manufacturer Information** heading.
 
-### How can I evaluate a TPM's dictionary attack mitigation mechanism?
+### <a href="" id="bkmk-tpmdam"></a>How can I evaluate a TPM's dictionary attack mitigation mechanism?
 
 The following questions can assist you when asking a TPM manufacturer about the design of a dictionary attack mitigation mechanism:
 
@@ -314,18 +314,18 @@ The following questions can assist you when asking a TPM manufacturer about the
 
 -   What actions can cause the failure count and lockout duration to be decreased or reset?
 
-### Can PIN length and complexity be managed with Group Policy?
+### <a href="" id="bkmk-pinlength"></a>Can PIN length and complexity be managed with Group Policy?
 
 Yes and No. You can configure the minimum personal identification number (PIN) length by using the **Configure minimum PIN length for startup** Group Policy setting and allow the use of alphanumeric PINs by enabling the **Allow enhanced PINs for startup** Group Policy setting. However, you cannot require PIN complexity by Group Policy.
 
 For more info, see [BitLocker Group Policy settings](bitlocker-group-policy-settings.md).
 
-## BitLocker To Go
+## <a href="" id="bkmk-btgsect"></a>BitLocker To Go
 
 
 BitLocker To Go is BitLocker Drive Encryption on removable data drives. This includes the encryption of USB flash drives, SD cards, external hard disk drives, and other drives formatted by using the NTFS, FAT16, FAT32, or exFAT file systems.
 
-## Active Directory Domain Services (AD DS)
+## <a href="" id="bkmk-adds"></a>Active Directory Domain Services (AD DS)
 
 
 ### What if BitLocker is enabled on a computer before the computer has joined the domain?
@@ -341,17 +341,17 @@ Joining a computer to the domain should be the first step for new computers with
 
  
 
-### Is there an event log entry recorded on the client computer to indicate the success or failure of the Active Directory backup?
+### <a href="" id="bkmk-addseventlog"></a>Is there an event log entry recorded on the client computer to indicate the success or failure of the Active Directory backup?
 
 Yes, an event log entry that indicates the success or failure of an Active Directory backup is recorded on the client computer. However, even if an event log entry says "Success," the information could have been subsequently removed from AD DS, or BitLocker could have been reconfigured in such a way that the Active Directory information can no longer unlock the drive (such as by removing the recovery password key protector). In addition, it is also possible that the log entry could be spoofed.
 
 Ultimately, determining whether a legitimate backup exists in AD DS requires querying AD DS with domain administrator credentials by using the BitLocker password viewer tool.
 
-### If I change the BitLocker recovery password on my computer and store the new password in AD DS, will AD DS overwrite the old password?
+### <a href="" id="bkmk-refresh"></a>If I change the BitLocker recovery password on my computer and store the new password in AD DS, will AD DS overwrite the old password?
 
 No. By design, BitLocker recovery password entries do not get deleted from AD DS; therefore, you might see multiple passwords for each drive. To identify the latest password, check the date on the object.
 
-### What happens if the backup initially fails? Will BitLocker retry the backup?
+### <a href="" id="bkmk-adbackupfails"></a>What happens if the backup initially fails? Will BitLocker retry the backup?
 
 If the backup initially fails, such as when a domain controller is unreachable at the time when the BitLocker setup wizard is run, BitLocker does not try again to back up the recovery information to AD DS.
 
@@ -359,24 +359,24 @@ When an administrator selects the **Require BitLocker backup to AD DS** check b
 
 For more info, see [BitLocker Group Policy settings](bitlocker-group-policy-settings.md).
 
-When an administrator clears these check boxes, the administrator is allowing a drive to be BitLocker-protected without having the recovery information successfully backed up to AD DS; however, BitLocker will not automatically retry the backup if it fails. Instead, administrators can create a script for the backup, as described earlier in [What if BitLocker is enabled on a computer before the computer has joined the domain?](#BKMK_ADRetro) to capture the information after connectivity is restored.
+When an administrator clears these check boxes, the administrator is allowing a drive to be BitLocker-protected without having the recovery information successfully backed up to AD DS; however, BitLocker will not automatically retry the backup if it fails. Instead, administrators can create a script for the backup, as described earlier in [What if BitLocker is enabled on a computer before the computer has joined the domain?](#bkmk-adretro) to capture the information after connectivity is restored.
 
-## Security
+## <a href="" id="bkmk-security"></a>Security
 
 
-### What form of encryption does BitLocker use? Is it configurable?
+### <a href="" id="bkmk-form"></a>What form of encryption does BitLocker use? Is it configurable?
 
 BitLocker uses Advanced Encryption Standard (AES) as its encryption algorithm with configurable key lengths of 128 or 256 bits. The default encryption setting is AES-128, but the options are configurable by using Group Policy.
 
-### What is the best practice for using BitLocker on an operating system drive?
+### <a href="" id="bkmk-config"></a>What is the best practice for using BitLocker on an operating system drive?
 
 The recommended practice for BitLocker configuration on an operating system drive is to implement BitLocker on a computer with a TPM version 1.2 or higher and a Trusted Computing Group (TCG)-compliant BIOS or UEFI firmware implementation, plus a PIN. By requiring a PIN that was set by the user in addition to the TPM validation, a malicious user that has physical access to the computer cannot simply start the computer.
 
-### What are the implications of using the sleep or hibernate power management options?
+### <a href="" id="bkmk-sleep"></a>What are the implications of using the sleep or hibernate power management options?
 
 BitLocker on operating system drives in its basic configuration (with a TPM but without advanced authentication) provides additional security for the hibernate mode. However, BitLocker provides greater security when it is configured to use an advanced authentication mode (TPM+PIN, TPM+USB, or TPM+PIN+USB) with the hibernate mode. This method is more secure because returning from hibernation requires BitLocker authentication. As a best practice, we recommend that sleep mode be disabled and that you use TPM+PIN for the authentication method.
 
-### What are the advantages of a TPM?
+### <a href="" id="bkmk-root"></a>What are the advantages of a TPM?
 
 Most operating systems use a shared memory space and rely on the operating system to manage physical memory. A TPM is a hardware component that uses its own internal firmware and logic circuits for processing instructions, thus shielding it from external software vulnerabilities. Attacking the TPM requires physical access to the computer. Additionally, the tools and skills necessary to attack hardware are often more expensive, and usually are not as available as the ones used to attack software. And because each TPM is unique to the computer that contains it, attacking multiple TPM computers would be difficult and time-consuming.
 
@@ -385,7 +385,7 @@ Configuring BitLocker with an additional factor of authentication provides even
 
  
 
-## BitLocker Network Unlock
+## <a href="" id="bkmk-bnusect"></a>BitLocker Network Unlock
 
 
 BitLocker Network Unlock enables easier management for BitLocker-enabled desktops and servers that use the TPM+PIN protection method in a domain environment. When a computer that is connected to a wired corporate network is rebooted, Network Unlock allows the PIN entry prompt to be bypassed. It automatically unlocks BitLocker-protected operating system volumes by using a trusted key that is provided by the Windows Deployment Services server as its secondary authentication method.
@@ -398,30 +398,30 @@ Network Unlock uses two protectors, the TPM protector and the one provided by th
 
 For more info, see [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md).
 
-## Other questions
+## <a href="" id="bkmk-other"></a>Other questions
 
 
-### Can I run a kernel debugger with BitLocker?
+### <a href="" id="bkmk-kernel"></a>Can I run a kernel debugger with BitLocker?
 
 Yes. However, the debugger should be turned on before enabling BitLocker. Turning on the debugger ensures that the correct measurements are calculated when sealing to the TPM, allowing the computer to start properly. If you need to turn debugging on or off when using BitLocker, be sure to suspend BitLocker first to avoid putting your computer into recovery mode.
 
-### How does BitLocker handle memory dumps?
+### <a href="" id="bkmk-errorreports"></a>How does BitLocker handle memory dumps?
 
 BitLocker has a storage driver stack that ensures memory dumps are encrypted when BitLocker is enabled.
 
-### Can BitLocker support smart cards for pre-boot authentication?
+### <a href="" id="bkmk-smart"></a>Can BitLocker support smart cards for pre-boot authentication?
 
 BitLocker does not support smart cards for pre-boot authentication. There is no single industry standard for smart card support in the firmware, and most computers either do not implement firmware support for smart cards, or only support specific smart cards and readers. This lack of standardization makes supporting them very difficult.
 
-### Can I use a non-Microsoft TPM driver?
+### <a href="" id="bkmk-driver"></a>Can I use a non-Microsoft TPM driver?
 
 Microsoft does not support non-Microsoft TPM drivers and strongly recommends against using them with BitLocker. Attempting to use a non-Microsoft TPM driver with BitLocker may cause BitLocker to report that a TPM is not present on the computer and not allow the TPM to be used with BitLocker.
 
-### Can other tools that manage or modify the master boot record work with BitLocker?
+### <a href="" id="bkmk-mbr"></a>Can other tools that manage or modify the master boot record work with BitLocker?
 
 We do not recommend modifying the master boot record on computers whose operating system drives are BitLocker-protected for a number of security, reliability, and product support reasons. Changes to the master boot record (MBR) could change the security environment and prevent the computer from starting normally, as well as complicate any efforts to recover from a corrupted MBR. Changes made to the MBR by anything other than Windows might force the computer into recovery mode or prevent it from booting entirely.
 
-### Why is the system check failing when I am encrypting my operating system drive?
+### <a href="" id="bkmk-syschkfail"></a>Why is the system check failing when I am encrypting my operating system drive?
 
 The system check is designed to ensure your computer's BIOS or UEFI firmware is compatible with BitLocker and that the TPM is working correctly. The system check can fail for several reasons:
 
@@ -439,23 +439,23 @@ The system check is designed to ensure your computer's BIOS or UEFI firmware is
 
 -   The TPM has malfunctioned and fails to unseal the keys.
 
-### What can I do if the recovery key on my USB flash drive cannot be read?
+### <a href="" id="bkmk-usbkeyfail"></a>What can I do if the recovery key on my USB flash drive cannot be read?
 
 Some computers cannot read USB flash drives in the pre-boot environment. First, check your BIOS or UEFI firmware and boot settings to ensure that the use of USB drives is enabled. If it is not enabled, enable the use of USB drives in the BIOS or UEFI firmware and boot settings and then try to read the recovery key from the USB flash drive again. If it still cannot be read, you will have to mount the hard drive as a data drive on another computer so that there is an operating system to attempt to read the recovery key from the USB flash drive. If the USB flash drive has been corrupted or damaged, you may need to supply a recovery password or use the recovery information that was backed up to AD DS. Also, if you are using the recovery key in the pre-boot environment, ensure that the drive is formatted by using the NTFS, FAT16, or FAT32 file system.
 
-### Why am I unable to save my recovery key to my USB flash drive?
+### <a href="" id="bkmk-usbkeynosave"></a>Why am I unable to save my recovery key to my USB flash drive?
 
 The **Save to USB** option is not shown by default for removable drives. If the option is unavailable, it means that a system administrator has disallowed the use of recovery keys.
 
-### Why am I unable to automatically unlock my drive?
+### <a href="" id="bkmk-noautounlock"></a>Why am I unable to automatically unlock my drive?
 
 Automatic unlocking for fixed data drives requires that the operating system drive also be protected by BitLocker. If you are using a computer that does not have a BitLocker-protected operating system drive, the drive cannot be automatically unlocked. For removable data drives, you can add automatic unlocking by right-clicking the drive in Windows Explorer and clicking **Manage BitLocker**. You will still be able to use the password or smart card credentials you supplied when you turned on BitLocker to unlock the removable drive on other computers.
 
-### Can I use BitLocker in Safe Mode?
+### <a href="" id="bkmk-blsafemode"></a>Can I use BitLocker in Safe Mode?
 
 Limited BitLocker functionality is available in Safe Mode. BitLocker-protected drives can be unlocked and decrypted by using the **BitLocker Drive Encryption** Control Panel item. Right-clicking to access BitLocker options from Windows Explorer is not available in Safe Mode.
 
-### How do I "lock" a data drive?
+### <a href="" id="bkmk-lockdata"></a>How do I "lock" a data drive?
 
 Both fixed and removable data drives can be locked by using the Manage-bde command-line tool and the –lock command.
 
@@ -470,11 +470,11 @@ The syntax of this command is:
 
 Outside of using this command, data drives will be locked on shutdown and restart of the operating system. A removable data drive will also be locked automatically when the drive is removed from the computer.
 
-### Can I use BitLocker with the Volume Shadow Copy Service?
+### <a href="" id="bkmk-shadowcopy"></a>Can I use BitLocker with the Volume Shadow Copy Service?
 
 Yes. However, shadow copies made prior to enabling BitLocker will be automatically deleted when BitLocker is enabled on software-encrypted drives. If you are using a hardware encrypted drive, the shadow copies are retained.
 
-### Does BitLocker support virtual hard disks (VHDs)?
+### <a href="" id="bkmk-vhd"></a>Does BitLocker support virtual hard disks (VHDs)?
 
 BitLocker is not supported on bootable VHDs, but BitLocker is supported on data volume VHDs, such as those used by clusters, if you are running Windows 10, Windows 8.1, Windows 8, Windows Server 2012, or Windows Server 2012 R2.
 
diff --git a/windows/keep-secure/bitlocker-group-policy-settings.md b/windows/keep-secure/bitlocker-group-policy-settings.md
index b43b3985be..f7957e0739 100644
--- a/windows/keep-secure/bitlocker-group-policy-settings.md
+++ b/windows/keep-secure/bitlocker-group-policy-settings.md
@@ -30,102 +30,102 @@ Most of the BitLocker Group Policy settings are applied when BitLocker is initia
 
 If multiple changes are necessary to bring the drive into compliance, you must suspend BitLocker protection, make the necessary changes, and then resume protection. This situation could occur, for example, if a removable drive was initially configured to be unlocked with a password and then Group Policy settings are changed to disallow passwords and require smart cards. In this situation, you need to suspend BitLocker protection by using the [Manage-bde](http://technet.microsoft.com/library/ff829849.aspx) command-line tool, delete the password unlock method, and add the smart card method. After this is complete, BitLocker is compliant with the Group Policy setting and BitLocker protection on the drive can be resumed.
 
-## BitLocker Group Policy settings
+## <a href="" id="bkmk-gptop"></a>BitLocker Group Policy settings
 
 
 The following sections provide a comprehensive list of BitLocker Group Policy settings that are organized by usage. BitLocker Group Policy settings include settings for specific drive types (operating system drives, fixed data drives, and removable data drives) and settings that are applied to all drives.
 
 The following policy settings can be used to determine how a BitLocker-protected drive can be unlocked.
 
--   [Allow network unlock at startup](#BKMK_netunlock)
+-   [Allow network unlock at startup](#bkmk-netunlock)
 
--   [Require additional authentication at startup](#BKMK_unlockpol1)
+-   [Require additional authentication at startup](#bkmk-unlockpol1)
 
--   [Allow enhanced PINs for startup](#BKMK_unlockpol2)
+-   [Allow enhanced PINs for startup](#bkmk-unlockpol2)
 
--   [Configure minimum PIN length for startup](#BKMK_unlockpol3)
+-   [Configure minimum PIN length for startup](#bkmk-unlockpol3)
 
--   [Disallow standard users from changing the PIN or password](#BKMK_dpinchange)
+-   [Disallow standard users from changing the PIN or password](#bkmk-dpinchange)
 
--   [Configure use of passwords for operating system drives](#BKMK_ospw)
+-   [Configure use of passwords for operating system drives](#bkmk-ospw)
 
--   [Require additional authentication at startup (Windows Server 2008 and Windows Vista)](#BKMK_unlockpol4)
+-   [Require additional authentication at startup (Windows Server 2008 and Windows Vista)](#bkmk-unlockpol4)
 
--   [Configure use of smart cards on fixed data drives](#BKMK_unlockpol5)
+-   [Configure use of smart cards on fixed data drives](#bkmk-unlockpol5)
 
--   [Configure use of passwords on fixed data drives](#BKMK_unlockpol6)
+-   [Configure use of passwords on fixed data drives](#bkmk-unlockpol6)
 
--   [Configure use of smart cards on removable data drives](#BKMK_unlockpol7)
+-   [Configure use of smart cards on removable data drives](#bkmk-unlockpol7)
 
--   [Configure use of passwords on removable data drives](#BKMK_unlockpol8)
+-   [Configure use of passwords on removable data drives](#bkmk-unlockpol8)
 
--   [Validate smart card certificate usage rule compliance](#BKMK_unlockpol9)
+-   [Validate smart card certificate usage rule compliance](#bkmk-unlockpol9)
 
--   [Enable use of BitLocker authentication requiring preboot keyboard input on slates](#BKMK_slates)
+-   [Enable use of BitLocker authentication requiring preboot keyboard input on slates](#bkmk-slates)
 
 The following policy settings are used to control how users can access drives and how they can use BitLocker on their computers.
 
--   [Deny write access to fixed drives not protected by BitLocker](#BKMK_driveaccess1)
+-   [Deny write access to fixed drives not protected by BitLocker](#bkmk-driveaccess1)
 
--   [Deny write access to removable drives not protected by BitLocker](#BKMK_driveaccess2)
+-   [Deny write access to removable drives not protected by BitLocker](#bkmk-driveaccess2)
 
--   [Control use of BitLocker on removable drives](#BKMK_driveaccess3)
+-   [Control use of BitLocker on removable drives](#bkmk-driveaccess3)
 
 The following policy settings determine the encryption methods and encryption types that are used with BitLocker.
 
--   [Choose drive encryption method and cipher strength](#BKMK_encryptmeth)
+-   [Choose drive encryption method and cipher strength](#bkmk-encryptmeth)
 
--   [Configure use of hardware-based encryption for fixed data drives](#BKMK_hdefxd)
+-   [Configure use of hardware-based encryption for fixed data drives](#bkmk-hdefxd)
 
--   [Configure use of hardware-based encryption for operating system drives](#BKMK_hdeosd)
+-   [Configure use of hardware-based encryption for operating system drives](#bkmk-hdeosd)
 
--   [Configure use of hardware-based encryption for removable data drives](#BKMK_hderdd)
+-   [Configure use of hardware-based encryption for removable data drives](#bkmk-hderdd)
 
--   [Enforce drive encryption type on fixed data drives](#BKMK_detypefdd)
+-   [Enforce drive encryption type on fixed data drives](#bkmk-detypefdd)
 
--   [Enforce drive encryption type on operating system drives](#BKMK_detypeosd)
+-   [Enforce drive encryption type on operating system drives](#bkmk-detypeosd)
 
--   [Enforce drive encryption type on removable data drives](#BKMK_detyperdd)
+-   [Enforce drive encryption type on removable data drives](#bkmk-detyperdd)
 
 The following policy settings define the recovery methods that can be used to restore access to a BitLocker-protected drive if an authentication method fails or is unable to be used.
 
--   [Choose how BitLocker-protected operating system drives can be recovered](#BKMK_rec1)
+-   [Choose how BitLocker-protected operating system drives can be recovered](#bkmk-rec1)
 
--   [Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)](#BKMK_rec2)
+-   [Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)](#bkmk-rec2)
 
--   [Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista)](#BKMK_rec3)
+-   [Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista)](#bkmk-rec3)
 
--   [Choose default folder for recovery password](#BKMK_rec4)
+-   [Choose default folder for recovery password](#bkmk-rec4)
 
--   [Choose how BitLocker-protected fixed drives can be recovered](#BKMK_rec6)
+-   [Choose how BitLocker-protected fixed drives can be recovered](#bkmk-rec6)
 
--   [Choose how BitLocker-protected removable drives can be recovered](#BKMK_rec7)
+-   [Choose how BitLocker-protected removable drives can be recovered](#bkmk-rec7)
 
--   [Configure the pre-boot recovery message and URL](#BKMK_configurepreboot)
+-   [Configure the pre-boot recovery message and URL](#bkmk-configurepreboot)
 
 The following policies are used to support customized deployment scenarios in your organization.
 
--   [Allow Secure Boot for integrity validation](#BKMK_secboot)
+-   [Allow Secure Boot for integrity validation](#bkmk-secboot)
 
--   [Provide the unique identifiers for your organization](#BKMK_depopt1)
+-   [Provide the unique identifiers for your organization](#bkmk-depopt1)
 
--   [Prevent memory overwrite on restart](#BKMK_depopt2)
+-   [Prevent memory overwrite on restart](#bkmk-depopt2)
 
--   [Configure TPM platform validation profile for BIOS-based firmware configurations](#BKMK_tpmbios)
+-   [Configure TPM platform validation profile for BIOS-based firmware configurations](#bkmk-tpmbios)
 
--   [Configure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)](#BKMK_depopt3)
+-   [Configure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)](#bkmk-depopt3)
 
--   [Configure TPM platform validation profile for native UEFI firmware configurations](#BKMK_tpmvaluefi)
+-   [Configure TPM platform validation profile for native UEFI firmware configurations](#bkmk-tpmvaluefi)
 
--   [Reset platform validation data after BitLocker recovery](#BKMK_resetrec)
+-   [Reset platform validation data after BitLocker recovery](#bkmk-resetrec)
 
--   [Use enhanced Boot Configuration Data validation profile](#BKMK_enbcd)
+-   [Use enhanced Boot Configuration Data validation profile](#bkmk-enbcd)
 
--   [Allow access to BitLocker-protected fixed data drives from earlier versions of Windows](#BKMK_depopt4)
+-   [Allow access to BitLocker-protected fixed data drives from earlier versions of Windows](#bkmk-depopt4)
 
--   [Allow access to BitLocker-protected removable data drives from earlier versions of Windows](#BKMK_depopt5)
+-   [Allow access to BitLocker-protected removable data drives from earlier versions of Windows](#bkmk-depopt5)
 
-### Allow network unlock at startup
+### <a href="" id="bkmk-netunlock"></a>Allow network unlock at startup
 
 This policy controls a portion of the behavior of the Network Unlock feature in BitLocker. This policy is required to enable BitLocker Network Unlock on a network because it allows clients running BitLocker to create the necessary network key protector during encryption. This policy is used in addition to the BitLocker Drive Encryption Network Unlock Certificate security policy (located in the **Public Key Policies** folder of Local Computer Policy) to allow systems that are connected to a trusted network to properly utilize the Network Unlock feature.
 
@@ -179,7 +179,7 @@ For reliability and security, computers should also have a TPM startup PIN that
 
 For more information about Network Unlock, see [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md).
 
-### Require additional authentication at startup
+### <a href="" id="bkmk-unlockpol1"></a>Require additional authentication at startup
 
 This policy setting is used to control which unlock options are available for operating system drives.
 
@@ -272,7 +272,7 @@ There are four options for TPM-enabled computers or devices:
 
     -   Do not allow TPM startup key with PIN
 
-### Allow enhanced PINs for startup
+### <a href="" id="bkmk-unlockpol2"></a>Allow enhanced PINs for startup
 
 This policy setting permits the use of enhanced PINs when you use an unlock method that includes a PIN.
 
@@ -324,7 +324,7 @@ Not all computers support enhanced PIN characters in the preboot environment. It
 
  
 
-### Configure minimum PIN length for startup
+### <a href="" id="bkmk-unlockpol3"></a>Configure minimum PIN length for startup
 
 This policy setting is used to set a minimum PIN length when you use an unlock method that includes a PIN.
 
@@ -371,7 +371,7 @@ This policy setting is used to set a minimum PIN length when you use an unlock m
 
 This policy setting is applied when you turn on BitLocker. The startup PIN must have a minimum length of 4 digits and can have a maximum length of 20 digits.
 
-### Disallow standard users from changing the PIN or password
+### <a href="" id="bkmk-dpinchange"></a>Disallow standard users from changing the PIN or password
 
 This policy setting allows you to configure whether standard users are allowed to change the PIN or password that is used to protect the operating system drive.
 
@@ -418,7 +418,7 @@ This policy setting allows you to configure whether standard users are allowed t
 
 To change the PIN or password, the user must be able to provide the current PIN or password. This policy setting is applied when you turn on BitLocker.
 
-### Configure use of passwords for operating system drives
+### <a href="" id="bkmk-ospw"></a>Configure use of passwords for operating system drives
 
 This policy controls how non-TPM based systems utilize the password protector. Used in conjunction with the **Password must meet complexity requirements** policy, this policy allows administrators to require password length and complexity for using the password protector. By default, passwords must be eight characters in length. Complexity configuration options determine how important domain connectivity is for the client. For the strongest password security, administrators should choose **Require password complexity** because it requires domain connectivity, and it requires that the BitLocker password meets the same password complexity requirements as domain sign-in passwords.
 
@@ -489,7 +489,7 @@ When this policy setting is enabled, you can set the option **Configure password
 
 -   Require password complexity
 
-### Require additional authentication at startup (Windows Server 2008 and Windows Vista)
+### <a href="" id="bkmk-unlockpol4"></a>Require additional authentication at startup (Windows Server 2008 and Windows Vista)
 
 This policy setting is used to control what unlock options are available for computers running Windows Server 2008 or Windows Vista.
 
@@ -560,7 +560,7 @@ These options are mutually exclusive. If you require the startup key, you must n
 
 To hide the advanced page on a TPM-enabled computer or device, set these options to **Do not allow** for the startup key and for the startup PIN.
 
-### Configure use of smart cards on fixed data drives
+### <a href="" id="bkmk-unlockpol5"></a>Configure use of smart cards on fixed data drives
 
 This policy setting is used to require, allow, or deny the use of smart cards with fixed data drives.
 
@@ -614,7 +614,7 @@ These settings are enforced when turning on BitLocker, not when unlocking a driv
 
  
 
-### Configure use of passwords on fixed data drives
+### <a href="" id="bkmk-unlockpol6"></a>Configure use of passwords on fixed data drives
 
 This policy setting is used to require, allow, or deny the use of passwords with fixed data drives.
 
@@ -687,7 +687,7 @@ Passwords cannot be used if FIPS compliance is enabled. The **System cryptograph
 
  
 
-### Configure use of smart cards on removable data drives
+### <a href="" id="bkmk-unlockpol7"></a>Configure use of smart cards on removable data drives
 
 This policy setting is used to require, allow, or deny the use of smart cards with removable data drives.
 
@@ -741,7 +741,7 @@ These settings are enforced when turning on BitLocker, not when unlocking a driv
 
  
 
-### Configure use of passwords on removable data drives
+### <a href="" id="bkmk-unlockpol8"></a>Configure use of passwords on removable data drives
 
 This policy setting is used to require, allow, or deny the use of passwords with removable data drives.
 
@@ -812,7 +812,7 @@ Passwords cannot be used if FIPS compliance is enabled. The **System cryptograph
 
 For information about this setting, see [System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing](http://technet.microsoft.com/library/jj852211.aspx).
 
-### Validate smart card certificate usage rule compliance
+### <a href="" id="bkmk-unlockpol9"></a>Validate smart card certificate usage rule compliance
 
 This policy setting is used to determine what certificate to use with BitLocker.
 
@@ -868,7 +868,7 @@ BitLocker does not require that a certificate have an EKU attribute; however, if
 
  
 
-### Enable use of BitLocker authentication requiring preboot keyboard input on slates
+### <a href="" id="bkmk-slates"></a>Enable use of BitLocker authentication requiring preboot keyboard input on slates
 
 This policy setting allows users to enable authentication options that require user input from the preboot environment even if the platform indicates a lack of preboot input capability.
 
@@ -927,7 +927,7 @@ If you do not enable this policy setting, the following options in the **Require
 
 -   Configure use of passwords for operating system drives
 
-### Deny write access to fixed drives not protected by BitLocker
+### <a href="" id="bkmk-driveaccess1"></a>Deny write access to fixed drives not protected by BitLocker
 
 This policy setting is used to require encryption of fixed drives prior to granting Write access.
 
@@ -988,7 +988,7 @@ Conflict considerations include:
 
 3.  If this policy setting is enforced, a hard drive cannot be repartitioned because the drive is protected. If you are upgrading computers in your organization from a previous version of Windows, and those computers were configured with a single partition, you should create the required BitLocker system partition before you apply this policy setting to the computers.
 
-### Deny write access to removable drives not protected by BitLocker
+### <a href="" id="bkmk-driveaccess2"></a>Deny write access to removable drives not protected by BitLocker
 
 This policy setting is used to require that removable drives are encrypted prior to granting Write access, and to control whether BitLocker-protected removable drives that were configured in another organization can be opened with Write access.
 
@@ -1048,7 +1048,7 @@ Conflict considerations include:
 
 3.  You must enable the **Provide the unique identifiers for your organization** policy setting if you want to deny Write access to drives that were configured in another organization.
 
-### Control use of BitLocker on removable drives
+### <a href="" id="bkmk-driveaccess3"></a>Control use of BitLocker on removable drives
 
 This policy setting is used to prevent users from turning BitLocker on or off on removable data drives.
 
@@ -1107,7 +1107,7 @@ The options for choosing property settings that control how users can configure
 
 -   **Allow users to suspend and decrypt BitLocker on removable data drives**   Enables the user to remove BitLocker from the drive or to suspend the encryption while performing maintenance.
 
-### Choose drive encryption method and cipher strength
+### <a href="" id="bkmk-encryptmeth"></a>Choose drive encryption method and cipher strength
 
 This policy setting is used to control the encryption method and cipher strength.
 
@@ -1163,7 +1163,7 @@ This policy does not apply to encrypted drives. Encrypted drives utilize their o
 
 When this policy setting is disabled, BitLocker uses AES with the same bit strength (128-bit or 256-bit) as specified in the policy setting **Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7)**. If neither policy is set, BitLocker uses the default encryption method, AES-128, or the encryption method that is specified in the setup script.
 
-### Configure use of hardware-based encryption for fixed data drives
+### <a href="" id="bkmk-hdefxd"></a>Configure use of hardware-based encryption for fixed data drives
 
 This policy controls how BitLocker reacts to systems that are equipped with encrypted drives when they are used as fixed data volumes. Using hardware-based encryption can improve the performance of drive operations that involve frequent reading or writing of data to the drive.
 
@@ -1223,7 +1223,7 @@ The encryption algorithm that is used by hardware-based encryption is set when t
 
 -   AES 256 in CBC mode OID: 2.16.840.1.101.3.4.1.42
 
-### Configure use of hardware-based encryption for operating system drives
+### <a href="" id="bkmk-hdeosd"></a>Configure use of hardware-based encryption for operating system drives
 
 This policy controls how BitLocker reacts when encrypted drives are used as operating system drives. Using hardware-based encryption can improve the performance of drive operations that involve frequent reading or writing of data to the drive.
 
@@ -1285,7 +1285,7 @@ The encryption algorithm that is used by hardware-based encryption is set when t
 
 -   AES 256 in CBC mode OID: 2.16.840.1.101.3.4.1.42
 
-### Configure use of hardware-based encryption for removable data drives
+### <a href="" id="bkmk-hderdd"></a>Configure use of hardware-based encryption for removable data drives
 
 This policy controls how BitLocker reacts to encrypted drives when they are used as removable data drives. Using hardware-based encryption can improve the performance of drive operations that involve frequent reading or writing of data to the drive.
 
@@ -1347,7 +1347,7 @@ The encryption algorithm that is used by hardware-based encryption is set when t
 
 -   AES 256 in CBC mode OID: 2.16.840.1.101.3.4.1.42
 
-### Enforce drive encryption type on fixed data drives
+### <a href="" id="bkmk-detypefdd"></a>Enforce drive encryption type on fixed data drives
 
 This policy controls whether fixed data drives utilize Used Space Only encryption or Full encryption. Setting this policy also causes the BitLocker Setup Wizard to skip the encryption options page so no encryption selection displays to the user.
 
@@ -1401,7 +1401,7 @@ This policy is ignored when you are shrinking or expanding a volume and the BitL
 
 For more information about the tool to manage BitLocker, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx).
 
-### Enforce drive encryption type on operating system drives
+### <a href="" id="bkmk-detypeosd"></a>Enforce drive encryption type on operating system drives
 
 This policy controls whether operating system drives utilize Full encryption or Used Space Only encryption. Setting this policy also causes the BitLocker Setup Wizard to skip the encryption options page, so no encryption selection displays to the user.
 
@@ -1455,7 +1455,7 @@ This policy is ignored when shrinking or expanding a volume, and the BitLocker d
 
 For more information about the tool to manage BitLocker, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx).
 
-### Enforce drive encryption type on removable data drives
+### <a href="" id="bkmk-detyperdd"></a>Enforce drive encryption type on removable data drives
 
 This policy controls whether fixed data drives utilize Full encryption or Used Space Only encryption. Setting this policy also causes the BitLocker Setup Wizard to skip the encryption options page, so no encryption selection displays to the user.
 
@@ -1509,7 +1509,7 @@ This policy is ignored when shrinking or expanding a volume, and the BitLocker d
 
 For more information about the tool to manage BitLocker, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx).
 
-### Choose how BitLocker-protected operating system drives can be recovered
+### <a href="" id="bkmk-rec1"></a>Choose how BitLocker-protected operating system drives can be recovered
 
 This policy setting is used to configure recovery methods for operating system drives.
 
@@ -1574,7 +1574,7 @@ If the **Do not enable BitLocker until recovery information is stored in AD DS
 
  
 
-### Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)
+### <a href="" id="bkmk-rec2"></a>Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)
 
 This policy setting is used to configure recovery methods for BitLocker-protected drives on computers running Windows Server 2008 or Windows Vista.
 
@@ -1637,7 +1637,7 @@ To prevent data loss, you must have a way to recover BitLocker encryption keys.
 
  
 
-### Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista)
+### <a href="" id="bkmk-rec3"></a>Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista)
 
 This policy setting is used to configure the storage of BitLocker recovery information in AD DS. This provides an administrative method of recovering data that is encrypted by BitLocker to prevent data loss due to lack of key information.
 
@@ -1700,7 +1700,7 @@ For more information about this setting, see [TPM Group Policy settings](trusted
 
 If you are using domain controllers running Windows Server 2003 with Service Pack 1, you must first set up appropriate schema extensions and access control settings on the domain before a backup to AD DS can succeed. For more info, see [Backup the TPM recovery Information to AD DS](backup-thetpm-recovery-information-to-ad-ds.md).
 
-### Choose default folder for recovery password
+### <a href="" id="bkmk-rec4"></a>Choose default folder for recovery password
 
 This policy setting is used to configure the default folder for recovery passwords.
 
@@ -1752,7 +1752,7 @@ This policy setting does not prevent the user from saving the recovery password
 
  
 
-### Choose how BitLocker-protected fixed drives can be recovered
+### <a href="" id="bkmk-rec6"></a>Choose how BitLocker-protected fixed drives can be recovered
 
 This policy setting is used to configure recovery methods for fixed data drives.
 
@@ -1808,7 +1808,7 @@ Select **Omit recovery options from the BitLocker setup wizard** to prevent user
 
 In **Save BitLocker recovery information to Active Directory Doman Services**, choose which BitLocker recovery information to store in AD DS for fixed data drives. If you select **Backup recovery password and key package**, the BitLocker recovery password and the key package are stored in AD DS. Storing the key package supports recovering data from a drive that has been physically corrupted. To recover this data, you can use the **Repair-bde** command-line tool. If you select **Backup recovery password only**, only the recovery password is stored in AD DS.
 
-For more information about the BitLocker repair tool, see [Repair-bde](534dca1a-05f7-4ea8-ac24-4fe5f14f988a).
+For more information about the BitLocker repair tool, see [Repair-bde](http://technet.microsoft.com/library/ff829851.aspx).
 
 Select the **Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives** check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds.
 
@@ -1817,7 +1817,7 @@ If the **Do not enable BitLocker until recovery information is stored in AD DS
 
  
 
-### Choose how BitLocker-protected removable drives can be recovered
+### <a href="" id="bkmk-rec7"></a>Choose how BitLocker-protected removable drives can be recovered
 
 This policy setting is used to configure recovery methods for removable data drives.
 
@@ -1880,7 +1880,7 @@ If the **Do not enable BitLocker until recovery information is stored in AD DS
 
  
 
-### Configure the pre-boot recovery message and URL
+### <a href="" id="bkmk-configurepreboot"></a>Configure the pre-boot recovery message and URL
 
 This policy setting is used to configure the entire recovery message and to replace the existing URL that is displayed on the pre-boot recovery screen when the operating system drive is locked.
 
@@ -1945,7 +1945,7 @@ Because you can alter the BCDEdit commands manually before you have set Group Po
 
  
 
-### Allow Secure Boot for integrity validation
+### <a href="" id="bkmk-secboot"></a>Allow Secure Boot for integrity validation
 
 This policy controls how BitLocker-enabled system volumes are handled in conjunction with the Secure Boot feature. Enabling this feature forces Secure Boot validation during the boot process and verifies Boot Configuration Data (BCD) settings according to the Secure Boot policy.
 
@@ -1974,7 +1974,7 @@ This policy controls how BitLocker-enabled system volumes are handled in conjunc
 <tr class="odd">
 <td align="left"><p><strong>Conflicts</strong></p></td>
 <td align="left"><p>If the <strong>Configure TPM platform validation profile for native UEFI firmware configurations</strong> Group Policy setting is enabled and PCR 7 is omitted, BitLocker is prevented from using Secure Boot for platform or BCD integrity validation.</p>
-<p>For more information about PCR 7, see [Platform Configuration Register (PCR)](#BKMK_PCR) in this topic.</p></td>
+<p>For more information about PCR 7, see [Platform Configuration Register (PCR)](#bkmk-pcr) in this topic.</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p><strong>When enabled or not configured</strong></p></td>
@@ -2000,7 +2000,7 @@ Enabling this policy might result in BitLocker recovery when manufacturer-specif
 
  
 
-### Provide the unique identifiers for your organization
+### <a href="" id="bkmk-depopt1"></a>Provide the unique identifiers for your organization
 
 This policy setting is used to establish an identifier that is applied to all drives that are encrypted in your organization.
 
@@ -2059,7 +2059,7 @@ When a BitLocker-protected drive is mounted on another BitLocker-enabled compute
 
 Multiple values separated by commas can be entered in the identification and allowed identification fields. The identification field can be any value up to 260 characters.
 
-### Prevent memory overwrite on restart
+### <a href="" id="bkmk-depopt2"></a>Prevent memory overwrite on restart
 
 This policy setting is used to control whether the computer's memory will be overwritten the next time the computer is restarted.
 
@@ -2106,7 +2106,7 @@ This policy setting is used to control whether the computer's memory will be ove
 
 This policy setting is applied when you turn on BitLocker. BitLocker secrets include key material that is used to encrypt data. This policy setting applies only when BitLocker protection is enabled.
 
-### Configure TPM platform validation profile for BIOS-based firmware configurations
+### <a href="" id="bkmk-tpmbios"></a>Configure TPM platform validation profile for BIOS-based firmware configurations
 
 This policy setting determines what values the TPM measures when it validates early boot components before it unlocks an operating system drive on a computer with a BIOS configuration or with UEFI firmware that has the Compatibility Support Module (CSM) enabled.
 
@@ -2207,7 +2207,7 @@ The following list identifies all of the PCRs available:
 
 -   PCR 12-23: Reserved for future use
 
-### Configure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)
+### <a href="" id="bkmk-depopt3"></a>Configure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)
 
 This policy setting determines what values the TPM measures when it validates early boot components before unlocking a drive on a computer running Windows Vista, Windows Server 2008, or Windows 7.
 
@@ -2308,7 +2308,7 @@ Changing from the default platform validation profile affects the security and m
 
  
 
-### Configure TPM platform validation profile for native UEFI firmware configurations
+### <a href="" id="bkmk-tpmvaluefi"></a>Configure TPM platform validation profile for native UEFI firmware configurations
 
 This policy setting determines what values the TPM measures when it validates early boot components before unlocking an operating system drive on a computer with native UEFI firmware configurations.
 
@@ -2338,7 +2338,7 @@ This policy setting determines what values the TPM measures when it validates ea
 <td align="left"><p><strong>Conflicts</strong></p></td>
 <td align="left"><p>Setting this policy with PCR 7 omitted, overrides the <strong>Allow Secure Boot for integrity validation</strong> Group Policy setting, and it prevents BitLocker from using Secure Boot for platform or Boot Configuration Data (BCD) integrity validation.</p>
 <p>If your environments use TPM and Secure Boot for platform integrity checks, this policy should not be configured.</p>
-<p>For more information about PCR 7, see [Platform Configuration Register (PCR)](#BKMK_PCR) in this topic.</p></td>
+<p>For more information about PCR 7, see [Platform Configuration Register (PCR)](#bkmk-pcr) in this topic.</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p><strong>When enabled</strong></p></td>
@@ -2382,7 +2382,7 @@ The following list identifies all of the PCRs available:
 
 -   PCR 7: Secure Boot State
 
-    For more information about this PCR, see [Platform Configuration Register (PCR)](#BKMK_PCR) in this topic.
+    For more information about this PCR, see [Platform Configuration Register (PCR)](#bkmk-pcr) in this topic.
 
 -   PCR 8: Initialized to 0 with no Extends (reserved for future use)
 
@@ -2405,7 +2405,7 @@ Changing from the default platform validation profile affects the security and m
 
  
 
-### Reset platform validation data after BitLocker recovery
+### <a href="" id="bkmk-resetrec"></a>Reset platform validation data after BitLocker recovery
 
 This policy setting determines if you want platform validation data to refresh when Windows is started following a BitLocker recovery. A platform validation data profile consists of the values in a set of Platform Configuration Register (PCR) indices that range from 0 to 23.
 
@@ -2456,7 +2456,7 @@ This policy setting determines if you want platform validation data to refresh w
 
 For more information about the recovery process, see the [BitLocker recovery guide](bitlocker-recovery-guide-plan.md).
 
-### Use enhanced Boot Configuration Data validation profile
+### <a href="" id="bkmk-enbcd"></a>Use enhanced Boot Configuration Data validation profile
 
 This policy setting determines specific Boot Configuration Data (BCD) settings to verify during platform validation. A platform validation uses the data in the platform validation profile, which consists of a set of Platform Configuration Register (PCR) indices that range from 0 to 23.
 
@@ -2510,7 +2510,7 @@ The setting that controls boot debugging (0x16000010) is always validated, and i
 
  
 
-### Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
+### <a href="" id="bkmk-depopt4"></a>Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
 
 This policy setting is used to control whether access to drives is allowed by using the BitLocker To Go Reader, and if the application is installed on the drive.
 
@@ -2562,7 +2562,7 @@ This policy setting does not apply to drives that are formatted with the NTFS fi
 
 When this policy setting is enabled, select the **Do not install BitLocker To Go Reader on FAT formatted fixed drives** check box to help prevent users from running BitLocker To Go Reader from their fixed drives. If BitLocker To Go Reader (bitlockertogo.exe) is present on a drive that does not have an identification field specified, or if the drive has the same identification field as specified in the **Provide unique identifiers for your organization** policy setting, the user is prompted to update BitLocker, and BitLocker To Go Reader is deleted from the drive. In this situation, for the fixed drive to be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2, BitLocker To Go Reader must be installed on the computer. If this check box is not selected, BitLocker To Go Reader will be installed on the fixed drive to enable users to unlock the drive on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2.
 
-### Allow access to BitLocker-protected removable data drives from earlier versions of Windows
+### <a href="" id="bkmk-depopt5"></a>Allow access to BitLocker-protected removable data drives from earlier versions of Windows
 
 This policy setting controls access to removable data drives that are using the BitLocker To Go Reader and whether the BitLocker To Go Reader can be installed on the drive.
 
@@ -2681,7 +2681,7 @@ You can use disable the following Group Policy settings, which are located in **
 
 -   Allow Standby States (S1-S3) When Sleeping (Battery)
 
-## About the Platform Configuration Register (PCR)
+## <a href="" id="bkmk-pcr"></a>About the Platform Configuration Register (PCR)
 
 
 A platform validation profile consists of a set of PCR indices that range from 0 to 23. The scope of the values can be specific to the version of the operating system.
diff --git a/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server-2012.md b/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server-2012.md
index 93c25efc21..cb131c18d0 100644
--- a/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server-2012.md
+++ b/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server-2012.md
@@ -19,7 +19,7 @@ This topic for the IT professional explains how to deploy BitLocker and Windows
 
 For all Windows Server editions, BitLocker must be installed using Server Manager. However, you can still provision BitLocker before the server operating system is installed as part of your deployment.
 
-## Installing BitLocker
+## <a href="" id="installing-bitlocker-"></a>Installing BitLocker
 
 
 BitLocker requires administrator privileges on the server to install. You can install BitLocker either by using Server Manager or Windows PowerShell cmdlets.
@@ -28,7 +28,7 @@ BitLocker requires administrator privileges on the server to install. You can in
 
 -   To install BitLocker using Windows PowerShell
 
-### To install BitLocker using Server Manager
+### <a href="" id="bkmk-blinstallsrvmgr"></a>To install BitLocker using Server Manager
 
 1.  Open Server Manager by selecting the Server Manager icon or running servermanager.exe.
 
@@ -53,7 +53,7 @@ BitLocker requires administrator privileges on the server to install. You can in
 
 9.  If the **Restart the destination server automatically if required** check box is not selected, the **Results pane** of the **Add Roles and Features Wizard** will display the success or failure of the BitLocker feature installation. If required, a notification of additional action necessary to complete the feature installation, such as the restart of the computer, will be displayed in the results text.
 
-### To install BitLocker using Windows PowerShell
+### <a href="" id="bkmk-blinstallwps"></a>To install BitLocker using Windows PowerShell
 
 Windows PowerShell offers administrators another option for BitLocker feature installation. Windows PowerShell installs features using the `servermanager` or `dism` module; however, the `servermanager` and `dism` modules do not always share feature name parity. Because of this, it is advisable to confirm the feature or role name prior to installation.
 
diff --git a/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md b/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md
index a4e88ed7b3..474590f953 100644
--- a/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md
+++ b/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md
@@ -25,23 +25,23 @@ Network Unlock allows BitLocker-enabled systems with TPM+PIN and that meet the h
 
 This topic contains:
 
--   [Network Unlock core requirements](#BKMK_NUnlockCoreReqs)
+-   [Network Unlock core requirements](#bkmk-nunlockcorereqs)
 
--   [Network Unlock sequence](#BKMK_NetworkUnLockSeq)
+-   [Network Unlock sequence](#bkmk-networkunlockseq)
 
--   [Configure Network Unlock](#BKMK_ConfiguringNetworkUnlock)
+-   [Configure Network Unlock](#bkmk-configuringnetworkunlock)
 
--   [Create the certificate template for Network Unlock](#BKMK_CreateCertTmpl)
+-   [Create the certificate template for Network Unlock](#bkmk-createcerttmpl)
 
--   [Turning off Network Unlock](#BKMK_TurnOffNetworkUnlock)
+-   [Turning off Network Unlock](#bkmk-turnoffnetworkunlock)
 
--   [Update Network Unlock certificates](#BKMK_UpdateCerts)
+-   [Update Network Unlock certificates](#bkmk-updatecerts)
 
--   [Troubleshoot Network Unlock](#BKMK_Troubleshoot)
+-   [Troubleshoot Network Unlock](#bkmk-troubleshoot)
 
--   [Configure Network Unlock on unsupported systems](#BKMK_UnsupportedSystems)
+-   [Configure Network Unlock on unsupported systems](#bkmk-unsupportedsystems)
 
-## Network Unlock core requirements
+## <a href="" id="bkmk-nunlockcorereqs"></a>Network Unlock core requirements
 
 
 Network Unlock must meet mandatory hardware and software requirements before the feature can automatically unlock domain joined systems. These requirements include:
@@ -75,7 +75,7 @@ Network Unlock requires Windows Deployment Services (WDS) in the environment whe
 
 The network key is stored on the system drive along with an AES 256 session key, and encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server running WDS, and returned encrypted with its corresponding session key.
 
-## Network Unlock sequence
+## <a href="" id="bkmk-networkunlockseq"></a>Network Unlock sequence
 
 
 The unlock sequence starts on the client side, when the Windows boot manager detects the existence of Network Unlock protector. It leverages the DHCP driver in UEFI to obtain an IP address for IPv4 and then broadcasts a vendor-specific DHCP request that contains the network key and a session key for the reply, all encrypted by the server's Network Unlock certificate, as described above. The Network Unlock provider on the supported WDS server recognizes the vendor-specific request, decrypts it with the RSA private key, and returns the network key encrypted with the session key via its own vendor-specific DHCP reply.
@@ -106,12 +106,12 @@ The server side configuration to enable Network Unlock also requires provisionin
 
 9.  Windows continues the boot sequence.
 
-## Configure Network Unlock
+## <a href="" id="bkmk-configuringnetworkunlock"></a>Configure Network Unlock
 
 
 The following steps allow an administrator to configure Network Unlock in a domain where the Domain Functional Level is at least Windows Server 2012.
 
-### Step One: Install the WDS Server role
+### <a href="" id="bkmk-stepone"></a>Step One: Install the WDS Server role
 
 The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows PowerShell. To install the role using Server Manager, select the **Windows Deployment Services** role in Server Manager.
 
@@ -123,7 +123,7 @@ Install-WindowsFeature WDS-Deployment
 
 You must configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Doman Services) and the client computer. You can do using the WDS management tool, wdsmgmt.msc, which starts the Windows Deployment Services Configuration Wizard.
 
-### Step Two: Confirm the WDS Service is running
+### <a href="" id="bkmk-steptwo"></a>Step Two: Confirm the WDS Service is running
 
 To confirm the WDS service is running, use the Services Management Console or Windows PowerShell. To confirm the service is running in Services Management Console, open the console using **services.msc** and check the status of the Windows Deployment Services service.
 
@@ -133,7 +133,7 @@ To confirm the service is running using Windows PowerShell, use the following co
 Get-Service WDSServer
 ```
 
-### Step Three: Install the Network Unlock feature
+### <a href="" id="bkmk-stepthree"></a>Step Three: Install the Network Unlock feature
 
 To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature using Server Manager, select the **BitLocker Network Unlock** feature in the Server Manager console.
 
@@ -143,7 +143,7 @@ To install the feature using Windows PowerShell, use the following command:
 Install-WindowsFeature BitLocker-NetworkUnlock
 ```
 
-### Step Four: Create the Network Unlock certificate
+### <a href="" id="bkmk-stepfour"></a>Step Four: Create the Network Unlock certificate
 
 Network Unlock can use imported certificates from an existing PKI infrastructure, or you can use a self-signed certificate.
 
@@ -218,7 +218,7 @@ To create a self-signed certificate, do the following:
 
 6.  Create a .pfx file by opening the **Certificates – Current User\\Personal\\Certificates** path in the navigation pane, right-clicking the previously imported certificate, selecting **All Tasks**, then **Export**. Follow through the wizard to create the .pfx file.
 
-### Step Five: Deploy the private key and certificate to the WDS server
+### <a href="" id="bkmk-stepfive"></a>Step Five: Deploy the private key and certificate to the WDS server
 
 With the certificate and key created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates, do the following:
 
@@ -268,7 +268,7 @@ Only one network unlock certificate can be available at a time. If a new certifi
 
  
 
-### Step Seven: Require TPM+PIN protectors at startup
+### <a href="" id="bkmk-stepseven"></a>Step Seven: Require TPM+PIN protectors at startup
 
 An additional step is for enterprises to use TPM+PIN protectors for an extra level of security. To require TPM+PIN protectors in an environment, do the following:
 
@@ -278,7 +278,7 @@ An additional step is for enterprises to use TPM+PIN protectors for an extra lev
 
 3.  Turn on BitLocker with TPM+PIN protectors on all domain-joined computers
 
-### Create the certificate template for Network Unlock
+### <a href="" id="bkmk-createcerttmpl"></a>Create the certificate template for Network Unlock
 
 The following steps detail how to create a certificate template for use with BitLocker Network Unlock. A properly configured Active Directory Services Certification Authority can use this certificate to create and issue Network Unlock certificates.
 
@@ -362,7 +362,7 @@ SUBNET3
 
 To disallow the use of a certificate altogether, its subnet list may contain the line “DISABLED".
 
-### Turning off Network Unlock
+### <a href="" id="bkmk-turnoffnetworkunlock"></a>Turning off Network Unlock
 
 To turn off the unlock server, the PXE provider can be unregistered from the WDS server or uninstalled altogether. However, to stop clients from creating Network Unlock protectors the **Allow Network Unlock at startup** Group Policy setting should be disabled. When this policy setting is updated to disabled on client computers any Network Unlock key protectors on the computer will be deleted. Alternatively, the BitLocker Network Unlock certificate policy can be deleted on the domain controller to accomplish the same task for an entire domain.
 
@@ -371,11 +371,11 @@ Removing the FVENKP certificate store that contains the Network Unlock certifica
 
  
 
-### Update Network Unlock certificates
+### <a href="" id="bkmk-updatecerts"></a>Update Network Unlock certificates
 
 To update the certificates used by Network Unlock, administrators need to import or generate the new certificate for the server and then update the Network Unlock certificate Group Policy setting on the domain controller.
 
-## Troubleshoot Network Unlock
+## <a href="" id="bkmk-troubleshoot"></a>Troubleshoot Network Unlock
 
 
 Troubleshooting Network Unlock issues begins by verifying the environment. Many times, a small configuration issue will be the root cause of the failure. Items to verify include:
@@ -425,7 +425,7 @@ Files to gather when troubleshooting BitLocker Network Unlock include:
 
 4.  Network Monitor capture on the server hosting the WDS role, filtered by client IP address
 
-## Configure Network Unlock Group Policy settings on earlier versions
+## <a href="" id="bkmk-unsupportedsystems"></a>Configure Network Unlock Group Policy settings on earlier versions
 
 
 Network Unlock and the accompanying Group Policy settings were introduced in Windows Server 2012 but can be deployed using operating systems running Windows Server 2008 R2 and Windows Server 2008.
@@ -438,15 +438,15 @@ Network Unlock and the accompanying Group Policy settings were introduced in Win
 
 The following steps can be used to configure Network Unlock on these older systems.
 
-1.  [Step One: Install the WDS Server role](#BKMK_StepOne)
+1.  [Step One: Install the WDS Server role](#bkmk-stepone)
 
-2.  [Step Two: Confirm the WDS Service is running](#BKMK_StepTwo)
+2.  [Step Two: Confirm the WDS Service is running](#bkmk-steptwo)
 
-3.  [Step Three: Install the Network Unlock feature](#BKMK_StepThree)
+3.  [Step Three: Install the Network Unlock feature](#bkmk-stepthree)
 
-4.  [Step Four: Create the Network Unlock certificate](#BKMK_StepFour)
+4.  [Step Four: Create the Network Unlock certificate](#bkmk-stepfour)
 
-5.  [Step Five: Deploy the private key and certificate to the WDS server](#BKMK_StepFive)
+5.  [Step Five: Deploy the private key and certificate to the WDS server](#bkmk-stepfive)
 
 6.  **Step Six: Configure registry settings for Network Unlock**
 
@@ -464,13 +464,13 @@ The following steps can be used to configure Network Unlock on these older syste
     reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKeyPIN /t REG_DWORD /d 2 /f
     ```
 
-7.  [Create the Network Unlock certificate](#BKMK_StepFour)
+7.  [Create the Network Unlock certificate](#bkmk-stepfour)
 
-8.  [Deploy the private key and certificate to the WDS server](#BKMK_StepFive)
+8.  [Deploy the private key and certificate to the WDS server](#bkmk-stepfive)
 
-9.  [Create the certificate template for Network Unlock](#BKMK_CreateCertTmpl)
+9.  [Create the certificate template for Network Unlock](#bkmk-createcerttmpl)
 
-10. [Require TPM+PIN protectors at startup](#BKMK_StepSeven)
+10. [Require TPM+PIN protectors at startup](#bkmk-stepseven)
 
 ## See also
 
diff --git a/windows/keep-secure/bitlocker-overview-roletech-overview.md b/windows/keep-secure/bitlocker-overview-roletech-overview.md
index 8a317f3e7e..7f2991b171 100644
--- a/windows/keep-secure/bitlocker-overview-roletech-overview.md
+++ b/windows/keep-secure/bitlocker-overview-roletech-overview.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 This topic provides a high-level overview of BitLocker, including a list of system requirements, practical applications, and deprecated features.
 
-## 
+## <a href="" id="bkmk-over"></a>
 
 
 BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers.
@@ -28,7 +28,7 @@ On computers that do not have a TPM version 1.2 or later, you can still use BitL
 
 In addition to the TPM, BitLocker offers the option to lock the normal startup process until the user supplies a personal identification number (PIN) or inserts a removable device, such as a USB flash drive, that contains a startup key. These additional security measures provide multifactor authentication and assurance that the computer will not start or resume from hibernation until the correct PIN or startup key is presented.
 
-## Practical applications
+## <a href="" id="bkmk-app"></a>Practical applications
 
 
 Data on a lost or stolen computer is vulnerable to unauthorized access, either by running a software-attack tool against it or by transferring the computer's hard disk to a different computer. BitLocker helps mitigate unauthorized data access by enhancing file and system protections. BitLocker also helps render data inaccessible when BitLocker-protected computers are decommissioned or recycled.
@@ -41,7 +41,7 @@ There are two additional tools in the Remote Server Administration Tools, which
 
 -   **BitLocker Drive Encryption Tools**. BitLocker Drive Encryption Tools include the command-line tools, manage-bde and repair-bde, and the BitLocker cmdlets for Windows PowerShell. Both manage-bde and the BitLocker cmdlets can be used to perform any task that can be accomplished through the BitLocker control panel, and they are appropriate to use for automated deployments and other scripting scenarios. Repair-bde is provided for disaster recovery scenarios in which a BitLocker protected drive cannot be unlocked normally or by using the recovery console.
 
-## New and changed functionality
+## <a href="" id="bkmk-new"></a>New and changed functionality
 
 
 To find out what's new in BitLocker for Windows 10, see [What's new in BitLocker?](../whats-new/bitlocker.md)
diff --git a/windows/keep-secure/bitlocker-recovery-guide-plan.md b/windows/keep-secure/bitlocker-recovery-guide-plan.md
index 6d03bf066c..cbea802779 100644
--- a/windows/keep-secure/bitlocker-recovery-guide-plan.md
+++ b/windows/keep-secure/bitlocker-recovery-guide-plan.md
@@ -25,19 +25,19 @@ This article does not detail how to configure AD DS to store the BitLocker reco
 
 This article contains the following topics:
 
--   [What Is BitLocker Recovery?](#BKMK_WhatIsRecovery)
+-   [What Is BitLocker Recovery?](#bkmk-whatisrecovery)
 
--   [Testing Recovery](#BKMK_TestingRecovery)
+-   [Testing Recovery](#bkmk-testingrecovery)
 
--   [Planning Your Recovery Process](#BKMK_PlanningRecovery)
+-   [Planning Your Recovery Process](#bkmk-planningrecovery)
 
--   [Using Additional Recovery Information](#BKMK_UsingAddRecovery)
+-   [Using Additional Recovery Information](#bkmk-usingaddrecovery)
 
--   [Resetting Recovery Passwords](#BKMK_AppendixB)
+-   [Resetting Recovery Passwords](#bkmk-appendixb)
 
--   [Retrieving the BitLocker Key Package](#BKMK_AppendixC)
+-   [Retrieving the BitLocker Key Package](#bkmk-appendixc)
 
-## What is BitLocker recovery?
+## <a href="" id="bkmk-whatisrecovery"></a>What is BitLocker recovery?
 
 
 BitLocker recovery is the process by which you can restore access to a BitLocker-protected drive in the event that you cannot unlock the drive normally. In a recovery scenario you have the following options to restore access to the drive:
@@ -138,7 +138,7 @@ If software maintenance requires the computer be restarted and you are using two
 
 Recovery has been described within the context of unplanned or undesired behavior, but you can also cause recovery as an intended production scenario, in order to manage access control. For example, when you redeploy desktop or laptop computers to other departments or employees in your enterprise, you can force BitLocker into recovery before the computer is given to a new user.
 
-## Testing recovery
+## <a href="" id="bkmk-testingrecovery"></a>Testing recovery
 
 
 Before you create a thorough BitLocker recovery process, we recommend that you test how the recovery process works for both end users (people who call your helpdesk for the recovery password) and administrators (people who help the end user get the recovery password). The –forcerecovery command of manage-bde is an easy way for you to step through the recovery process before your users encounter a recovery situation.
@@ -164,7 +164,7 @@ Before you create a thorough BitLocker recovery process, we recommend that you t
 
  
 
-## Planning your recovery process
+## <a href="" id="bkmk-planningrecovery"></a>Planning your recovery process
 
 
 When planning the BitLocker recovery process, first consult your organization's current best practices for recovering sensitive information. For example: How does your enterprise handle lost Windows passwords? How does your organization perform smart card PIN resets? You can use these best practices and related resources (people and tools) to help formulate a BitLocker recovery model.
@@ -177,19 +177,19 @@ When you determine your recovery process, you should:
 
 -   Become familiar with how you can retrieve the recovery password. See:
 
-    -   [Self-recovery](#BKMK_SelfRecovery)
+    -   [Self-recovery](#bkmk-selfrecovery)
 
-    -   [Recovery password retrieval](#BKMK_RecoveryRetrieval)
+    -   [Recovery password retrieval](#bkmk-recoveryretrieval)
 
 -   Determine a series of steps for post-recovery, including analyzing why the recovery occurred and resetting the recovery password. See:
 
-    -   [Post-recovery analysis](#BKMK_PlanningPostRecovery)
+    -   [Post-recovery analysis](#bkmk-planningpostrecovery)
 
-### Self-recovery
+### <a href="" id="bkmk-selfrecovery"></a>Self-recovery
 
 In some cases, users might have the recovery password in a printout or a USB flash drive and can perform self-recovery. We recommend that your organization create a policy for self-recovery. If self-recovery includes using a password or recovery key stored on a USB flash drive, the users should be warned not to store the USB flash drive in the same place as the PC, especially during travel, for example if both the PC and the recovery items are in the same bag it would be very easy for access to be gained to the PC by an unauthorized user. Another policy to consider is having users contact the Helpdesk before or after performing self-recovery so that the root cause can be identified.
 
-### Recovery password retrieval
+### <a href="" id="bkmk-recoveryretrieval"></a>Recovery password retrieval
 
 If the user does not have a recovery password in a printout or on a USB flash drive, the user will need to be able to retrieve the recovery password from an online source. If the PC is a member of a domain the recovery password can be backed up to AD DS. However, this does not happen by default, you must have configured the appropriate Group Policy settings before BitLocker was enabled on the PC. BitLocker Group Policy settings can be found in the Local Group Policy Editor or the Group Policy Management Console (GPMC) under **Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption**. The following policy settings define the recovery methods that can be used to restore access to a BitLocker-protected drive if an authentication method fails or is unable to be used.
 
@@ -210,25 +210,25 @@ The BitLocker Recovery Password Viewer for Active Directory Users and Computers
 
 You can use the following list as a template for creating your own recovery process for recovery password retrieval. This sample process uses the BitLocker Recovery Password Viewer for Active Directory Users and Computers tool.
 
--   [Record the name of the user's computer](#BKMK_RecordComputerName)
+-   [Record the name of the user's computer](#bkmk-recordcomputername)
 
--   [Verify the user's identity](#BKMK_VerifyIdentity)
+-   [Verify the user's identity](#bkmk-verifyidentity)
 
--   [Locate the recovery password in AD DS](#BKMK_LocatePassword)
+-   [Locate the recovery password in AD DS](#bkmk-locatepassword)
 
--   [Gather information to determine why recovery occurred](#BKMK_GatherInfo)
+-   [Gather information to determine why recovery occurred](#bkmk-gatherinfo)
 
--   [Give the user the recovery password](#BKMK_GivePassword)
+-   [Give the user the recovery password](#bkmk-givepassword)
 
-### Record the name of the user's computer
+### <a href="" id="bkmk-recordcomputername"></a>Record the name of the user's computer
 
 You can use the name of the user's computer to locate the recovery password in AD DS. If the user does not know the name of the computer, ask the user to read the first word of the **Drive Label** in the **BitLocker Drive Encryption Password Entry** user interface. This is the computer name when BitLocker was enabled and is probably the current name of the computer.
 
-### Verify the user's identity
+### <a href="" id="bkmk-verifyidentity"></a>Verify the user's identity
 
 You should verify that the person that is asking for the recovery password is truly the authorized user of that computer. You may also wish to verify that the computer with the name the user provided belongs to the user.
 
-### Locate the recovery password in AD DS
+### <a href="" id="bkmk-locatepassword"></a>Locate the recovery password in AD DS
 
 Locate the Computer object with the matching name in AD DS. Because Computer object names are listed in the AD DS global catalog, you should be able to locate the object even if you have a multi-domain forest.
 
@@ -240,11 +240,11 @@ If at any time you are unsure what password to provide, or if you think you migh
 
 Since the password ID is a unique value that is associated with each recovery password stored in AD DS, running a query using this ID will find the correct password to unlock the encrypted volume.
 
-### Gather information to determine why recovery occurred
+### <a href="" id="bkmk-gatherinfo"></a>Gather information to determine why recovery occurred
 
-Before you give the user the recovery password, you should gather any information that will help determine why the recovery was needed, in order to analyze the root cause during the post-recovery analysis. For more info about post-recovery analysis, see [Post-recovery analysis](#BKMK_PlanningPostRecovery).
+Before you give the user the recovery password, you should gather any information that will help determine why the recovery was needed, in order to analyze the root cause during the post-recovery analysis. For more info about post-recovery analysis, see [Post-recovery analysis](#bkmk-planningpostrecovery).
 
-### Give the user the recovery password
+### <a href="" id="bkmk-givepassword"></a>Give the user the recovery password
 
 Because the recovery password is 48 digits long the user may need to record the password by writing it down or typing it on a different computer. If you are using MBAM, the recovery password will be regenerated after it is recovered from the MBAM database to avoid the security risks associated with an uncontrolled password.
 
@@ -253,17 +253,17 @@ Because the 48-digit recovery password is long and contains a combination of dig
 
  
 
-### Post-recovery analysis
+### <a href="" id="bkmk-planningpostrecovery"></a>Post-recovery analysis
 
 When a volume is unlocked using a recovery password, an event is written to the event log and the platform validation measurements are reset in the TPM to match the current configuration. Unlocking the volume means that the encryption key has been released and is ready for on-the-fly encryption when data is written to the volume, and on-the-fly decryption when data is read from the volume. After the volume is unlocked, BitLocker behaves the same way, regardless of how the access was granted.
 
 If you notice that a computer is having repeated recovery password unlocks, you might want to have an administrator can perform post-recovery analysis to determine the root cause of the recovery and refresh BitLocker platform validation so that the user no longer needs to enter a recovery password each time that the computer starts up. See:
 
--   [Determine the root cause of the recovery](#BKMK_DetermineCause)
+-   [Determine the root cause of the recovery](#bkmk-determinecause)
 
--   [Refresh BitLocker protection](#BKMK_RefreshProtection)
+-   [Refresh BitLocker protection](#bkmk-refreshprotection)
 
-### Determine the root cause of the recovery
+### <a href="" id="bkmk-determinecause"></a>Determine the root cause of the recovery
 
 If a user needed to recover the drive, it is important to determine the root cause that initiated the recovery as soon as possible. Properly analyzing the state of the computer and detecting tampering may reveal threats that have broader implications for enterprise security.
 
@@ -285,7 +285,7 @@ Review and answer the following questions for your organization:
 
 To help you answer these questions, use the BitLocker command-line tool to view the current configuration and protection mode (for example, **manage-bde -status**). Scan the event log to find events that help indicate why recovery was initiated (for example, if boot file change occurred). Both of these capabilities can be performed remotely.
 
-### Resolve the root cause
+### <a href="" id="bkmk-refreshprotection"></a>Resolve the root cause
 
 After you have identified what caused recovery, you can reset BitLocker protection and avoid recovery on every startup.
 
@@ -296,13 +296,13 @@ You can perform a BitLocker validation profile reset by suspending and resuming
 
  
 
--   [Unknown PIN](#BKMK_UnknownPIN)
+-   [Unknown PIN](#bkmk-unknownpin)
 
--   [Lost startup key](#BKMK_LostStartup)
+-   [Lost startup key](#bkmk-loststartup)
 
--   [Changes to boot files](#BKMK_ChangeBootKnown)
+-   [Changes to boot files](#bkmk-changebootknown)
 
-### Unknown PIN
+### <a href="" id="bkmk-unknownpin"></a>Unknown PIN
 
 If a user has forgotten the PIN, you must reset the PIN while you are logged on to the computer in order to prevent BitLocker from initiating recovery each time the computer is restarted.
 
@@ -322,7 +322,7 @@ If a user has forgotten the PIN, you must reset the PIN while you are logged on
 
 3.  You will use the new PIN the next time you unlock the drive.
 
-### Lost startup key
+### <a href="" id="bkmk-loststartup"></a>Lost startup key
 
 If you have lost the USB flash drive that contains the startup key, then you must unlock the drive by using the recovery key and then create a new startup key.
 
@@ -334,7 +334,7 @@ If you have lost the USB flash drive that contains the startup key, then you mus
 
 3.  Click **Duplicate start up key**, insert the clean USB drive on which you are going to write the key and then click **Save**.
 
-### Changes to boot files
+### <a href="" id="bkmk-changebootknown"></a>Changes to boot files
 
 This error might occur if you updated the firmware. As a best practice you should suspend BitLocker before making changes the firmware and then resume protection after the update has completed. This prevents the computer from going into recovery mode. However if changes were made when BitLocker protection was on you can simply log on to the computer using the recovery password and the platform validation profile will be updated so that recovery will not occur the next time.
 
@@ -343,7 +343,7 @@ This error might occur if you updated the firmware. As a best practice you shoul
 
 Windows Recovery Environment (RE) can be used to recover access to a drive protected by BitLocker or by Device Encryption. If a PC is unable to boot after two failures, Startup Repair will automatically start. When Startup Repair is launched automatically due to boot failures, it will only execute operating system and driver file repairs, provided that the boot logs or any available crash dump point to a specific corrupted file. In Windows 8.1 and later, devices that include firmware to support specific TPM measurements for PCR\[7\] the TPM can validate that Windows RE is a trusted operating environment and will unlock any BitLocker-protected drives if Windows RE has not been modified. If the Windows RE environment has been modified, for example the TPM has been disabled, the drives will stay locked until the BitLocker recovery key is provided. If Startup Repair is not able to be run automatically from the PC and instead Windows RE is manually started from a repair disk, the BitLocker recovery key must be provided to unlock the BitLocker–protected drives.
 
-## Using additional recovery information
+## <a href="" id="bkmk-usingaddrecovery"></a>Using additional recovery information
 
 
 Besides the 48-digit BitLocker recovery password, other types of recovery information are stored in Active Directory. This section describes how this additional information can be used.
@@ -357,9 +357,9 @@ You must use the BitLocker Repair tool **repair-bde** to use the BitLocker key p
 
  
 
-The BitLocker key package is not saved by default. To save the package along with the recovery password in AD DS you must select the **Backup recovery password and key package** option in the Group Policy settings that control the recovery method. You can also export the key package from a working volume. For more details on how to export key packages, see [Retrieving the BitLocker Key Package](#BKMK_AppendixC).
+The BitLocker key package is not saved by default. To save the package along with the recovery password in AD DS you must select the **Backup recovery password and key package** option in the Group Policy settings that control the recovery method. You can also export the key package from a working volume. For more details on how to export key packages, see [Retrieving the BitLocker Key Package](#bkmk-appendixc).
 
-## Resetting recovery passwords
+## <a href="" id="bkmk-appendixb"></a>Resetting recovery passwords
 
 
 You should invalidate a recovery password after it has been provided and used. It should also be done when you intentionally want to invalidate an existing recovery password for any reason.
@@ -524,10 +524,10 @@ WScript.Echo "A new recovery password has been added. Old passwords have been re
 'WScript.Echo "Type ""manage-bde -protectors -get " & strDriveLetter & " -type recoverypassword"" to view existing passwords."
 ```
 
-## Retrieving the BitLocker key package
+## <a href="" id="bkmk-appendixc"></a>Retrieving the BitLocker key package
 
 
-You can use two methods to retrieve the key package, as described in [Using Additional Recovery Information](#BKMK_UsingAddRecovery):
+You can use two methods to retrieve the key package, as described in [Using Additional Recovery Information](#bkmk-usingaddrecovery):
 
 -   **Export a previously-saved key package from AD DS.** You must have Read access to BitLocker recovery passwords that are stored in AD DS.
 
diff --git a/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md b/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md
index de7f07551f..4878243ac6 100644
--- a/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md
+++ b/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md
@@ -23,13 +23,13 @@ Both manage-bde and the BitLocker cmdlets can be used to perform any task that c
 
 Repair-bde is a special circumstance tool that is provided for disaster recovery scenarios in which a BitLocker protected drive cannot be unlocked normally or using the recovery console.
 
-1.  [Manage-bde](#BKMK_managebde)
+1.  [Manage-bde](#bkmk-managebde)
 
-2.  [Repair-bde](#BKMK_repairbde)
+2.  [Repair-bde](#bkmk-repairbde)
 
-3.  [BitLocker cmdlets for Windows PowerShell](#BKMK_blcmdlets)
+3.  [BitLocker cmdlets for Windows PowerShell](#bkmk-blcmdlets)
 
-## Manage-bde
+## <a href="" id="bkmk-managebde"></a>Manage-bde
 
 
 Manage-bde is a command-line tool that can be used for scripting BitLocker operations. Manage-bde offers additional options not displayed in the BitLocker control panel. For a complete list of the manage-bde options, see the [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx) command-line reference.
@@ -91,7 +91,7 @@ manage-bde -protectors -add -pw C:
 manage-bde -on C:
 ```
 
-## Repair-bde
+## <a href="" id="bkmk-repairbde"></a>Repair-bde
 
 
 You may experience a problem that damages an area of a hard disk on which BitLocker stores critical information. This kind of problem may be caused by a hard disk failure or if Windows exits unexpectedly.
@@ -124,7 +124,7 @@ The following limitations exist for Repair-bde:
 
 For more information about using repair-bde see [Repair-bde](http://technet.microsoft.com/library/ff829851.aspx)
 
-## BitLocker cmdlets for Windows PowerShell
+## <a href="" id="bkmk-blcmdlets"></a>BitLocker cmdlets for Windows PowerShell
 
 
 Windows PowerShell cmdlets provide a new way for administrators to use when working with BitLocker. Using Windows PowerShell's scripting capabilities, administrators can integrate BitLocker options into existing scripts with ease. The list below displays the available BitLocker cmdlets.
diff --git a/windows/keep-secure/block-untrusted-fonts-in-an-enterprise.md b/windows/keep-secure/block-untrusted-fonts-in-an-enterprise.md
index aa81aafd05..4f147b8dcf 100644
--- a/windows/keep-secure/block-untrusted-fonts-in-an-enterprise.md
+++ b/windows/keep-secure/block-untrusted-fonts-in-an-enterprise.md
@@ -32,7 +32,7 @@ There are 3 ways to use this feature:
 
      
 
--   **Exclude apps to load untrusted fonts.** You can exclude specific apps, allowing them to load untrusted fonts, even while this feature is turned on. For instructions, see [Fix apps having problems because of blocked fonts](#Fix_apps_having_problems_because_of_blocked_fonts).
+-   **Exclude apps to load untrusted fonts.** You can exclude specific apps, allowing them to load untrusted fonts, even while this feature is turned on. For instructions, see [Fix apps having problems because of blocked fonts](#fix-apps-having-problems-because-of-blocked-fonts).
 
 ## Potential reductions in functionality
 
@@ -69,7 +69,7 @@ To turn this feature on, off, or to use audit mode:
 
 4.  Restart your computer.
 
-## View the event log
+## <a href="" id="view-the-event-logs"></a>View the event log
 
 
 After you turn this feature on, or start using Audit mode, you can look at your event logs for details.
@@ -139,7 +139,7 @@ After you figure out the problematic fonts, you can try to fix your apps in 2 wa
 
 1.  On each computer with the app installed, open regedit.exe and go to **HKEY\_LOCAL\_MACHINE\\ Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\*&lt;Process\_Image\_Name&gt;***. Like, if you want to exclude Microsoft Word processes, you’d use **HKEY\_LOCAL\_MACHINE\\ Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\Winword.exe**.
 
-2.  Add any additional processes that need to be excluded here, and then turn the Blocking untrusted fonts feature on, using steps 2 and 3 in [Turn on and use the Blocking Untrusted Fonts feature.](#Turn_on_and_use_the_Blocking_untrusted_fonts_feature)
+2.  Add any additional processes that need to be excluded here, and then turn the Blocking untrusted fonts feature on, using steps 2 and 3 in [Turn on and use the Blocking Untrusted Fonts feature.](#turn-on-and-use-the-blocking-untrusted-fonts-feature)
 
  
 
diff --git a/windows/keep-secure/bypass-traverse-checking.md b/windows/keep-secure/bypass-traverse-checking.md
index dc96789f59..09bb59496d 100644
--- a/windows/keep-secure/bypass-traverse-checking.md
+++ b/windows/keep-secure/bypass-traverse-checking.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Bypass traverse checking** security policy setting.
 
diff --git a/windows/keep-secure/change-history-for-keep-windows-10-secure.md b/windows/keep-secure/change-history-for-keep-windows-10-secure.md
index 37a3d57ee4..89fd240ecf 100644
--- a/windows/keep-secure/change-history-for-keep-windows-10-secure.md
+++ b/windows/keep-secure/change-history-for-keep-windows-10-secure.md
@@ -11,7 +11,7 @@ author: brianlic-msft
 # Change history for Keep Windows 10 secure
 
 
-This topic lists new and updated topics in the [Keep Windows 10 secure](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
+This topic lists new and updated topics in the [Keep Windows 10 secure] documentation for [Windows 10 and Windows 10 Mobile](../index.md).
 
 ## February 2016
 
diff --git a/windows/keep-secure/change-the-system-time.md b/windows/keep-secure/change-the-system-time.md
index 1c68469880..ec168f4178 100644
--- a/windows/keep-secure/change-the-system-time.md
+++ b/windows/keep-secure/change-the-system-time.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Change the system time** security policy setting.
 
diff --git a/windows/keep-secure/change-the-time-zone.md b/windows/keep-secure/change-the-time-zone.md
index a995e1fe65..6c41e4d823 100644
--- a/windows/keep-secure/change-the-time-zone.md
+++ b/windows/keep-secure/change-the-time-zone.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Change the time zone** security policy setting.
 
diff --git a/windows/keep-secure/change-the-tpm-owner-password.md b/windows/keep-secure/change-the-tpm-owner-password.md
index c225be6392..7fbc740264 100644
--- a/windows/keep-secure/change-the-tpm-owner-password.md
+++ b/windows/keep-secure/change-the-tpm-owner-password.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 This topic for the IT professional describes how to change the password or PIN for the owner of the Trusted Platform Module (TPM) that is installed on your system.
 
-## About the TPM owner password
+## <a href="" id="bkmk-changeowner1"></a>About the TPM owner password
 
 
 The owner of the TPM is the user who possesses the owner password and is able to set it and change it. Only one owner password exists per TPM. The owner of the TPM can make full use of TPM capabilities. When an owner is set, no other user or software can claim ownership of the TPM. Only the TPM owner can enable, disable, or clear the TPM without having physical access to the computer, for example, by using the command-line tools remotely. Taking ownership of the TPM can be performed as part of the initialization process. Ownership can change when you share the password or clear your ownership of the TPM so someone else can initialize it.
@@ -32,14 +32,14 @@ As with any password, you should change your TPM owner password if you suspect t
 
 Instead of changing your owner password, you can also use the following options to manage your TPM:
 
--   **Clear the TPM**   If you want to invalidate all of the existing keys that have been created since you took ownership of the TPM, you can clear it. For more info, see [Initialize and Configure Ownership of the TPM](initialize-and-configure-ownership-of-the-tpm.md#BKMK_clear1).
+-   **Clear the TPM**   If you want to invalidate all of the existing keys that have been created since you took ownership of the TPM, you can clear it. For more info, see [Initialize and Configure Ownership of the TPM](initialize-and-configure-ownership-of-the-tpm.md#bkmk-clear1).
 
     **Important**  
     Clearing the TPM can result in the loss of data. To avoid data loss, make sure you have a backup or recovery method for any data protected or encrypted by the TPM.
 
      
 
--   **Turn off the TPM**   If you want to keep all existing keys and data intact, and you want to disable the services that are provided by the TPM, you can turn it off. For more info, see [Initialize and Configure Ownership of the TPM](initialize-and-configure-ownership-of-the-tpm.md#BKMK_onoff).
+-   **Turn off the TPM**   If you want to keep all existing keys and data intact, and you want to disable the services that are provided by the TPM, you can turn it off. For more info, see [Initialize and Configure Ownership of the TPM](initialize-and-configure-ownership-of-the-tpm.md#bkmk-onoff).
 
 ## Change the TPM owner password
 
@@ -73,7 +73,7 @@ The following procedure provides the steps that are necessary to change the TPM
 
 6.  Click **Change password** to apply the new owner password to the TPM.
 
-## Use the TPM cmdlets
+## <a href="" id="bkmk-tpmcmdlets"></a>Use the TPM cmdlets
 
 
 If you are using Windows PowerShell to manage your computers, you can also manage the TPM by using Windows PowerShell. To install the TPM cmdlets, type the following command:
@@ -85,7 +85,7 @@ For details about the individual cmdlets, see [TPM Cmdlets in Windows PowerShell
 ## Additional resources
 
 
-For more info about TPM, see [Trusted Platform Module technology overview](trusted-platform-module-technology-overview.md#BKMK_AdditionalResources).
+For more info about TPM, see [Trusted Platform Module technology overview](trusted-platform-module-technology-overview.md#bkmk-additionalresources).
 
  
 
diff --git a/windows/keep-secure/configure-an-applocker-policy-for-audit-only.md b/windows/keep-secure/configure-an-applocker-policy-for-audit-only.md
index dce4cfdf7d..f554bbf9cb 100644
--- a/windows/keep-secure/configure-an-applocker-policy-for-audit-only.md
+++ b/windows/keep-secure/configure-an-applocker-policy-for-audit-only.md
@@ -26,7 +26,7 @@ There is no audit mode for the DLL rule collection. DLL rules affect specific ap
 
  
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To audit rule collections**
 
diff --git a/windows/keep-secure/configure-an-applocker-policy-for-enforce-rules.md b/windows/keep-secure/configure-an-applocker-policy-for-enforce-rules.md
index 087068db1a..acea4f15df 100644
--- a/windows/keep-secure/configure-an-applocker-policy-for-enforce-rules.md
+++ b/windows/keep-secure/configure-an-applocker-policy-for-enforce-rules.md
@@ -24,7 +24,7 @@ When AppLocker policy enforcement is set to **Enforce rules**, rules are enforce
 
 For info about how AppLocker policies are applied within a GPO structure, see [Understand AppLocker rules and enforcement setting inheritance in Group Policy](understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To enable the Enforce rules enforcement setting**
 
diff --git a/windows/keep-secure/configure-exceptions-for-an-applocker-rule.md b/windows/keep-secure/configure-exceptions-for-an-applocker-rule.md
index 6cca40bfdf..126647dac7 100644
--- a/windows/keep-secure/configure-exceptions-for-an-applocker-rule.md
+++ b/windows/keep-secure/configure-exceptions-for-an-applocker-rule.md
@@ -19,7 +19,7 @@ This topic for IT professionals describes the steps to specify which apps can or
 
 Rule exceptions allow you to specify files or folders to exclude from the rule. For more information about exceptions, see [Understanding AppLocker rule exceptions](understanding-applocker-rule-exceptions.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To configure exceptions for a rule**
 
diff --git a/windows/keep-secure/configure-s-mime.md b/windows/keep-secure/configure-s-mime.md
index 6d2168f8b4..96455bb992 100644
--- a/windows/keep-secure/configure-s-mime.md
+++ b/windows/keep-secure/configure-s-mime.md
@@ -19,13 +19,13 @@ author: brianlic-msft
 
 **In this article**
 
--   [About message encryption](#about_message_encryption)
--   [About digital signatures](#about_digital_signatures)
+-   [About message encryption](#about-message-encryption)
+-   [About digital signatures](#about-digital-signatures)
 -   [Prerequisites](#prerequisites)
--   [Choose S/MIME settings](#choose_s_mime_settings)
--   [Encrypt or sign individual messages](#encrypt_or_sign_individual_messages)
--   [Read signed or encrypted messages](#read_signed_or_encrypted_messages)
--   [Install certificates from a received message](#install_certificates_from_a_received_message)
+-   [Choose S/MIME settings](#choose-s-mime-settings)
+-   [Encrypt or sign individual messages](#encrypt-or-sign-individual-messages)
+-   [Read signed or encrypted messages](#read-signed-or-encrypted-messages)
+-   [Install certificates from a received message](#install-certificates-from-a-received-message)
 
 S/MIME stands for Secure/Multipurpose Internet Mail Extensions, and provides an added layer of security for email sent to and from an Exchange ActiveSync (EAS) account. In Windows 10, S/MIME lets users encrypt outgoing messages and attachments so that only intended recipients who have a digital identification (ID), also known as a certificate, can read them. Users can digitally sign a message, which provides the recipients with a way to verify the identity of the sender and that the message hasn't been tampered with.
 
diff --git a/windows/keep-secure/configure-windows-defender-for-windows-10.md b/windows/keep-secure/configure-windows-defender-for-windows-10.md
index b72e41d429..63820c0f01 100644
--- a/windows/keep-secure/configure-windows-defender-for-windows-10.md
+++ b/windows/keep-secure/configure-windows-defender-for-windows-10.md
@@ -17,13 +17,13 @@ author: brianlic-msft
 
 **In this article**
 
--   [Configure definition updates](#configure_definition_updates)
--   [Definition update logic](#definition_update_logic)
--   [Update Windows Defender definitions through Active Directory and WSUS](#update_windows_defender_definitions_through_active_directory_and_wsus)
--   [Manage cloud-based protection](#manage_cloud-based_protection)
--   [Opt-in to Microsoft Update](#opt-in_to_microsoft_update)
--   [Schedule updates for Microsoft Update](#schedule_updates_for_microsoft_update)
--   [Related topics](#related_topics)
+-   [Configure definition updates](#configure-definition-updates)
+-   [Definition update logic](#definition-update-logic)
+-   [Update Windows Defender definitions through Active Directory and WSUS](#update-windows-defender-definitions-through-active-directory-and-wsus)
+-   [Manage cloud-based protection](#manage-cloud-based-protection)
+-   [Opt-in to Microsoft Update](#opt-in-to-microsoft-update)
+-   [Schedule updates for Microsoft Update](#schedule-updates-for-microsoft-update)
+-   [Related topics](#related-topics)
 
 IT professionals can configure definition updates and cloud-based protection in Windows Defender in Windows 10 through Microsoft Active Directory and Windows Server Update Services (WSUS).
 
@@ -214,7 +214,7 @@ You can manually opt-in each individual computer on your network to receive Micr
 
 Opting-in to Microsoft Update means that your system administrator can schedule updates to your mobile computer, so that it keeps up-to-date with the latest software versions and security definitions, even when you’re on the road.
 
-For more information on scheduling updates, see [Configure definition updates](https://technet.microsoft.com/library/mt622088.aspx#configure_definition_updates).
+For more information on scheduling updates, see [Configure definition updates](https://technet.microsoft.com/library/mt622088.aspx#configure-definition-updates).
 
 ## Related topics
 
diff --git a/windows/keep-secure/create-a-pagefile.md b/windows/keep-secure/create-a-pagefile.md
index 9caba940bf..241412372b 100644
--- a/windows/keep-secure/create-a-pagefile.md
+++ b/windows/keep-secure/create-a-pagefile.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Create a pagefile** security policy setting.
 
diff --git a/windows/keep-secure/create-a-rule-for-packaged-apps.md b/windows/keep-secure/create-a-rule-for-packaged-apps.md
index 1ace14b7b6..f16c4fcee9 100644
--- a/windows/keep-secure/create-a-rule-for-packaged-apps.md
+++ b/windows/keep-secure/create-a-rule-for-packaged-apps.md
@@ -29,7 +29,7 @@ All the files within a package as well as the package installer share these attr
 
 For info about the publisher condition, see [Understanding the publisher rule condition in AppLocker](understanding-the-publisher-rule-condition-in-applocker.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To create a packaged app rule**
 
diff --git a/windows/keep-secure/create-a-rule-that-uses-a-file-hash-condition.md b/windows/keep-secure/create-a-rule-that-uses-a-file-hash-condition.md
index bef619f30f..19f8350862 100644
--- a/windows/keep-secure/create-a-rule-that-uses-a-file-hash-condition.md
+++ b/windows/keep-secure/create-a-rule-that-uses-a-file-hash-condition.md
@@ -21,7 +21,7 @@ File hash rules use a system-computed cryptographic hash of the identified file.
 
 For info about the file hash condition, see [Understanding the File Hash Rule Condition in AppLocker](understanding-the-file-hash-rule-condition-in-applocker.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To create a new rule with a file hash condition**
 
diff --git a/windows/keep-secure/create-a-rule-that-uses-a-path-condition.md b/windows/keep-secure/create-a-rule-that-uses-a-path-condition.md
index 86982d20e4..59f864fa6e 100644
--- a/windows/keep-secure/create-a-rule-that-uses-a-path-condition.md
+++ b/windows/keep-secure/create-a-rule-that-uses-a-path-condition.md
@@ -26,7 +26,7 @@ When creating a rule that uses a deny action, path conditions are less secure fo
 
 For info about the path condition, see [Understanding the path rule condition in AppLocker](understanding-the-path-rule-condition-in-applocker.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For information how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For information how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To create a new rule with a path condition**
 
diff --git a/windows/keep-secure/create-a-rule-that-uses-a-publisher-condition.md b/windows/keep-secure/create-a-rule-that-uses-a-publisher-condition.md
index c8e9ab4e5e..cbbec57db2 100644
--- a/windows/keep-secure/create-a-rule-that-uses-a-publisher-condition.md
+++ b/windows/keep-secure/create-a-rule-that-uses-a-publisher-condition.md
@@ -23,7 +23,7 @@ Packaged app rules are by definition rules that use publisher conditions. For in
 
 For info about the publisher condition, see [Understanding the publisher rule condition in AppLocker](understanding-the-publisher-rule-condition-in-applocker.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To create a new rule with a publisher condition**
 
diff --git a/windows/keep-secure/create-a-token-object.md b/windows/keep-secure/create-a-token-object.md
index 9709865962..3bdaddebaa 100644
--- a/windows/keep-secure/create-a-token-object.md
+++ b/windows/keep-secure/create-a-token-object.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Create a token object** security policy setting.
 
diff --git a/windows/keep-secure/create-applocker-default-rules.md b/windows/keep-secure/create-applocker-default-rules.md
index 8eb6dc7c94..d701502116 100644
--- a/windows/keep-secure/create-applocker-default-rules.md
+++ b/windows/keep-secure/create-applocker-default-rules.md
@@ -24,7 +24,7 @@ You can use the default rules as a template when creating your own rules to allo
 
  
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For information how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For information how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To create default rules**
 
diff --git a/windows/keep-secure/create-global-objects.md b/windows/keep-secure/create-global-objects.md
index cdcc8e7221..448ca2c48e 100644
--- a/windows/keep-secure/create-global-objects.md
+++ b/windows/keep-secure/create-global-objects.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Create global objects** security policy setting.
 
diff --git a/windows/keep-secure/create-permanent-shared-objects.md b/windows/keep-secure/create-permanent-shared-objects.md
index 0011487a83..467ff27d4f 100644
--- a/windows/keep-secure/create-permanent-shared-objects.md
+++ b/windows/keep-secure/create-permanent-shared-objects.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Create permanent shared objects** security policy setting.
 
diff --git a/windows/keep-secure/create-symbolic-links.md b/windows/keep-secure/create-symbolic-links.md
index aacda94dbe..5724c2532c 100644
--- a/windows/keep-secure/create-symbolic-links.md
+++ b/windows/keep-secure/create-symbolic-links.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Create symbolic links** security policy setting.
 
diff --git a/windows/keep-secure/creating-a-device-guard-policy-for-signed-apps.md b/windows/keep-secure/creating-a-device-guard-policy-for-signed-apps.md
index 9d6c2feac6..9028d0b0c4 100644
--- a/windows/keep-secure/creating-a-device-guard-policy-for-signed-apps.md
+++ b/windows/keep-secure/creating-a-device-guard-policy-for-signed-apps.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 To implement Device Guard app protection, you will need to create a code integrity policy. Code integrity policies determine what apps are considered trustworthy and are allowed to run on a protected device.
 
-## Create a Device Guard code integrity policy based on a reference device
+## <a href="" id="create-a-device-guard-code-integrity-policy-based-on--a-reference-device"></a>Create a Device Guard code integrity policy based on a reference device
 
 
 To create a code integrity policy, you'll first need to create a reference image that includes the signed applications you want to run on your protected devices. For information on how to sign applications, see [Getting apps to run on Device Guard-protected devices](getting-apps-to-run-on-device-guard-protected-devices.md).
diff --git a/windows/keep-secure/credential-guard.md b/windows/keep-secure/credential-guard.md
index fbe2f2083d..23fb6bef14 100644
--- a/windows/keep-secure/credential-guard.md
+++ b/windows/keep-secure/credential-guard.md
@@ -16,7 +16,7 @@ author: brianlic-msft
 -   Windows 10
 -   Windows Server 2016 Technical Preview
 
-Introduced in Windows 10 Enterprise, Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket by protecting NTLM password hashes and Kerberos Ticket Granting Tickets.
+Introduced in Windows 10 Enterprise, Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Credential Guard prevents these attacks by protecting NTLM password hashes and Kerberos Ticket Granting Tickets.
 
 Credential Guard offers the following features and solutions:
 
@@ -69,7 +69,7 @@ The PC must meet the following hardware and software requirements to use Credent
 </tr>
 <tr class="even">
 <td align="left"><p>UEFI firmware version 2.3.1 or higher and Secure Boot</p></td>
-<td align="left"><p>To verify that the firmware is using UEFI version 2.3.1 or higher and Secure Boot, you can validate it against the [System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system_fundamentals_firmware_cs_uefisecureboot_connectedstandby) Windows Hardware Compatibility Program requirement.</p></td>
+<td align="left"><p>To verify that the firmware is using UEFI version 2.3.1 or higher and Secure Boot, you can validate it against the [System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system-fundamentals-firmware-cs-uefisecureboot-connectedstandby) Windows Hardware Compatibility Program requirement.</p></td>
 </tr>
 <tr class="odd">
 <td align="left"><p>Virtualization extensions</p></td>
@@ -99,7 +99,7 @@ The PC must meet the following hardware and software requirements to use Credent
 </tr>
 <tr class="odd">
 <td align="left"><p>Secure firmware update process</p></td>
-<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system_fundamentals_firmware_uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
+<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system-fundamentals-firmware-uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p>The firmware is updated for [Secure MOR implementation](http://msdn.microsoft.com/library/windows/hardware/mt270973.aspx)</p></td>
@@ -298,7 +298,7 @@ You can use System Information to ensure that Credential Guard is running on a P
 
 -   If you are using Wi-Fi and VPN end points that are based on MS-CHAPv2, they are subject to similar attacks as NTLMv1. We recommend that organizations use certificated-based authentication for Wi-Fi and VPN connections.
 
--   Starting with Windows 10, Version 1511, domain credentials that are stored with Credential Manager are protected with Credential Guard. Credential Manager allows you to store credentials, such as user names and passwords that you use to log on to websites or other computers on a network. The following considerations apply to the Credential Guard protections for Credential Manager:
+-   Starting with Windows 10, version 1511, domain credentials that are stored with Credential Manager are protected with Credential Guard. Credential Manager allows you to store credentials, such as user names and passwords that you use to log on to websites or other computers on a network. The following considerations apply to the Credential Guard protections for Credential Manager:
 
     -   Credentials saved by Remote Desktop Services cannot be used to remotely connect to another machine without supplying the password.
 
@@ -401,7 +401,7 @@ You must restart the device after enrolling the machine authentication certifica
 
 By using an authentication policy, you can ensure that users only sign into devices that are running Credential Guard. Before you deploy the authentication policy though, you must first run a couple of scripts that set up your environment.
 
--   The [get-IssuancePolicy.ps1](#BKMK_GetScript) shows all of the issuance policies that are available on the certificate authority.
+-   The [get-IssuancePolicy.ps1](#bkmk-getscript) shows all of the issuance policies that are available on the certificate authority.
 
     From a Windows PowerShell command prompt, run the following command:
 
@@ -409,7 +409,7 @@ By using an authentication policy, you can ensure that users only sign into devi
     .\get-IssuancePolicy.ps1 –LinkedToGroup:All
     ```
 
--   The [set-IssuancePolicyToGroupLink.ps1](#BKMK_SetScript) creates a Universal security group, creates an organizational unit, and links the issuance policy to that Universal security group.
+-   The [set-IssuancePolicyToGroupLink.ps1](#bkmk-setscript) creates a Universal security group, creates an organizational unit, and links the issuance policy to that Universal security group.
 
     From a Windows PowerShell command prompt, run the following command:
 
@@ -464,7 +464,7 @@ When authentication policies in enforcement mode are deployed with Credential Gu
 
 Here is a list of scripts that are mentioned in this topic.
 
-### Get the available issuance policies on the certificate authority
+### <a href="" id="bkmk-getscript"></a>Get the available issuance policies on the certificate authority
 
 Save this script file as get-IssuancePolicy.ps1.
 
@@ -686,7 +686,7 @@ If you're having trouble running this script, try replacing the single quote aft
 
  
 
-### Link an issuance policy to a group
+### <a href="" id="bkmk-setscript"></a>Link an issuance policy to a group
 
 Save the script file as set-IssuancePolicyToGroupLink.ps1.
 
diff --git a/windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md b/windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md
index e331918ef2..e3635f1d18 100644
--- a/windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md
+++ b/windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax** policy setting.
 
diff --git a/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md b/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md
index 90670ace9d..5ef38e48d1 100644
--- a/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md
+++ b/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax** security policy setting.
 
diff --git a/windows/keep-secure/debug-programs.md b/windows/keep-secure/debug-programs.md
index ae53fe4a58..fde20d3384 100644
--- a/windows/keep-secure/debug-programs.md
+++ b/windows/keep-secure/debug-programs.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Debug programs** security policy setting.
 
diff --git a/windows/keep-secure/delete-an-applocker-rule.md b/windows/keep-secure/delete-an-applocker-rule.md
index 951386d9b7..bed27aa9de 100644
--- a/windows/keep-secure/delete-an-applocker-rule.md
+++ b/windows/keep-secure/delete-an-applocker-rule.md
@@ -21,7 +21,7 @@ As older apps are retired and new apps are deployed in your organization, it wil
 
 For info about testing an AppLocker policy to see what rules affect which files or applications, see [Test an AppLocker policy by Using Test-AppLockerPolicy](test-an-applocker-policy-by-using-test-applockerpolicy.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To delete a rule in an AppLocker policy**
 
diff --git a/windows/keep-secure/deny-access-to-this-computer-from-the-network.md b/windows/keep-secure/deny-access-to-this-computer-from-the-network.md
index dcf1c73311..7a894142bd 100644
--- a/windows/keep-secure/deny-access-to-this-computer-from-the-network.md
+++ b/windows/keep-secure/deny-access-to-this-computer-from-the-network.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Deny access to this computer from the network** security policy setting.
 
diff --git a/windows/keep-secure/deny-log-on-as-a-batch-job.md b/windows/keep-secure/deny-log-on-as-a-batch-job.md
index 3c4878cc82..d9ac166d78 100644
--- a/windows/keep-secure/deny-log-on-as-a-batch-job.md
+++ b/windows/keep-secure/deny-log-on-as-a-batch-job.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Deny log on as a batch job** security policy setting.
 
diff --git a/windows/keep-secure/deny-log-on-as-a-service.md b/windows/keep-secure/deny-log-on-as-a-service.md
index 63cefacbc8..44201c1023 100644
--- a/windows/keep-secure/deny-log-on-as-a-service.md
+++ b/windows/keep-secure/deny-log-on-as-a-service.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Deny log on as a service** security policy setting.
 
diff --git a/windows/keep-secure/deny-log-on-locally.md b/windows/keep-secure/deny-log-on-locally.md
index b02e7b1906..95f7276570 100644
--- a/windows/keep-secure/deny-log-on-locally.md
+++ b/windows/keep-secure/deny-log-on-locally.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Deny log on locally** security policy setting.
 
diff --git a/windows/keep-secure/deny-log-on-through-remote-desktop-services.md b/windows/keep-secure/deny-log-on-through-remote-desktop-services.md
index 32a985ba04..359085b10c 100644
--- a/windows/keep-secure/deny-log-on-through-remote-desktop-services.md
+++ b/windows/keep-secure/deny-log-on-through-remote-desktop-services.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Deny log on through Remote Desktop Services** security policy setting.
 
diff --git a/windows/keep-secure/device-guard-certification-and-compliance.md b/windows/keep-secure/device-guard-certification-and-compliance.md
index 51825caacc..69678c49bb 100644
--- a/windows/keep-secure/device-guard-certification-and-compliance.md
+++ b/windows/keep-secure/device-guard-certification-and-compliance.md
@@ -86,8 +86,8 @@ The following table shows the hardware and software you need to install and conf
 <td align="left"><p>UEFI firmware version 2.3.1 or higher with UEFI Secure Boot and Platform Secure Boot</p></td>
 <td align="left"><p>UEFI Secure Boot ensures that the device boots only authorized code. Additionally, Boot Integrity, also known as Platform Secure Boot must be supported. You can validate it against the following Windows Hardware Compatibility Program requirements:</p>
 <ul>
-<li><p>[System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system_fundamentals_firmware_uefisecureboot)</p></li>
-<li><p>[System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system_fundamentals_firmware_cs_uefisecureboot_connectedstandby)</p></li>
+<li><p>[System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system-fundamentals-firmware-uefisecureboot)</p></li>
+<li><p>[System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system-fundamentals-firmware-cs-uefisecureboot-connectedstandby)</p></li>
 </ul></td>
 </tr>
 <tr class="odd">
@@ -117,7 +117,7 @@ The following table shows the hardware and software you need to install and conf
 </tr>
 <tr class="odd">
 <td align="left"><p>Secure firmware update process</p></td>
-<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system_fundamentals_firmware_uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
+<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system-fundamentals-firmware-uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p>Signed processor microcode updates</p></td>
diff --git a/windows/keep-secure/device-guard-deployment-guide.md b/windows/keep-secure/device-guard-deployment-guide.md
index 6246363a37..5881759b28 100644
--- a/windows/keep-secure/device-guard-deployment-guide.md
+++ b/windows/keep-secure/device-guard-deployment-guide.md
@@ -17,19 +17,19 @@ author: brianlic-msft
 
 **In this article**
 
--   [Introduction to Device Guard](#introduction_to_device_guard)
--   [Device Guard overview](#device_guard_overview)
--   [Plan for Device Guard](#plan_for_device_guard)
--   [Approach enterprise code integrity deployment](#approach_enterprise)
--   [Device Guard deployment scenarios](#device_guard_deployment)
--   [Code signing adoption](#code_signing_adoption)
+-   [Introduction to Device Guard](#introduction-to-device-guard)
+-   [Device Guard overview](#device-guard-overview)
+-   [Plan for Device Guard](#plan-for-device-guard)
+-   [Approach enterprise code integrity deployment](#approach-enterprise)
+-   [Device Guard deployment scenarios](#device-guard-deployment)
+-   [Code signing adoption](#code-signing-adoption)
 -   [Hardware considerations](#hardware)
--   [Device Guard deployment](#DG_deployment)
--   [Configure hardware-based security features](#configure_hardware)
--   [Catalog files](#Catalog_files)
--   [Code integrity policies](#code_integrity_policies)
--   [Create a Device Guard code signing certificate](#create_DG_code)
--   [Related topics](#related_topics)
+-   [Device Guard deployment](#dg-deployment)
+-   [Configure hardware-based security features](#configure-hardware)
+-   [Catalog files](#catalog-files)
+-   [Code integrity policies](#code-integrity-policies)
+-   [Create a Device Guard code signing certificate](#create-dg-code)
+-   [Related topics](#related-topics)
 
 Microsoft Device Guard is a feature set that consists of both hardware and software system integrity hardening features that revolutionize the Windows operating system’s security. Windows 10 employs Device Guard as well as code integrity and advanced hardware features such as CPU virtualization extensions, Trusted Platform Module, and second-level address translation to offer comprehensive modern security to its users. This guide explores the individual features in Device Guard as well as how to plan for, configure, and deploy them.
 
@@ -55,7 +55,7 @@ Advanced hardware features such as CPU virtualization extensions, IOMMUs, and SL
 
 Along with these new features, some components of Device Guard are existing tools or technologies that have been included in this strategic security offering to provide customers with the most secure Windows operating system possible. Device Guard is intended as a set of client security features to be used in conjunction with the other threat-resistance features available in the Windows operating system, some of which are mentioned in this guide. In addition to an overview of each feature, this guide walks you through the configuration and deployment of them.
 
-### 
+### <a href="" id="config-code"></a>
 
 **Configurable code integrity**
 
@@ -63,15 +63,15 @@ The Windows operating system consists of two operating modes: user mode and kern
 
 Code integrity is the component of the Windows operating system that verifies that the code Windows is running is trusted and safe. Like the operating system, Windows code integrity also contains two primary components: kernel mode code integrity (KMCI) and user mode code integrity (UMCI). KMCI has been used in recent versions of the Windows operating system to protect the kernel mode from running unsigned drivers. Although effective, drivers are not the only route that malware can take to penetrate the kernel mode space of the operating system. In Windows 10, however, Microsoft has raised the standard for kernel mode code out of the box as well as provided enterprises with a way to set their own UMCI and KMCI standards. Beginning with the Code Integrity service itself and continuing through the policies a Windows client uses to verify that an application should be allowed to run, Microsoft has made Windows 10 more secure than any previous Windows release. Historically, UMCI has been available only in Windows RT and on Windows Phone devices, which has made it difficult for these devices to be infected with viruses and malware. In Windows 10, these same successful UMCI standards are available.
 
-Historically, most malware has been unsigned. By simply deploying code integrity policies, organizations will immediately protect themselves against unsigned malware, which is estimated to be responsible for more than 95 percent of current attacks. By using code integrity policies, an enterprise can select exactly which binaries are allowed to run in both user mode and kernel mode, from the signer to the hash level. When completely enforced, it makes user mode in Windows function like a mobile phone, by allowing only specific applications or specific signatures to be trusted and run. This feature alone fundamentally changes the security in an enterprise. This additional security is not limited to Windows apps and does not require that an application be rewritten to be compatible with your existing, unsigned applications. You can implement configurable code integrity without enabling Device Guard, but it is intended to run in conjunction with Device Guard when supported hardware is available. For more information about how to configure, deploy, and manage code integrity policies, see the [Code integrity policies](#code_integrity_policies) section.
+Historically, most malware has been unsigned. By simply deploying code integrity policies, organizations will immediately protect themselves against unsigned malware, which is estimated to be responsible for more than 95 percent of current attacks. By using code integrity policies, an enterprise can select exactly which binaries are allowed to run in both user mode and kernel mode, from the signer to the hash level. When completely enforced, it makes user mode in Windows function like a mobile phone, by allowing only specific applications or specific signatures to be trusted and run. This feature alone fundamentally changes the security in an enterprise. This additional security is not limited to Windows apps and does not require that an application be rewritten to be compatible with your existing, unsigned applications. You can implement configurable code integrity without enabling Device Guard, but it is intended to run in conjunction with Device Guard when supported hardware is available. For more information about how to configure, deploy, and manage code integrity policies, see the [Code integrity policies](#code-integrity-policies) section.
 
 **Hardware security features and virtualization-based security**
 
 The Device Guard core functionality and protection start at the hardware level. Devices that have processors equipped with SLAT technologies and virtualization extensions, such as Intel Virtualization Technology (VT-x) and AMD-V, will be able to take advantage of virtualization-based security (VBS) features that enhance Windows security. Device Guard leverages VBS to isolate core Windows services that are critical to the security and integrity of the operating system. This isolation removes the vulnerability of these services from both the user and kernel modes and acts as an impenetrable barrier for most malware used today. One of these isolated services, called the Windows Code Integrity service, drives the Device Guard kernel mode configurable code integrity feature. This prevents code that has penetrated the kernel mode operations from compromising the code integrity service.
 
-Another Windows 10 feature that employs VBS is Credential Guard. Credential Guard provides additional protection to Active Directory domain users by storing domain credentials within the virtualization container that hosts the Windows security services, such as code integrity. By isolating these domain credentials from the active user mode and kernel mode, they have a much lower risk of being stolen. For more information about how Credential Guard complements Device Guard, see the [Device Guard with Credential Guard](#DG_with_CG) section. For information about how to enable Credential Guard, see the [Enable Credential Guard](#enable_CG) section.
+Another Windows 10 feature that employs VBS is Credential Guard. Credential Guard provides additional protection to Active Directory domain users by storing domain credentials within the virtualization container that hosts the Windows security services, such as code integrity. By isolating these domain credentials from the active user mode and kernel mode, they have a much lower risk of being stolen. For more information about how Credential Guard complements Device Guard, see the [Device Guard with Credential Guard](#dg-with-cg) section. For information about how to enable Credential Guard, see the [Enable Credential Guard](#enable-cg) section.
 
-### 
+### <a href="" id="dg-with-applocker"></a>
 
 **Device Guard with AppLocker**
 
@@ -83,61 +83,61 @@ Although AppLocker is not considered a new Device Guard feature, it complements
 
 AppLocker and Device Guard should run side-by-side in your organization, which offers the best of both security features at the same time and provides the most comprehensive security to as many devices as possible. In addition to these features, Microsoft recommends that you continue to maintain an enterprise antivirus solution for a well-rounded enterprise security portfolio.
 
-### 
+### <a href="" id="dg-with-cg"></a>
 
 **Device Guard with Credential Guard**
 
-Although Credential Guard is not a feature within Device Guard, many organizations will likely deploy Credential Guard alongside Device Guard for additional protection against credential theft. Similar to virtualization-based protection of kernel mode code integrity, Credential Guard leverages hypervisor technology to protect domain credentials. This mitigation is targeted at resisting the use of pass-the-hash and pass-the-ticket techniques. By employing multifactor authentication with Credential Guard, organizations can gain additional protection against such threats. For information about how to deploy Credential Guard to your Windows 10 Enterprise clients, see the [Enable Credential Guard](#enable_CG) section. In addition to the client-side enablement of Credential Guard, organizations can deploy mitigations at both the CA and domain controller level to help prevent credential theft. Microsoft will be releasing details about these additional mitigations in the future.
+Although Credential Guard is not a feature within Device Guard, many organizations will likely deploy Credential Guard alongside Device Guard for additional protection against credential theft. Similar to virtualization-based protection of kernel mode code integrity, Credential Guard leverages hypervisor technology to protect domain credentials. This mitigation is targeted at resisting the use of pass-the-hash and pass-the-ticket techniques. By employing multifactor authentication with Credential Guard, organizations can gain additional protection against such threats. For information about how to deploy Credential Guard to your Windows 10 Enterprise clients, see the [Enable Credential Guard](#enable-cg) section. In addition to the client-side enablement of Credential Guard, organizations can deploy mitigations at both the CA and domain controller level to help prevent credential theft. Microsoft will be releasing details about these additional mitigations in the future.
 
 **Unified manageability**
 
 You can easily manage Device Guard features by using the familiar enterprise and client-management tools that IT pros use every day. Use the following management tools to enable and manage Device Guard:
 
--   **Group Policy**. Windows 10 provides an administrative template to configure and deploy the configurable code integrity policies for your organization. This template also allows you to specify which hardware-based security features you would like to enable and deploy. You can manage these settings along with your existing Group Policy Objects (GPOs), which makes it simple to implement Device Guard features. In addition to these code integrity and hardware-based security features, you can use Group Policy to help you manage your catalog files. For more information about catalog files, see the [Catalog files](#catalog_files) section.
+-   **Group Policy**. Windows 10 provides an administrative template to configure and deploy the configurable code integrity policies for your organization. This template also allows you to specify which hardware-based security features you would like to enable and deploy. You can manage these settings along with your existing Group Policy Objects (GPOs), which makes it simple to implement Device Guard features. In addition to these code integrity and hardware-based security features, you can use Group Policy to help you manage your catalog files. For more information about catalog files, see the [Catalog files](#catalog-files) section.
 
--   **Microsoft System Center Configuration Manager**. You can use System Center Configuration Manager to simplify deployment and management of catalog files, code integrity policies, and hardware-based security features, as well as provide version control. For more information about how to deploy catalog files by using System Center Configuration Manager, see the [Deploy catalog files with System Center Configuration Manager](#deploy_cat_SCCM) section.
+-   **Microsoft System Center Configuration Manager**. You can use System Center Configuration Manager to simplify deployment and management of catalog files, code integrity policies, and hardware-based security features, as well as provide version control. For more information about how to deploy catalog files by using System Center Configuration Manager, see the [Deploy catalog files with System Center Configuration Manager](#deploy-cat-sccm) section.
 
 -   **Microsoft Intune**. In a future release of Microsoft Intune, organizations will be able to leverage Intune for deployment and management of code integrity policies and catalog files.
 
--   **Windows PowerShell**. Windows PowerShell is primarily used to create and service code integrity policies. These policies represent the most powerful component of Device Guard. For a step-by-step walkthrough of how to create, audit, service, enforce, and deploy code integrity policies, see the [Code integrity policies](#code_integrity_policies) section.
+-   **Windows PowerShell**. Windows PowerShell is primarily used to create and service code integrity policies. These policies represent the most powerful component of Device Guard. For a step-by-step walkthrough of how to create, audit, service, enforce, and deploy code integrity policies, see the [Code integrity policies](#code-integrity-policies) section.
 
-These options provide the same experience you are used to in order to manage your existing enterprise management solutions. For more information about how to manage and deploy Device Guard hardware and code integrity features in your organization, see the [Device Guard deployment](#DG_deployment) section.
+These options provide the same experience you are used to in order to manage your existing enterprise management solutions. For more information about how to manage and deploy Device Guard hardware and code integrity features in your organization, see the [Device Guard deployment](#dg-deployment) section.
 ## Plan for Device Guard
 
 
 In this section, you will learn about the following topics:
 
--   [Approach enterprise code integrity deployment](#approach_enterprise). Device Guard deployment in your organization requires a planned approach. In this section, you get high-level recommendations for how to approach enterprise code integrity deployment in your organization.
+-   [Approach enterprise code integrity deployment](#approach-enterprise). Device Guard deployment in your organization requires a planned approach. In this section, you get high-level recommendations for how to approach enterprise code integrity deployment in your organization.
 
--   [Device Guard deployment scenarios](#device_guard_deployment). When you plan for Device Guard deployment, Microsoft recommends that you categorize each device in your organization into a deployment scenario. These scenarios will provide a roadmap for your Device Guard deployment.
+-   [Device Guard deployment scenarios](#device-guard-deployment). When you plan for Device Guard deployment, Microsoft recommends that you categorize each device in your organization into a deployment scenario. These scenarios will provide a roadmap for your Device Guard deployment.
 
--   [Code signing adoption](#code_signing_adoption). Code signing is important to the security that Device Guard provides. This section outlines the options for code signing and the benefits and disadvantages of each method.
+-   [Code signing adoption](#code-signing-adoption). Code signing is important to the security that Device Guard provides. This section outlines the options for code signing and the benefits and disadvantages of each method.
 
 -   [Hardware considerations](#hardware). Several Device Guard features require advanced hardware. This section outlines the requirements for each of those features and what to look for during your next hardware refresh.
 
-## Approach enterprise code integrity deployment
+## <a href="" id="approach-enterprise"></a>Approach enterprise code integrity deployment
 
 
 Enterprises that want to consider Device Guard should not expect deployment to their entire organization overnight. Device Guard implementation requires that you plan for both end-user and IT pro impact. In addition, the deployment of Device Guard features to your enterprise requires a planned, phased approach to ensure that end-user systems are fully capable and ready to enforce these new security restrictions. Perform the following high-level tasks to approach the deployment of Device Guard to your enterprise:
 
-1.  **Group devices into similar functions**. Categorize machines into the groups described in the [Device Guard deployment scenarios](#device_guard_deployment) section. This begins the roadmap for your Device Guard deployment and provides groups of easier and more difficult implementations. From there, assess the quantity of necessary Device Guard policies. The easiest solution is to lock down your entire enterprise, but it might not fit your individual departments’ needs.
+1.  **Group devices into similar functions**. Categorize machines into the groups described in the [Device Guard deployment scenarios](#device-guard-deployment) section. This begins the roadmap for your Device Guard deployment and provides groups of easier and more difficult implementations. From there, assess the quantity of necessary Device Guard policies. The easiest solution is to lock down your entire enterprise, but it might not fit your individual departments’ needs.
 
-    To discover an appropriate number of policies for your organization, try to separate the defined groups into departments or roles. Then ask some questions: What software does each department or role need to do their job? Should they be able to install and run other departments’ software? Do we need to create a base code integrity policy that aligns with our application catalog? Should users be able to install any application or only choose from an “allowed” list? Do we allow users to use their own peripheral devices? These questions will help you discover the number of necessary policies for your organization. Finally, try to focus on which people or departments would require an additional level of privileges. For example, should department x be able to install and run application xyz, even though no other department does? If the answer is yes and justifiable, you will need a secondary code integrity policy for that group. If not, you will likely be able to merge several policies to simplify management. For more information about configurable code integrity policies, see the [Code integrity policies](#code_integrity_policies) section.
+    To discover an appropriate number of policies for your organization, try to separate the defined groups into departments or roles. Then ask some questions: What software does each department or role need to do their job? Should they be able to install and run other departments’ software? Do we need to create a base code integrity policy that aligns with our application catalog? Should users be able to install any application or only choose from an “allowed” list? Do we allow users to use their own peripheral devices? These questions will help you discover the number of necessary policies for your organization. Finally, try to focus on which people or departments would require an additional level of privileges. For example, should department x be able to install and run application xyz, even though no other department does? If the answer is yes and justifiable, you will need a secondary code integrity policy for that group. If not, you will likely be able to merge several policies to simplify management. For more information about configurable code integrity policies, see the [Code integrity policies](#code-integrity-policies) section.
 
-2.  **Create code integrity policies from “golden” PCs**. After you create the groups of devices, you can create code integrity policies to align with those groups, similar to the way you would manage corporate images. When you have separated these groups and set up golden PCs that mimic the software and hardware those individual groups require, create code integrity policies from each of them. After you create these, you can merge these code integrity policies to create a master policy, or you can manage and deploy them individually. For step-by-step instructions about how to create code integrity policies, see the [Create code integrity policies from golden PCs](#create_code_golden) section.
+2.  **Create code integrity policies from “golden” PCs**. After you create the groups of devices, you can create code integrity policies to align with those groups, similar to the way you would manage corporate images. When you have separated these groups and set up golden PCs that mimic the software and hardware those individual groups require, create code integrity policies from each of them. After you create these, you can merge these code integrity policies to create a master policy, or you can manage and deploy them individually. For step-by-step instructions about how to create code integrity policies, see the [Create code integrity policies from golden PCs](#create-code-golden) section.
 
-3.  **Audit and merge code integrity policies**. Microsoft recommends that you test code integrity policies in audit mode before you enforce them. Audit mode allows administrators to run the code integrity policy on a system but not actually block anything. Rather than not allowing applications to run, events are logged with each exception to the policy. This way, you can easily highlight any issues that were not discovered during the initial scan. You can create additional code integrity policies by using the audit events and merge them into the existing policy. For more information about how to audit code integrity policies, see the [Audit code integrity policies](#audit_code_integrity) section.
+3.  **Audit and merge code integrity policies**. Microsoft recommends that you test code integrity policies in audit mode before you enforce them. Audit mode allows administrators to run the code integrity policy on a system but not actually block anything. Rather than not allowing applications to run, events are logged with each exception to the policy. This way, you can easily highlight any issues that were not discovered during the initial scan. You can create additional code integrity policies by using the audit events and merge them into the existing policy. For more information about how to audit code integrity policies, see the [Audit code integrity policies](#audit-code-integrity) section.
 
-4.  **Assess LOB applications that are currently unsigned, and create a catalog file for them**. Catalog files allow organizations to sign applications that do not currently possess digitally signed binaries or applications that a customer would want to add a secondary signature to. These applications can be in-house applications or from third parties, and the process does not require any repackaging of the application. When you create code integrity policies at a rule level above hash values, you will not discover unsigned applications. To include these applications in your code integrity policies, simply create, sign, and deploy a catalog file. For information about catalog files, see the [Catalog files](#catalog_files) section.
+4.  **Assess LOB applications that are currently unsigned, and create a catalog file for them**. Catalog files allow organizations to sign applications that do not currently possess digitally signed binaries or applications that a customer would want to add a secondary signature to. These applications can be in-house applications or from third parties, and the process does not require any repackaging of the application. When you create code integrity policies at a rule level above hash values, you will not discover unsigned applications. To include these applications in your code integrity policies, simply create, sign, and deploy a catalog file. For information about catalog files, see the [Catalog files](#catalog-files) section.
 
-5.  **Enable desired hardware security features**. Each type of device found in the [Device Guard deployment scenarios](#device_guard_deployment) section takes advantage of different software and hardware integrity configurations. You should assess hardware-based security features separately from code integrity policies because they provide complementary functionality. For information about how to configure Device Guard hardware-based security features, see the [Configure hardware-based security features](#configure_hardware) section.
+5.  **Enable desired hardware security features**. Each type of device found in the [Device Guard deployment scenarios](#device-guard-deployment) section takes advantage of different software and hardware integrity configurations. You should assess hardware-based security features separately from code integrity policies because they provide complementary functionality. For information about how to configure Device Guard hardware-based security features, see the [Configure hardware-based security features](#configure-hardware) section.
 
-6.  **Deploy code integrity policies and catalog files**. After you have created and signed the necessary catalog files and created and audited code integrity policies, you are ready to deploy them in phases. Microsoft strongly recommends that you deploy these components to a test group of users, even after your IT organization has tested and vetted them. This provides a final quality control validation before you deploy the catalog files and policies more broadly. For information about how to deploy catalog files with Group Policy, see the [Deploy catalog files with Group Policy](#deploy_cat_GP) section. For additional information about how to deploy code integrity policies, see the [Deploy code integrity policies with Group Policy](#deploy_manage_code_GP) section.
+6.  **Deploy code integrity policies and catalog files**. After you have created and signed the necessary catalog files and created and audited code integrity policies, you are ready to deploy them in phases. Microsoft strongly recommends that you deploy these components to a test group of users, even after your IT organization has tested and vetted them. This provides a final quality control validation before you deploy the catalog files and policies more broadly. For information about how to deploy catalog files with Group Policy, see the [Deploy catalog files with Group Policy](#deploy-cat-gp) section. For additional information about how to deploy code integrity policies, see the [Deploy code integrity policies with Group Policy](#deploy-manage-code-gp) section.
 
-## Device Guard deployment scenarios
+## <a href="" id="device-guard-deployment"></a>Device Guard deployment scenarios
 
 
-To help simplify the deployment of Device Guard to your organization, Microsoft recommends that you group devices into the deployment scenarios described in this section. Device Guard is not a feature that organizations will just simply “turn on”; rather, it typically requires a phased implementation approach. To see where these scenarios fit into an overall Device Guard deployment approach, see the [Approach to enterprise code integrity deployment](#approach_enterprise) section.
+To help simplify the deployment of Device Guard to your organization, Microsoft recommends that you group devices into the deployment scenarios described in this section. Device Guard is not a feature that organizations will just simply “turn on”; rather, it typically requires a phased implementation approach. To see where these scenarios fit into an overall Device Guard deployment approach, see the [Approach to enterprise code integrity deployment](#approach-enterprise) section.
 
 **Fixed-workload devices**
 
@@ -182,29 +182,29 @@ Device Guard is not a good way to manage devices in a Bring Your Own Device (BYO
 
 Code signing is crucial to the successful implementation of configurable code integrity policies. These policies can trust the signing certificates from both independent software vendors and customers. In Windows 10, all Windows Store applications are signed. Also, you can easily trust any other signed application by adding the signing certificate to the code integrity policy.
 
-For unsigned applications, customers have multiple options for signing them so that code integrity policies can trust them. The first option is traditional embedded code signing. Organizations that have in-house development teams can incorporate binary code signing into their application development process, and then simply add the signing certificate to their code integrity policies. The second option for signing unsigned applications is to use catalog files. In Windows 10, customers have the ability to create catalog files as they monitor the installation and initial run of an application. For more information about signing existing unsigned LOB applications or third-party applications, see the [Existing line-of-business applications](#existing_LOB) section.
+For unsigned applications, customers have multiple options for signing them so that code integrity policies can trust them. The first option is traditional embedded code signing. Organizations that have in-house development teams can incorporate binary code signing into their application development process, and then simply add the signing certificate to their code integrity policies. The second option for signing unsigned applications is to use catalog files. In Windows 10, customers have the ability to create catalog files as they monitor the installation and initial run of an application. For more information about signing existing unsigned LOB applications or third-party applications, see the [Existing line-of-business applications](#existing-lob) section.
 
-### 
+### <a href="" id="existing-lob"></a>
 
 **Existing line-of-business applications**
 
-Until now, existing LOB applications were difficult to trust if they were signed by a source other than the Windows Store or not signed at all. With Windows 10, signing your existing LOB and third-party unsigned applications is simplified. This new signing method does not require that applications be repackaged in any way. With catalog files, administrators can sign these unsigned applications simply by monitoring for an installation and initial startup. By using this monitoring information, an administrator can generate a catalog file. Catalog files are simply Secure Hash Algorithm 2 (SHA2) hash lists of discovered binaries. These binaries’ hash values are updated every time an application is updated and therefore require an updated catalog file. For simplified administration, consider incorporating embedded code signing into your application development process. For more information about how to generate catalog files, see the [Catalog files](#catalog_files) section.
+Until now, existing LOB applications were difficult to trust if they were signed by a source other than the Windows Store or not signed at all. With Windows 10, signing your existing LOB and third-party unsigned applications is simplified. This new signing method does not require that applications be repackaged in any way. With catalog files, administrators can sign these unsigned applications simply by monitoring for an installation and initial startup. By using this monitoring information, an administrator can generate a catalog file. Catalog files are simply Secure Hash Algorithm 2 (SHA2) hash lists of discovered binaries. These binaries’ hash values are updated every time an application is updated and therefore require an updated catalog file. For simplified administration, consider incorporating embedded code signing into your application development process. For more information about how to generate catalog files, see the [Catalog files](#catalog-files) section.
 
 **Note**  
 Catalog files are lists of individual binaries’ hash values. If the scanned application is updated, you will need to create a new catalog file. That said, binary signing is still highly recommended for any future applications so that no catalog files are needed.
 
  
 
-When you create a catalog file, you must sign it by using enterprise public key infrastructure (PKI), or a purchased code signing certificate. When signed, code integrity policies can trust the signer or signing certificate of those files. For information about catalog file signing, see the [Catalog files](#catalog_files) section.
+When you create a catalog file, you must sign it by using enterprise public key infrastructure (PKI), or a purchased code signing certificate. When signed, code integrity policies can trust the signer or signing certificate of those files. For information about catalog file signing, see the [Catalog files](#catalog-files) section.
 
 **Application development**
 
 Although in-house applications can be signed after packaging by using catalog files, Microsoft strongly recommends that embedded code signing be incorporated into your application development process. When signing applications, simply add the code signing certificate used to sign your applications to your code integrity policy. This ensures that your code integrity policy will trust any future application that is signed with that certificate. Embedding code signing into any in-house application development process is beneficial to your IT organization as you implement code integrity policies.
 
-## Hardware considerations
+## <a href="" id="hardware"></a>Hardware considerations
 
 
-Careful consideration about which hardware vendor and specific models to purchase during your next hardware refresh is vitally important to the success of your organization’s Device Guard implementation efforts. In alignment with your current hardware life cycle, consider the process that is discussed in the [Approach enterprise code integrity deployment](#approach_enterprise) section when you determine the appropriate order of hardware replacement in your organization. Device Guard should be deployed in phases; therefore, you have time to methodically plan for its implementation.
+Careful consideration about which hardware vendor and specific models to purchase during your next hardware refresh is vitally important to the success of your organization’s Device Guard implementation efforts. In alignment with your current hardware life cycle, consider the process that is discussed in the [Approach enterprise code integrity deployment](#approach-enterprise) section when you determine the appropriate order of hardware replacement in your organization. Device Guard should be deployed in phases; therefore, you have time to methodically plan for its implementation.
 
 Different hardware features are required to implement the various features of Device Guard. There will likely be some individual features that you will be able to enable with your current hardware and some that you will not. However, for organizations that want to implement Device Guard in its entirety, several advanced hardware features will be required. For additional details about the hardware features that are required for Device Guard components, see the following table.
 
@@ -228,8 +228,8 @@ Different hardware features are required to implement the various features of De
 <td align="left"><p>UEFI firmware version 2.3.1 or higher with UEFI Secure Boot and Platform Secure Boot</p></td>
 <td align="left"><p>UEFI Secure Boot ensures that the device boots only authorized code. Additionally, Boot Integrity, also known as Platform Secure Boot must be supported. You can validate it against the following Windows Hardware Compatibility Program requirements:</p>
 <ul>
-<li><p>[System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system_fundamentals_firmware_uefisecureboot)</p></li>
-<li><p>[System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system_fundamentals_firmware_cs_uefisecureboot_connectedstandby)</p></li>
+<li><p>[System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system-fundamentals-firmware-uefisecureboot)</p></li>
+<li><p>[System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system-fundamentals-firmware-cs-uefisecureboot-connectedstandby)</p></li>
 </ul></td>
 </tr>
 <tr class="odd">
@@ -259,7 +259,7 @@ Different hardware features are required to implement the various features of De
 </tr>
 <tr class="odd">
 <td align="left"><p>Secure firmware update process</p></td>
-<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system_fundamentals_firmware_uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
+<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system-fundamentals-firmware-uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p>Signed processor microcode updates</p></td>
@@ -270,29 +270,29 @@ Different hardware features are required to implement the various features of De
 
  
 
-## Device Guard deployment
+## <a href="" id="dg-deployment"></a>Device Guard deployment
 
 
 In this section, you learn about the following topics:
 
--   [Configure hardware-based security features](#configure_hardware). This section explains how to enable the hardware-based security features in Device Guard. Also, you verify that the features are enabled by using both Windows Management Infrastructure (WMI) and Msinfo32.exe.
+-   [Configure hardware-based security features](#configure-hardware). This section explains how to enable the hardware-based security features in Device Guard. Also, you verify that the features are enabled by using both Windows Management Infrastructure (WMI) and Msinfo32.exe.
 
--   [Catalog files](#catalog_files). In this section, you create, sign, and deploy catalog files. You deploy the catalog files by using both Group Policy and System Center Configuration Manager. Also, you use System Center Configuration Manager to inventory the deployed catalog files for reporting purposes.
+-   [Catalog files](#catalog-files). In this section, you create, sign, and deploy catalog files. You deploy the catalog files by using both Group Policy and System Center Configuration Manager. Also, you use System Center Configuration Manager to inventory the deployed catalog files for reporting purposes.
 
--   [Code integrity policies](#code_integrity_policies). This section provides information on how to create, audit, service, merge, deploy, and remove signed and unsigned configurable code integrity policies.
+-   [Code integrity policies](#code-integrity-policies). This section provides information on how to create, audit, service, merge, deploy, and remove signed and unsigned configurable code integrity policies.
 
-## Configure hardware-based security features
+## <a href="" id="configure-hardware"></a>Configure hardware-based security features
 
 
 Hardware-based security features make up a large part of Device Guard security offerings. VBS reinforces the most important feature of Device Guard: configurable code integrity. There are three steps to configure hardware-based security features in Device Guard:
 
 1.  **Verify that hardware requirements are met and enabled**. Verify that your client machines possess the necessary hardware to run these features. A list of hardware requirements for the hardware-based security features is available in the [Hardware considerations](#hardware) section.
 
-2.  **Enable the necessary Windows features**. There are several ways to enable the Windows features required for hardware-based security. For details on which Windows features are needed, see the [Windows feature requirements for virtualization-based security](#vb_security) section.
+2.  **Enable the necessary Windows features**. There are several ways to enable the Windows features required for hardware-based security. For details on which Windows features are needed, see the [Windows feature requirements for virtualization-based security](#vb-security) section.
 
-3.  **Enable desired features**. When the necessary hardware and Windows features have been enabled, you are ready to enable the desired hardware-based security features. For UEFI Secure Boot, see the [Enable UEFI Secure Boot](#enable_secureboot) section. For information about how to enable VBS protection of the KMCI service, see the [Enable virtualization-based protection of kernel mode code integrity](#enable_virtualbased) section. Finally, for information about how to enable Credential Guard, see the [Enable Credential Guard](#enable_CG) section.
+3.  **Enable desired features**. When the necessary hardware and Windows features have been enabled, you are ready to enable the desired hardware-based security features. For UEFI Secure Boot, see the [Enable UEFI Secure Boot](#enable-secureboot) section. For information about how to enable VBS protection of the KMCI service, see the [Enable virtualization-based protection of kernel mode code integrity](#enable-virtualbased) section. Finally, for information about how to enable Credential Guard, see the [Enable Credential Guard](#enable-cg) section.
 
-### 
+### <a href="" id="vb-security"></a>
 
 **Windows feature requirements for virtualization-based security**
 
@@ -307,9 +307,9 @@ You can configure these features manually by using Windows PowerShell or Deploym
 
 Figure 1. Enable operating system features for VBS
 
-After you enable these features, you can configure any hardware-based security features you want. For information about how to enable virtualization-based protection of kernel-mode code integrity, see the [Enable virtualization-based protection of kernel-mode code integrity](#enable_virtualbased) section. For information about how to enable UEFI Secure Boot, see the [Enable Unified Extensible Firmware Interface Secure Boot](#enable_secureboot) section. Finally, for additional information about how to enable Credential Guard, see the [Enable Credential Guard](#enable_CG) section.
+After you enable these features, you can configure any hardware-based security features you want. For information about how to enable virtualization-based protection of kernel-mode code integrity, see the [Enable virtualization-based protection of kernel-mode code integrity](#enable-virtualbased) section. For information about how to enable UEFI Secure Boot, see the [Enable Unified Extensible Firmware Interface Secure Boot](#enable-secureboot) section. Finally, for additional information about how to enable Credential Guard, see the [Enable Credential Guard](#enable-cg) section.
 
-### 
+### <a href="" id="enable-secureboot"></a>
 
 **Enable Unified Extensible Firmware Interface Secure Boot**
 
@@ -341,7 +341,7 @@ Microsoft recommends that you test-enable this feature on a group of test machin
 
 **Use Group Policy to deploy Secure Boot**
 
-
+<a href="" id="bkmk-depsecureboot"></a>
 1.  To create a new GPO, right-click the OU to which you want to link the GPO, and then click **Create a GPO in this domain, and Link it here**.
 
     ![figure 2](images/dg-fig2-createou.png)
@@ -375,11 +375,11 @@ Microsoft recommends that you test-enable this feature on a group of test machin
 
     Processed Device Guard policies are logged in event viewer at Application and Services Logs\\Microsoft\\Windows\\DeviceGuard-GPEXT\\Operational. When the **Turn On Virtualization Based Security** policy is successfully processed, event ID 7000 is logged, which contains the selected settings within the policy.
 
-### 
+### <a href="" id="enable-virtualbased"></a>
 
 **Enable virtualization-based security of kernel-mode code integrity**
 
-Before you begin this process, verify that the desired computer meets the hardware requirements for VBS found in the [Hardware considerations](#hardware) section, and enable the Windows features discussed in the [Virtualization-based security Windows feature requirements](#vb_security) section. When validated, you can enable virtualization-based protection of KMCI in one of two ways: manual configuration of the appropriate registry subkeys and Group Policy deployment.
+Before you begin this process, verify that the desired computer meets the hardware requirements for VBS found in the [Hardware considerations](#hardware) section, and enable the Windows features discussed in the [Virtualization-based security Windows feature requirements](#vb-security) section. When validated, you can enable virtualization-based protection of KMCI in one of two ways: manual configuration of the appropriate registry subkeys and Group Policy deployment.
 
 **Note**  
 All drivers on the system must be compatible with virtualization-based protection of code integrity; otherwise, your system may fail. Microsoft recommends that you enable this feature on a group of test machines before you enable it on deployed machines.
@@ -433,13 +433,13 @@ To use Group Policy to configure VBS of KMCI:
 
     Processed Device Guard policies are logged in event viewer under Application and Services Logs\\Microsoft\\Windows\\DeviceGuard-GPEXT\\Operational. When the **Turn On Virtualization Based Security** policy has been successfully processed, event ID 7000 is logged, which contains the selected settings within the policy.
 
-### 
+### <a href="" id="enable-cg"></a>
 
 **Enable Credential Guard**
 
 Credential Guard provides an additional layer of credential protection specifically for domain users by storing the credentials within the virtualized container, away from both the kernel and user mode operating system. This makes it difficult for even a compromised system to obtain access to the credentials. In addition to the client-side enablement of Credential Guard, you can deploy additional mitigations at both the Certification Authority and domain controller level to prevent credential theft. Microsoft will be releasing details about these additional mitigations in the future.
 
-Before you begin this process, verify that the desired system meets the hardware requirements for VBS found in the [Hardware considerations](#hardware) section, and that you have enabled the Windows features laid out in the [Virtualization-based security Windows feature requirements](#vb_security) section. When validated, you can enable Credential Guard manually, by configuring the appropriate registry subkeys, or through Group Policy deployment.
+Before you begin this process, verify that the desired system meets the hardware requirements for VBS found in the [Hardware considerations](#hardware) section, and that you have enabled the Windows features laid out in the [Virtualization-based security Windows feature requirements](#vb-security) section. When validated, you can enable Credential Guard manually, by configuring the appropriate registry subkeys, or through Group Policy deployment.
 
 To configure VBS of Credential Guard manually:
 
@@ -610,20 +610,20 @@ The Enterprise edition of Windows 10 or Windows Server 2016 is required to crea
 
  
 
-### 
+### <a href="" id="create-catalog-files"></a>
 
 **Create catalog files**
 
 The creation of catalog files is the first step to add an unsigned application to a code integrity policy. To create a catalog file, copy each of the following commands into an elevated Windows PowerShell session, and then complete the steps:
 
 **Note**  
-When you establish a naming convention it makes it easier to detect deployed catalog files in the future. In this guide, you will use *\*-Contoso.cat* as the naming convention. For more information about why this practice is helpful to inventory or detect catalog files, see the [Inventory catalog files with System Center Configuration Manager](#inventory_cat_SCCM) section.
+When you establish a naming convention it makes it easier to detect deployed catalog files in the future. In this guide, you will use *\*-Contoso.cat* as the naming convention. For more information about why this practice is helpful to inventory or detect catalog files, see the [Inventory catalog files with System Center Configuration Manager](#inventory-cat-sccm) section.
 
  
 
 1.  Be sure that a code integrity policy is currently running in audit mode.
 
-    Package Inspector does not always detect installation files that have been removed from the machine during the installation process. To ensure that these binaries are also trusted, the code integrity policy that you created and audited in the [Create code integrity policies from golden PCs](#create_code_golden) and [Audit code integrity policies](#audit_code_integrity) sections should be deployed, in audit mode, to the system on which you are running Package Inspector.
+    Package Inspector does not always detect installation files that have been removed from the machine during the installation process. To ensure that these binaries are also trusted, the code integrity policy that you created and audited in the [Create code integrity policies from golden PCs](#create-code-golden) and [Audit code integrity policies](#audit-code-integrity) sections should be deployed, in audit mode, to the system on which you are running Package Inspector.
 
     **Note**  
     This process should **not** be performed on a system running an enforced Device Guard policy, only with a policy running in audit mode. If a policy is currently being enforced, you will not be able to install and run the application.
@@ -667,21 +667,21 @@ This scan catalogs the hash values for each discovered binary file. If the appli
 
  
 
-When finished, the files will be saved to your desktop. To trust this catalog file within a code integrity policy, the catalog must first be signed. Then, the signing certificate can be included in the code integrity policy, and the catalog file can be distributed to the individual client machines. Catalog files can be signed by using a certificate and SignTool.exe, a free tool available in the Windows SDK. For more information about signing catalog files with SignTool.exe, see the [Catalog signing with SignTool.exe](#catsign_signtool) section.
+When finished, the files will be saved to your desktop. To trust this catalog file within a code integrity policy, the catalog must first be signed. Then, the signing certificate can be included in the code integrity policy, and the catalog file can be distributed to the individual client machines. Catalog files can be signed by using a certificate and SignTool.exe, a free tool available in the Windows SDK. For more information about signing catalog files with SignTool.exe, see the [Catalog signing with SignTool.exe](#catsign-signtool) section.
 
-### 
+### <a href="" id="catsign-signtool"></a>
 
 **Catalog signing with SignTool.exe**
 
-Device Guard makes it easy for organizations to sign and trust existing unsigned LOB applications. In this section, you sign a catalog file you generated in a previous section by using PackageInspector.exe. For information about how to create catalog files, see the [Create catalog files](#create_catalog_files) section. In this example, you need the following:
+Device Guard makes it easy for organizations to sign and trust existing unsigned LOB applications. In this section, you sign a catalog file you generated in a previous section by using PackageInspector.exe. For information about how to create catalog files, see the [Create catalog files](#create-catalog-files) section. In this example, you need the following:
 
 -   SignTool.exe, found in the Windows software development kit (SDK—Windows 7 or later)
 
--   The catalog file that you generated in the [Create catalog files](#create_catalog_files) section, or another catalog file that you have created
+-   The catalog file that you generated in the [Create catalog files](#create-catalog-files) section, or another catalog file that you have created
 
 -   Internal certification authority (CA) code signing certificate or purchased code signing certificate
 
-If you do not have a code signing certificate, please see the [Create a Device Guard code signing certificate](#create_DG_code) section for a walkthrough of how to create one. In addition to using the certificate you create in the Create a Device Guard code signing certificate section, this example signs the catalog file that you created in the [Create catalog files](#create_catalog_files) section. If you are using an alternate certificate or catalog file, update the following steps with the appropriate variables and certificate. To sign the existing catalog file, copy each of the following commands into an elevated Windows PowerShell session:
+If you do not have a code signing certificate, please see the [Create a Device Guard code signing certificate](#create-dg-code) section for a walkthrough of how to create one. In addition to using the certificate you create in the Create a Device Guard code signing certificate section, this example signs the catalog file that you created in the [Create catalog files](#create-catalog-files) section. If you are using an alternate certificate or catalog file, update the following steps with the appropriate variables and certificate. To sign the existing catalog file, copy each of the following commands into an elevated Windows PowerShell session:
 
 1.  Initialize the variables that will be used:
 
@@ -710,11 +710,11 @@ If you do not have a code signing certificate, please see the [Create a Device G
     </table>
 
     **Note**  
-    In this example, you use the catalog file you created in the [Create catalog files](#create_catalog_files) section. If you are signing another catalog file, be sure to update the *$ExamplePath* and *$CatFileName* variables with the correct information.
+    In this example, you use the catalog file you created in the [Create catalog files](#create-catalog-files) section. If you are signing another catalog file, be sure to update the *$ExamplePath* and *$CatFileName* variables with the correct information.
 
      
 
-2.  Import the code signing certificate. Import the code signing certificate that will be used to sign the catalog file to the signing user’s personal store. In this example, you use the certificate that you created in the [Create a Device Guard code signing certificate](#create_DG_code) section.
+2.  Import the code signing certificate. Import the code signing certificate that will be used to sign the catalog file to the signing user’s personal store. In this example, you use the certificate that you created in the [Create a Device Guard code signing certificate](#create-dg-code) section.
 
 3.  Sign the catalog file with Signtool.exe:
 
@@ -750,14 +750,14 @@ If you do not have a code signing certificate, please see the [Create a Device G
 
     For testing purposes, you can manually copy signed catalog files to their intended folder. For large-scale implementations, Microsoft recommends that you use Group Policy File Preferences to copy the appropriate catalog files to all desired machines or an enterprise systems management product such as System Center Configuration Manager. Doing this simplifies the management of catalog versions, as well.
 
-### 
+### <a href="" id="deploy-cat-gp"></a>
 
 **Deploy catalog files with Group Policy**
 
 To simplify the management of catalog files, you can use Group Policy preferences to deploy catalog files to the appropriate PCs in your organization. The following process walks you through the deployment of a signed catalog file called LOBApp-Contoso.cat to a test OU called DG Enabled PCs with a GPO called **Contoso DG Catalog File GPO Test**.
 
 **Note**  
-This walkthrough requires that you have previously created a signed catalog file and have a Windows 10 client PC on which to test a Group Policy deployment. For more information about how to create and sign a catalog file, see the [Catalog files](#catalog_files) section.
+This walkthrough requires that you have previously created a signed catalog file and have a Windows 10 client PC on which to test a Group Policy deployment. For more information about how to create and sign a catalog file, see the [Catalog files](#catalog-files) section.
 
  
 
@@ -768,7 +768,7 @@ To deploy a catalog file with Group Policy:
 2.  Create a new GPO: right-click the DG Enabled PCs OU, and then click **Create a GPO in this domain, and Link it here**, as shown in Figure 13.
 
     **Note**  
-    The DG Enabled PCs OU is just an example of where to link the test GPO that you created in this section. You can use any OU name. Also, security group filtering is an option when you consider policy partitioning options based on the strategy discussed in the [Approach enterprise code integrity deployment](#approach_enterprise) section.
+    The DG Enabled PCs OU is just an example of where to link the test GPO that you created in this section. You can use any OU name. Also, security group filtering is an option when you consider policy partitioning options based on the strategy discussed in the [Approach enterprise code integrity deployment](#approach-enterprise) section.
 
      
 
@@ -803,7 +803,7 @@ To deploy a catalog file with Group Policy:
 9.  In the **Destination File** box, type **C:\\Windows\\System32\\catroot\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\LOBApp-Contoso.cat**.
 
     **Note**  
-    LOBApp-Contoso.cat is not a required catalog name: This name was used in the [Create catalog files](#create_catalog_files) section, and so it was used here, as well.
+    LOBApp-Contoso.cat is not a required catalog name: This name was used in the [Create catalog files](#create-catalog-files) section, and so it was used here, as well.
 
      
 
@@ -813,7 +813,7 @@ To deploy a catalog file with Group Policy:
 
 12. Close the Group Policy Management Editor, and then update the policy on the test Windows 10 machine by running GPUpdate.exe. When the policy has been updated, verify that the catalog file exists in C:\\Windows\\System32\\catroot\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} on the Windows 10 machine.
 
-### 
+### <a href="" id="deploy-cat-sccm"></a>
 
 **Deploy catalog files with System Center Configuration Manager**
 
@@ -890,7 +890,7 @@ After you create the deployment package, deploy it to a collection so that the c
 
 11. Close the wizard.
 
-### 
+### <a href="" id="inventory-cat-sccm"></a>
 
 **Inventory catalog files with System Center Configuration Manager**
 
@@ -954,7 +954,7 @@ If nothing is displayed in this view, navigate to Software\\Last Software Scan i
 ## Code integrity policies
 
 
-Code integrity policies maintain the standards by which a computer running Windows 10 determines whether an application is trustworthy and can be run. For an overview of code integrity, see the [Configurable code integrity](#config_code) section.
+Code integrity policies maintain the standards by which a computer running Windows 10 determines whether an application is trustworthy and can be run. For an overview of code integrity, see the [Configurable code integrity](#config-code) section.
 
 A common system imaging practice in today’s IT organization is to establish a “golden” image as a reference for what an ideal system should look like, and then use that image to clone additional company assets. Code integrity policies follow a similar methodology, that begins with the establishment of a golden PC. Like when imaging, you can have multiple golden PCs based on model, department, application set, and so on. Although the thought process around the creation of code integrity policies is similar to imaging, these policies should be maintained independently. Assess the necessity of additional code integrity policies based on what should be allowed to be installed and run and for whom.
 
@@ -970,7 +970,7 @@ The following section assumes that you will deploy code integrity policies as pa
 
  
 
-### 
+### <a href="" id="code-integrity-policy-rules"></a>
 
 **Code integrity policy rules**
 
@@ -1031,7 +1031,7 @@ When you create code integrity policies with the **New-CIPolicy** cmdlet, you ca
 
  
 
-### 
+### <a href="" id="create-code-golden"></a>
 
 **Create code integrity policies from golden PCs**
 
@@ -1064,7 +1064,7 @@ To create a code integrity policy, copy each of the following commands into an e
      
 
     **Note**  
-    You can add the *–Fallback* parameter to catch any applications not discovered using the primary file rule level specified by the *–Level* parameter. For more information about file rule level options, see the [Code integrity policy rules](#code_integrity_policy_rules) section.
+    You can add the *–Fallback* parameter to catch any applications not discovered using the primary file rule level specified by the *–Level* parameter. For more information about file rule level options, see the [Code integrity policy rules](#code-integrity-policy-rules) section.
 
      
 
@@ -1080,33 +1080,33 @@ To create a code integrity policy, copy each of the following commands into an e
 After you complete these steps, the Device Guard binary file (DeviceGuardPolicy.bin) and original .xml file (IntialScan.xml) will be available on your desktop. You can use the binary version as a code integrity policy or sign it for additional security.
 
 **Note**  
-Microsoft recommends that you keep the original .xml file of the policy for use when you need to merge the code integrity policy with another policy or update its rule options. Alternatively, you would have to create a new policy from a new scan for servicing. For more information about how to merge code integrity policies, see the [Merge code integrity policies](#merge_code_integrity) section.
+Microsoft recommends that you keep the original .xml file of the policy for use when you need to merge the code integrity policy with another policy or update its rule options. Alternatively, you would have to create a new policy from a new scan for servicing. For more information about how to merge code integrity policies, see the [Merge code integrity policies](#merge-code-integrity) section.
 
  
 
-Microsoft recommends that every code integrity policy be run in audit mode before being enforced. Doing so allows administrators to discover any issues with the policy without receiving error message dialog boxes. For information about how to audit a code integrity policy, see the [Audit code integrity policies](#audit_code_integrity) section.
+Microsoft recommends that every code integrity policy be run in audit mode before being enforced. Doing so allows administrators to discover any issues with the policy without receiving error message dialog boxes. For information about how to audit a code integrity policy, see the [Audit code integrity policies](#audit-code-integrity) section.
 
-### 
+### <a href="" id="audit-code-integrity"></a>
 
 **Audit code integrity policies**
 
 When code integrity policies are run in audit mode, it allows administrators to discover any applications that were missed during an initial policy scan and to identify any new applications that have been installed and run since the original policy was created. While a code integrity policy is running in audit mode, any binary that runs and would have been denied had the policy been enforced is logged in the Applications and Services Logs\\Microsoft\\CodeIntegrity\\Operational event log. When these logged binaries have been validated, they can easily be added to a new code integrity policy. When the new exception policy is created, you can merge it with your existing code integrity policies.
 
 **Note**  
-Before you begin this process, you need to create a code integrity policy binary file. If you have not already done so, see the [Create a code integrity policy](#create_code_golden) section for a step-by-step walkthrough of the process to create a code integrity policy and convert it to binary format.
+Before you begin this process, you need to create a code integrity policy binary file. If you have not already done so, see the [Create a code integrity policy](#create-code-golden) section for a step-by-step walkthrough of the process to create a code integrity policy and convert it to binary format.
 
  
 
 To audit a code integrity policy with local policy:
 
-1.  Copy the DeviceGuardPolicy.bin file that you created in the [Create code integrity policies from golden PCs](#create_code_golden) section to C:\\Windows\\System32\\CodeIntegrity.
+1.  Copy the DeviceGuardPolicy.bin file that you created in the [Create code integrity policies from golden PCs](#create-code-golden) section to C:\\Windows\\System32\\CodeIntegrity.
 
 2.  On the system you want to run in audit mode, open the Local Group Policy Editor by running **GPEdit.msc**.
 
 3.  Navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard, and then select **Deploy Code Integrity Policy**. Enable this setting by using the file path C:\\Windows\\System32\\CodeIntegrity\\DeviceGuardPolicy.bin, as shown in Figure 22.
 
     **Note**  
-    *DeviceGuardPolicy.bin* is not a required policy name. This name was simply used in the [Create code integrity policies from golden PCs](#create_code_golden) section and so was used here. Also, this policy file does not need to be copied to every system. Alternatively, you can copy the code integrity policies to a file share to which all computer accounts have access.
+    *DeviceGuardPolicy.bin* is not a required policy name. This name was simply used in the [Create code integrity policies from golden PCs](#create-code-golden) section and so was used here. Also, this policy file does not need to be copied to every system. Alternatively, you can copy the code integrity policies to a file share to which all computer accounts have access.
 
      
 
@@ -1134,18 +1134,18 @@ To audit a code integrity policy with local policy:
 
 6.  Validate any code integrity policy exceptions.
 
-    After you run a code integrity policy in audit mode, Microsoft recommends that each logged exception be researched and validated. In addition to discovering which application is causing the exception and ensuring that it should be added to the code integrity policy, be sure to check which file level should be used to trust each application. Although the Hash file rule level will catch all of these exceptions, it may not be the best way to trust all of the exceptions. For information about file rule levels and their purpose, see the [Code integrity policy rules](#code_integrity_policy_rules) section.
+    After you run a code integrity policy in audit mode, Microsoft recommends that each logged exception be researched and validated. In addition to discovering which application is causing the exception and ensuring that it should be added to the code integrity policy, be sure to check which file level should be used to trust each application. Although the Hash file rule level will catch all of these exceptions, it may not be the best way to trust all of the exceptions. For information about file rule levels and their purpose, see the [Code integrity policy rules](#code-integrity-policy-rules) section.
 
 7.  Create code integrity policy from audit events.
 
-    For information about how to create code integrity policies from audit events, see the [Create code integrity policies from golden PCs](#create_code_golden) section.
+    For information about how to create code integrity policies from audit events, see the [Create code integrity policies from golden PCs](#create-code-golden) section.
 
 **Note**  
 An alternative method to test a policy is to rename the test file to SIPolicy.p7b and drop it into C:\\Windows\\System32\\CodeIntegrity, rather than deploy it with the local machine policy.
 
  
 
-### 
+### <a href="" id="create-audit-code"></a>
 
 **Create an audit code integrity policy**
 
@@ -1159,7 +1159,7 @@ When you run code integrity policies in audit mode, validate any exceptions and
 
 2.  Analyze audit results.
 
-    Before you create a code integrity policy from audit events, Microsoft recommends that each exception be analyzed, as discussed in steps 5 and 6 of the [Audit code integrity policies](#audit_code_integrity) section.
+    Before you create a code integrity policy from audit events, Microsoft recommends that each exception be analyzed, as discussed in steps 5 and 6 of the [Audit code integrity policies](#audit-code-integrity) section.
 
 3.  Generate a new code integrity policy from logged audit events:
 
@@ -1170,21 +1170,21 @@ When you create policies from audit events, you should carefully consider the fi
 
  
 
-After you complete these steps, the Device Guard audit policy .xml file (DeviceGuardAuditPolicy.xml) will be available on your desktop. You can now use this file to update the existing code integrity policy that you ran in audit mode by merging the two policies. For instructions on how to merge this audit policy with the existing code integrity policy, see the [Merge code integrity policies](#merge_code_integrity) section.
+After you complete these steps, the Device Guard audit policy .xml file (DeviceGuardAuditPolicy.xml) will be available on your desktop. You can now use this file to update the existing code integrity policy that you ran in audit mode by merging the two policies. For instructions on how to merge this audit policy with the existing code integrity policy, see the [Merge code integrity policies](#merge-code-integrity) section.
 
 **Note**  
-You may have noticed that you did not generate a binary version of this policy as you did in the [Create code integrity policies from golden PCs](#create_code_golden) section. This is because code integrity policies created from an audit log are not intended to run as stand-alone policies but rather to update existing code integrity policies.
+You may have noticed that you did not generate a binary version of this policy as you did in the [Create code integrity policies from golden PCs](#create-code-golden) section. This is because code integrity policies created from an audit log are not intended to run as stand-alone policies but rather to update existing code integrity policies.
 
  
 
-### 
+### <a href="" id="merge-code-integrity"></a>
 
 **Merge code integrity policies**
 
 When you develop code integrity policies, you will occasionally need to merge two policies. A common example is when a code integrity policy is initially created and audited. Another example is when you create a single master policy by using multiple code integrity policies previously created from golden PCs. Because each Windows 10 machine can have only one code integrity policy, it is important to properly maintain these policies. In this example, audit events have been saved into a secondary code integrity policy that you then merge with the initial code integrity policy.
 
 **Note**  
-The following example uses the code integrity policy .xml files that you created in the [Create code integrity policies from golden PCs](#create_code_golden) and [Audit code integrity policies](#audit_code_integrity) sections. You can follow this process, however, with any two code integrity policies you would like to combine.
+The following example uses the code integrity policy .xml files that you created in the [Create code integrity policies from golden PCs](#create-code-golden) and [Audit code integrity policies](#audit-code-integrity) sections. You can follow this process, however, with any two code integrity policies you would like to combine.
 
  
 
@@ -1215,14 +1215,14 @@ To merge two code integrity policies, complete the following steps in an elevate
 
     ` ConvertFrom-CIPolicy $MergedCIPolicy $CIPolicyBin `
 
-Now that you have created a new code integrity policy called NewDeviceGuardPolicy.bin, you can deploy the policy to systems manually or by using Group Policy or Microsoft client management solutions. For information about how to deploy this new policy with Group Policy, see the [Deploy and manage code integrity policies with Group Policy](#deploy_manage_code_GP) section.
+Now that you have created a new code integrity policy called NewDeviceGuardPolicy.bin, you can deploy the policy to systems manually or by using Group Policy or Microsoft client management solutions. For information about how to deploy this new policy with Group Policy, see the [Deploy and manage code integrity policies with Group Policy](#deploy-manage-code-gp) section.
 
 **Enforce code integrity policies**
 
 Every code integrity policy is created with audit mode enabled. After you have successfully deployed and tested a code integrity policy in audit mode and are ready to test the policy in enforced mode, complete the following steps in an elevated Windows PowerShell session:
 
 **Note**  
-Every code integrity policy should be tested in audit mode first. For information about how to audit code integrity policies, see the [Audit code integrity policies](#audit_code_integrity) section.
+Every code integrity policy should be tested in audit mode first. For information about how to audit code integrity policies, see the [Audit code integrity policies](#audit-code-integrity) section.
 
  
 
@@ -1237,7 +1237,7 @@ Every code integrity policy should be tested in audit mode first. For informatio
     `$CIPolicyBin=$CIPolicyPath+"EnforcedDeviceGuardPolicy.bin"`
 
     **Note**  
-    The initial code integrity policy that this section referenced was created in the [Create code integrity polices from golden PCs](#create_code_golden) section. If you are using a different code integrity policy, update the **CIPolicyPath** and **InitialCIPolicy** variables.
+    The initial code integrity policy that this section referenced was created in the [Create code integrity polices from golden PCs](#create-code-golden) section. If you are using a different code integrity policy, update the **CIPolicyPath** and **InitialCIPolicy** variables.
 
      
 
@@ -1263,13 +1263,13 @@ Every code integrity policy should be tested in audit mode first. For informatio
 
      
 
-Now that this policy has been enforced, you can deploy it to your test machines. Rename the policy to SIPolicy.p7b and copy it to C:\\Windows\\System32\\CodeIntegrity for testing, or deploy the policy through Group Policy by following the instructions in the [Deploy and manage code integrity policies with Group Policy](#deploy_manage_code_GP) section, or through client management software by following the instructions in the section “Deploying and managing code integrity policies by using Microsoft client management solutions.”
+Now that this policy has been enforced, you can deploy it to your test machines. Rename the policy to SIPolicy.p7b and copy it to C:\\Windows\\System32\\CodeIntegrity for testing, or deploy the policy through Group Policy by following the instructions in the [Deploy and manage code integrity policies with Group Policy](#deploy-manage-code-gp) section, or through client management software by following the instructions in the section “Deploying and managing code integrity policies by using Microsoft client management solutions.”
 
 **Signing code integrity policies with SignTool.exe**
 
-Signed code integrity policies give organizations the highest level of malware protection available in Windows 10. In addition to their enforced policy rules, signed policies cannot be modified or deleted by a user or administrator on the machine. These policies are designed to prevent administrative tampering and kernel mode exploit access. With this in mind, it is much more difficult to remove signed code integrity policies than unsigned ones. Before you sign and deploy a signed code integrity policy, Microsoft recommends that you audit the policy to discover any blocked applications that should be allowed to run. For more information about how to audit code integrity policies, see the [Audit code integrity policies](#audit_code_integrity) section.
+Signed code integrity policies give organizations the highest level of malware protection available in Windows 10. In addition to their enforced policy rules, signed policies cannot be modified or deleted by a user or administrator on the machine. These policies are designed to prevent administrative tampering and kernel mode exploit access. With this in mind, it is much more difficult to remove signed code integrity policies than unsigned ones. Before you sign and deploy a signed code integrity policy, Microsoft recommends that you audit the policy to discover any blocked applications that should be allowed to run. For more information about how to audit code integrity policies, see the [Audit code integrity policies](#audit-code-integrity) section.
 
-Signing code integrity policies by using an on-premises CA-generated certificate or a purchased code signing certificate is straightforward. If you do not currently have a code signing certificate exported in .pfx format (containing private keys, extensions, and root certificates), see [Create a Device Guard code signing certificate](#create_DG_code) to create one with your on-premises CA. Before signing code integrity policies for the first time, be sure to enable rule options 9 and 10 to leave troubleshooting options available to test administrators. When validated and ready for enterprise deployment, you can remove these options. For information about how to add rule options, see the [Code integrity policy rules](#code_integrity_policy_rules) section.
+Signing code integrity policies by using an on-premises CA-generated certificate or a purchased code signing certificate is straightforward. If you do not currently have a code signing certificate exported in .pfx format (containing private keys, extensions, and root certificates), see [Create a Device Guard code signing certificate](#create-dg-code) to create one with your on-premises CA. Before signing code integrity policies for the first time, be sure to enable rule options 9 and 10 to leave troubleshooting options available to test administrators. When validated and ready for enterprise deployment, you can remove these options. For information about how to add rule options, see the [Code integrity policy rules](#code-integrity-policy-rules) section.
 
 **Note**  
 Signing code integrity policies is the last step in a code integrity deployment. It is much more difficult to remove a signed code integrity policy than an unsigned one. Before you deploy a signed code integrity policy to deployed client computers, be sure to test its effect on a subset of machines.
@@ -1278,24 +1278,24 @@ To sign a code integrity policy with SignTool.exe, you need the following compon
 
 -   SignTool.exe, found in the Windows SDK (Windows 7 or later)
 
--   The binary format of the code integrity policy that you generated in the [Create code integrity policies from golden PCs](#create_code_golden) section or another code integrity policy that you have created
+-   The binary format of the code integrity policy that you generated in the [Create code integrity policies from golden PCs](#create-code-golden) section or another code integrity policy that you have created
 
 -   An internal CA code signing certificate or a purchased code signing certificate
 
  
 
-If you do not have a code signing certificate, see the [Create a Device Guard code signing certificate](#create_DG_code) section for instructions on how to create one. If you use an alternate certificate or code integrity policy, be sure to update the following steps with the appropriate variables and certificate so that the commands will function properly. To sign the existing code integrity policy, copy each of the following commands into an elevated Windows PowerShell session:
+If you do not have a code signing certificate, see the [Create a Device Guard code signing certificate](#create-dg-code) section for instructions on how to create one. If you use an alternate certificate or code integrity policy, be sure to update the following steps with the appropriate variables and certificate so that the commands will function properly. To sign the existing code integrity policy, copy each of the following commands into an elevated Windows PowerShell session:
 
 1.  Initialize the variables that will be used:
 
     `$CIPolicyPath=$env:userprofile+"\Desktop\" $InitialCIPolicy=$CIPolicyPath+"InitialScan.xml" $CIPolicyBin=$CIPolicyPath+"DeviceGuardPolicy.bin"`
 
     **Note**  
-    This example uses the code integrity policy that you created in the [Create code integrity policies from golden PCs](#create_code_golden) section. If you are signing another policy, be sure to update the **$CIPolicyPath** and **$CIPolicyBin** variables with the correct information.
+    This example uses the code integrity policy that you created in the [Create code integrity policies from golden PCs](#create-code-golden) section. If you are signing another policy, be sure to update the **$CIPolicyPath** and **$CIPolicyBin** variables with the correct information.
 
      
 
-2.  Import the .pfx code signing certificate. Import the code signing certificate that you will use to sign the code integrity policy into the signing user’s personal store on the machine that will be doing the signing. In this example, you use the certificate that was created in the [Create a Device Guard code signing certificate](#create_DG_code) section.
+2.  Import the .pfx code signing certificate. Import the code signing certificate that you will use to sign the code integrity policy into the signing user’s personal store on the machine that will be doing the signing. In this example, you use the certificate that was created in the [Create a Device Guard code signing certificate](#create-dg-code) section.
 
 3.  Export the .cer code signing certificate. After the code signing certificate has been imported, export the .cer version to your desktop. This version will be added to the policy so that it can be updated later.
 
@@ -1313,7 +1313,7 @@ If you do not have a code signing certificate, see the [Create a Device Guard co
      
 
     **Note**  
-    Adding update signers is crucial to being able to modify or disable this policy in the future. For more information about how to disable signed code integrity policies, see the [Disable signed code integrity policies within Windows](#disable_signed_code) section.
+    Adding update signers is crucial to being able to modify or disable this policy in the future. For more information about how to disable signed code integrity policies, see the [Disable signed code integrity policies within Windows](#disable-signed-code) section.
 
      
 
@@ -1334,9 +1334,9 @@ If you do not have a code signing certificate, see the [Create a Device Guard co
 
      
 
-9.  Validate the signed file. When complete, the commands should output a signed policy file called DeviceGuardPolicy.bin.p7 to your desktop. You can deploy this file the same way you deploy an enforced or non-enforced policy. For information about how to deploy code integrity policies, see the [Deploy and manage code integrity policies with Group Policy](#deploy_manage_code_GP) section.
+9.  Validate the signed file. When complete, the commands should output a signed policy file called DeviceGuardPolicy.bin.p7 to your desktop. You can deploy this file the same way you deploy an enforced or non-enforced policy. For information about how to deploy code integrity policies, see the [Deploy and manage code integrity policies with Group Policy](#deploy-manage-code-gp) section.
 
-### 
+### <a href="" id="disable-unsigned-code"></a>
 
 **Disable unsigned code integrity policies**
 
@@ -1348,7 +1348,7 @@ There may come a time when an administrator wants to disable a code integrity po
 
 If the code integrity policy was deployed by using Group Policy, the GPO that is currently enabling and deploying the policy must be set to disabled. Then, the code integrity policy will be disabled on the next computer restart.
 
-### 
+### <a href="" id="disable-signed-code"></a>
 
 **Disable signed code integrity policies within Windows**
 
@@ -1407,7 +1407,7 @@ If the signed code integrity policy has been deployed using by using Group Polic
 
 6.  Restart the client computer.
 
-### 
+### <a href="" id="disable-signed-code-bios"></a>
 
 **Disable signed code integrity policies within the BIOS**
 
@@ -1417,14 +1417,14 @@ There may be a time when signed code integrity policies cause a boot failure. Be
 
 -   &lt;OS Volume&gt;\\Windows\\System32\\CodeIntegrity\\
 
-### 
+### <a href="" id="deploy-manage-code-gp"></a>
 
 **Deploy and manage code integrity policies with Group Policy**
 
 Code integrity policies can easily be deployed and managed with Group Policy. A Device Guard administrative template will be available in Windows Server 2016 that allows you to simplify deployment of Device Guard hardware-based security features and code integrity policies. The following procedure walks you through how to deploy a code integrity policy called **DeviceGuardPolicy.bin** to a test OU called *DG Enabled PCs* by using a GPO called **Contoso GPO Test**.
 
 **Note**  
-This walkthrough requires that you have previously created a code integrity policy and have a Windows 10 client PC on which to test a Group Policy deployment. For more information about how to create a code integrity policy, see the [Create code integrity polices from golden PCs](#create_code_golden) section.
+This walkthrough requires that you have previously created a code integrity policy and have a Windows 10 client PC on which to test a Group Policy deployment. For more information about how to create a code integrity policy, see the [Create code integrity polices from golden PCs](#create-code-golden) section.
 
  
 
@@ -1440,7 +1440,7 @@ To deploy and manage a code integrity policy with Group Policy:
 2.  Create a new GPO: right-click the DG Enabled PCs OU, and then click **Create a GPO in this domain, and Link it here**, as shown in Figure 24.
 
     **Note**  
-    The DG Enabled PCs OU is just an example of where to link the test GPO created in this section. Any OU name can be used. Also, security group filtering is an option when considering policy partitioning options based on the strategy discussed in the [Approach enterprise code integrity deployment](#approach_enterprise) section.
+    The DG Enabled PCs OU is just an example of where to link the test GPO created in this section. Any OU name can be used. Also, security group filtering is an option when considering policy partitioning options based on the strategy discussed in the [Approach enterprise code integrity deployment](#approach-enterprise) section.
 
      
 
@@ -1463,7 +1463,7 @@ To deploy and manage a code integrity policy with Group Policy:
     In this policy setting, you specify either the local path in which the policy will exist on the client computer or a Universal Naming Convention (UNC) path that the client computers will look to retrieve the latest version of the policy. This example copied the DeviceGuardPolicy.bin file onto the test machine and will enable this setting and use the file path C:\\Windows\\System32\\CodeIntegrity\\DeviceGuardPolicy.bin, as shown in Figure 26.
 
     **Note**  
-    *DeviceGuardPolicy.bin* is not a required policy name: It was simply used in the [Create code integrity policies from golden PCs](#create_code_golden) section and so is used here, as well. Also, this policy file does not need to be copied to every computer. Alternatively, you can copy the code integrity policies to a file share to which the computer accounts have access. Any policy selected here is converted to SIPolicy.p7b when it is deployed to the individual client computers.
+    *DeviceGuardPolicy.bin* is not a required policy name: It was simply used in the [Create code integrity policies from golden PCs](#create-code-golden) section and so is used here, as well. Also, this policy file does not need to be copied to every computer. Alternatively, you can copy the code integrity policies to a file share to which the computer accounts have access. Any policy selected here is converted to SIPolicy.p7b when it is deployed to the individual client computers.
 
      
 
@@ -1476,9 +1476,9 @@ To deploy and manage a code integrity policy with Group Policy:
 
      
 
-7.  Close the Group Policy Management Editor, and then restart the Windows 10 test machine. Restarting the client computer updates the code integrity policy. For information about how to audit code integrity policies, see the [Audit code integrity policies](#audit_code_integrity)section.
+7.  Close the Group Policy Management Editor, and then restart the Windows 10 test machine. Restarting the client computer updates the code integrity policy. For information about how to audit code integrity policies, see the [Audit code integrity policies](#audit-code-integrity)section.
 
-## Create a Device Guard code signing certificate
+## <a href="" id="create-dg-code"></a>Create a Device Guard code signing certificate
 
 
 To sign catalog files or code integrity policies internally, you will either need a publicly issued code signing certificate or an internal CA. If you have purchased a code signing certificate, you can skip these steps and proceed to the sections that outline the steps to sign catalog files and code integrity policies. If you have not purchased a certificate but have an internal CA, complete these steps to create a code signing certificate:
diff --git a/windows/keep-secure/devices-allow-undock-without-having-to-log-on.md b/windows/keep-secure/devices-allow-undock-without-having-to-log-on.md
index cb443361f2..49843788e3 100644
--- a/windows/keep-secure/devices-allow-undock-without-having-to-log-on.md
+++ b/windows/keep-secure/devices-allow-undock-without-having-to-log-on.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Devices: Allow undock without having to log on** security policy setting.
 
diff --git a/windows/keep-secure/devices-allowed-to-format-and-eject-removable-media.md b/windows/keep-secure/devices-allowed-to-format-and-eject-removable-media.md
index c2e8bd4249..bbbba7b1a9 100644
--- a/windows/keep-secure/devices-allowed-to-format-and-eject-removable-media.md
+++ b/windows/keep-secure/devices-allowed-to-format-and-eject-removable-media.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Devices: Allowed to format and eject removable media** security policy setting.
 
diff --git a/windows/keep-secure/devices-prevent-users-from-installing-printer-drivers.md b/windows/keep-secure/devices-prevent-users-from-installing-printer-drivers.md
index 2851b853ca..d889cd9862 100644
--- a/windows/keep-secure/devices-prevent-users-from-installing-printer-drivers.md
+++ b/windows/keep-secure/devices-prevent-users-from-installing-printer-drivers.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Devices: Prevent users from installing printer drivers** security policy setting.
 
diff --git a/windows/keep-secure/devices-restrict-cd-rom-access-to-locally-logged-on-user-only.md b/windows/keep-secure/devices-restrict-cd-rom-access-to-locally-logged-on-user-only.md
index fa515fc94a..19d46590a7 100644
--- a/windows/keep-secure/devices-restrict-cd-rom-access-to-locally-logged-on-user-only.md
+++ b/windows/keep-secure/devices-restrict-cd-rom-access-to-locally-logged-on-user-only.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Devices: Restrict CD-ROM access to locally logged-on user only** security policy setting.
 
diff --git a/windows/keep-secure/devices-restrict-floppy-access-to-locally-logged-on-user-only.md b/windows/keep-secure/devices-restrict-floppy-access-to-locally-logged-on-user-only.md
index d2ec599915..d735ea91f0 100644
--- a/windows/keep-secure/devices-restrict-floppy-access-to-locally-logged-on-user-only.md
+++ b/windows/keep-secure/devices-restrict-floppy-access-to-locally-logged-on-user-only.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Devices: Restrict floppy access to locally logged-on user only** security policy setting.
 
diff --git a/windows/keep-secure/domain-controller-allow-server-operators-to-schedule-tasks.md b/windows/keep-secure/domain-controller-allow-server-operators-to-schedule-tasks.md
index f8af633efd..7b1fd9e1e2 100644
--- a/windows/keep-secure/domain-controller-allow-server-operators-to-schedule-tasks.md
+++ b/windows/keep-secure/domain-controller-allow-server-operators-to-schedule-tasks.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain controller: Allow server operators to schedule tasks** security policy setting.
 
diff --git a/windows/keep-secure/domain-controller-ldap-server-signing-requirements.md b/windows/keep-secure/domain-controller-ldap-server-signing-requirements.md
index a0ba29b738..c738022dc9 100644
--- a/windows/keep-secure/domain-controller-ldap-server-signing-requirements.md
+++ b/windows/keep-secure/domain-controller-ldap-server-signing-requirements.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain controller: LDAP server signing requirements** security policy setting.
 
diff --git a/windows/keep-secure/domain-controller-refuse-machine-account-password-changes.md b/windows/keep-secure/domain-controller-refuse-machine-account-password-changes.md
index cccb5c1260..73a3ae3e12 100644
--- a/windows/keep-secure/domain-controller-refuse-machine-account-password-changes.md
+++ b/windows/keep-secure/domain-controller-refuse-machine-account-password-changes.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain controller: Refuse machine account password changes** security policy setting.
 
diff --git a/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md b/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md
index b391e3e9d5..868b665784 100644
--- a/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md
+++ b/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain member: Digitally encrypt or sign secure channel data (always)** security policy setting.
 
diff --git a/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data--when-possible.md b/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data--when-possible.md
index b209b3562a..fbba924e28 100644
--- a/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data--when-possible.md
+++ b/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data--when-possible.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain member: Digitally encrypt secure channel data (when possible)** security policy setting.
 
diff --git a/windows/keep-secure/domain-member-digitally-sign-secure-channel-data--when-possible.md b/windows/keep-secure/domain-member-digitally-sign-secure-channel-data--when-possible.md
index 0d5c3a2332..e8bd830e73 100644
--- a/windows/keep-secure/domain-member-digitally-sign-secure-channel-data--when-possible.md
+++ b/windows/keep-secure/domain-member-digitally-sign-secure-channel-data--when-possible.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain member: Digitally sign secure channel data (when possible)** security policy setting.
 
diff --git a/windows/keep-secure/domain-member-disable-machine-account-password-changes.md b/windows/keep-secure/domain-member-disable-machine-account-password-changes.md
index 578578e4c8..8b84d0fc1e 100644
--- a/windows/keep-secure/domain-member-disable-machine-account-password-changes.md
+++ b/windows/keep-secure/domain-member-disable-machine-account-password-changes.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain member: Disable machine account password changes** security policy setting.
 
diff --git a/windows/keep-secure/domain-member-maximum-machine-account-password-age.md b/windows/keep-secure/domain-member-maximum-machine-account-password-age.md
index e0b22b778c..0801f31f06 100644
--- a/windows/keep-secure/domain-member-maximum-machine-account-password-age.md
+++ b/windows/keep-secure/domain-member-maximum-machine-account-password-age.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain member: Maximum machine account password age** security policy setting.
 
diff --git a/windows/keep-secure/domain-member-require-strong--windows-2000-or-later--session-key.md b/windows/keep-secure/domain-member-require-strong--windows-2000-or-later--session-key.md
index 8da88af6de..2b89ada53e 100644
--- a/windows/keep-secure/domain-member-require-strong--windows-2000-or-later--session-key.md
+++ b/windows/keep-secure/domain-member-require-strong--windows-2000-or-later--session-key.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Domain member: Require strong (Windows 2000 or later) session key** security policy setting.
 
diff --git a/windows/keep-secure/edit-an-applocker-policy.md b/windows/keep-secure/edit-an-applocker-policy.md
index f0bcd16f5a..b878d37679 100644
--- a/windows/keep-secure/edit-an-applocker-policy.md
+++ b/windows/keep-secure/edit-an-applocker-policy.md
@@ -21,11 +21,11 @@ You can edit an AppLocker policy by adding, changing, or removing rules. However
 
 There are two methods you can use to edit an AppLocker policy:
 
--   [Editing an AppLocker policy by using Group Policy](#BKMK_EditAppPolinGPO)
+-   [Editing an AppLocker policy by using Group Policy](#bkmk-editapppolingpo)
 
--   [Editing an AppLocker policy by using the Local Security Policy snap-in](#BKMK_EditAppLolNotinGPO)
+-   [Editing an AppLocker policy by using the Local Security Policy snap-in](#bkmk-editapplolnotingpo)
 
-## Editing an AppLocker policy by using Group Policy
+## <a href="" id="bkmk-editapppolingpo"></a>Editing an AppLocker policy by using Group Policy
 
 
 The steps to edit an AppLocker policy distributed by Group Policy include the following:
@@ -79,7 +79,7 @@ If you are performing these steps by using Microsoft Advanced Group Policy Manag
 
  
 
-## Editing an AppLocker policy by using the Local Security Policy snap-in
+## <a href="" id="bkmk-editapplolnotingpo"></a>Editing an AppLocker policy by using the Local Security Policy snap-in
 
 
 The steps to edit an AppLocker policy distributed by using the Local Security Policy snap-in (secpol.msc) include the following tasks.
diff --git a/windows/keep-secure/edit-applocker-rules.md b/windows/keep-secure/edit-applocker-rules.md
index 12ac2bb42d..e5b8372c9d 100644
--- a/windows/keep-secure/edit-applocker-rules.md
+++ b/windows/keep-secure/edit-applocker-rules.md
@@ -19,7 +19,7 @@ This topic for IT professionals describes the steps to edit a publisher rule, pa
 
 For more info about these rule types, see [Understanding AppLocker rule condition types](understanding-applocker-rule-condition-types.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To edit a publisher rule**
 
diff --git a/windows/keep-secure/enable-computer-and-user-accounts-to-be-trusted-for-delegation.md b/windows/keep-secure/enable-computer-and-user-accounts-to-be-trusted-for-delegation.md
index 6cefff341a..8090dfa54f 100644
--- a/windows/keep-secure/enable-computer-and-user-accounts-to-be-trusted-for-delegation.md
+++ b/windows/keep-secure/enable-computer-and-user-accounts-to-be-trusted-for-delegation.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Enable computer and user accounts to be trusted for delegation** security policy setting.
 
diff --git a/windows/keep-secure/enable-the-dll-rule-collection.md b/windows/keep-secure/enable-the-dll-rule-collection.md
index 5f82db0de2..903c1b67bf 100644
--- a/windows/keep-secure/enable-the-dll-rule-collection.md
+++ b/windows/keep-secure/enable-the-dll-rule-collection.md
@@ -21,7 +21,7 @@ The DLL rule collection includes the .dll and .ocx file formats.
 
 For info about these rules, see [DLL rules in AppLocker](dll-rules-in-applocker.md).
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To enable the DLL rule collection**
 
diff --git a/windows/keep-secure/enforce-password-history.md b/windows/keep-secure/enforce-password-history.md
index 82553b7f9e..d90d752a2e 100644
--- a/windows/keep-secure/enforce-password-history.md
+++ b/windows/keep-secure/enforce-password-history.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Enforce password history** security policy setting.
 
diff --git a/windows/keep-secure/enforce-user-logon-restrictions.md b/windows/keep-secure/enforce-user-logon-restrictions.md
index 2b45042b13..8a1e9597e0 100644
--- a/windows/keep-secure/enforce-user-logon-restrictions.md
+++ b/windows/keep-secure/enforce-user-logon-restrictions.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Enforce user logon restrictions** security policy setting.
 
diff --git a/windows/keep-secure/force-shutdown-from-a-remote-system.md b/windows/keep-secure/force-shutdown-from-a-remote-system.md
index d32a5e1385..c201c10080 100644
--- a/windows/keep-secure/force-shutdown-from-a-remote-system.md
+++ b/windows/keep-secure/force-shutdown-from-a-remote-system.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Force shutdown from a remote system** security policy setting.
 
diff --git a/windows/keep-secure/generate-security-audits.md b/windows/keep-secure/generate-security-audits.md
index 514c108690..b9bebd4989 100644
--- a/windows/keep-secure/generate-security-audits.md
+++ b/windows/keep-secure/generate-security-audits.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Generate security audits** security policy setting.
 
diff --git a/windows/keep-secure/get-started-with-windows-defender-for-windows-10.md b/windows/keep-secure/get-started-with-windows-defender-for-windows-10.md
index 33a0ae5169..ab5f005d1c 100644
--- a/windows/keep-secure/get-started-with-windows-defender-for-windows-10.md
+++ b/windows/keep-secure/get-started-with-windows-defender-for-windows-10.md
@@ -17,9 +17,9 @@ author: brianlic-msft
 
 **In this article**
 
--   [Manage Windows Defender endpoints through Active Directory and WSUS](#manage_windows_defender_endpoints_through_active_directory_and_wsus)
--   [Apply updates to Windows Defender endpoints](#apply_updates_to_windows_defender_endpoints)
--   [Related topics](#related_topics)
+-   [Manage Windows Defender endpoints through Active Directory and WSUS](#manage-windows-defender-endpoints-through-active-directory-and-wsus)
+-   [Apply updates to Windows Defender endpoints](#apply-updates-to-windows-defender-endpoints)
+-   [Related topics](#related-topics)
 
 IT professionals can manage Windows Defender on Windows 10 endpoints in their organization using Microsoft Active Directory or Windows Server Update Services (WSUS), and apply updates to endpoints.
 
diff --git a/windows/keep-secure/getting-apps-to-run-on-device-guard-protected-devices.md b/windows/keep-secure/getting-apps-to-run-on-device-guard-protected-devices.md
index e70f3f209d..ba3bee945a 100644
--- a/windows/keep-secure/getting-apps-to-run-on-device-guard-protected-devices.md
+++ b/windows/keep-secure/getting-apps-to-run-on-device-guard-protected-devices.md
@@ -18,11 +18,11 @@ author: brianlic-msft
 
 **In this article**
 
--   [What you need to run your apps on Device-Guard protected devices](#what_you_need_to_run_your_apps_on_device-guard_protected_devices)
--   [Create a catalog file for unsigned apps](#create_a_catalog_file_for_unsigned_apps)
--   [Sign your catalog file using Sign Tool](#sign_your_catalog_file_using_sign_tool)
--   [Troubleshooting the Package Inspector](#troubleshooting_the_package_inspector)
--   [Related topics](#related_topics)
+-   [What you need to run your apps on Device-Guard protected devices](#what-you-need-to-run-your-apps-on-device-guard-protected-devices)
+-   [Create a catalog file for unsigned apps](#create-a-catalog-file-for-unsigned-apps)
+-   [Sign your catalog file using Sign Tool](#sign-your-catalog-file-using-sign-tool)
+-   [Troubleshooting the Package Inspector](#troubleshooting-the-package-inspector)
+-   [Related topics](#related-topics)
 
 Windows 10 introduces several new features and settings that when combined all equal what we're calling, Device Guard. Device Guard can help to protect your enterprise devices against the accidental running of malicious apps by requiring all of your apps to be signed by a trusted entity.
 
@@ -314,7 +314,7 @@ You must make sure that you clear the cache by creating and setting a new tempor
     cp .\DenyPackageInspector.bin C:\Windows\System32\SIPolicy.p7b
     ```
 
-3.  Restart your device and follow the steps in the [Create a catalog file for unsigned apps](#create_a_catalog_file_for_unsigned_apps) section.
+3.  Restart your device and follow the steps in the [Create a catalog file for unsigned apps](#create-a-catalog-file-for-unsigned-apps) section.
 
 ## Related topics
 
diff --git a/windows/keep-secure/how-to-configure-security-policy-settings.md b/windows/keep-secure/how-to-configure-security-policy-settings.md
index 65dd987ced..b8f0b7c5c0 100644
--- a/windows/keep-secure/how-to-configure-security-policy-settings.md
+++ b/windows/keep-secure/how-to-configure-security-policy-settings.md
@@ -17,10 +17,10 @@ author: brianlic-msft
 
 **In this article**
 
--   [To configure a setting using the Local Security Policy console](#BKMK_Local)
--   [To configure a security policy setting using the Local Group Policy Editor console](#BKMK_Domain)
--   [To configure a setting for a domain controller](#BKMK_DC)
--   [Related topics](#related_topics)
+-   [To configure a setting using the Local Security Policy console](#bkmk-local)
+-   [To configure a security policy setting using the Local Group Policy Editor console](#bkmk-domain)
+-   [To configure a setting for a domain controller](#bkmk-dc)
+-   [Related topics](#related-topics)
 
 Describes steps to configure a security policy setting on the local device, on a domain-joined device, and on a domain controller.
 
@@ -28,7 +28,7 @@ You must have Administrators rights on the local device, or you must have the ap
 
 When a local setting is inaccessible, it indicates that a GPO currently controls that setting.
 
-## To configure a setting using the Local Security Policy console
+## <a href="" id="bkmk-local"></a>To configure a setting using the Local Security Policy console
 
 
 1.  To open Local Security Policy, on the **Start** screen, type **secpol.msc**, and then press ENTER.
@@ -50,7 +50,7 @@ When a local setting is inaccessible, it indicates that a GPO currently controls
 
      
 
-## To configure a security policy setting using the Local Group Policy Editor console
+## <a href="" id="bkmk-domain"></a>To configure a security policy setting using the Local Group Policy Editor console
 
 
 You must have the appropriate permissions to install and use the Microsoft Management Console (MMC), and to update a Group Policy Object (GPO) on the domain controller to perform these procedures.
@@ -78,7 +78,7 @@ You must have the appropriate permissions to install and use the Microsoft Manag
 
  
 
-## To configure a setting for a domain controller
+## <a href="" id="bkmk-dc"></a>To configure a setting for a domain controller
 
 
 The following procedure describes how to configure a security policy setting for only a domain controller (from the domain controller).
diff --git a/windows/keep-secure/impersonate-a-client-after-authentication.md b/windows/keep-secure/impersonate-a-client-after-authentication.md
index eb3e4dfefb..8b1483c9fa 100644
--- a/windows/keep-secure/impersonate-a-client-after-authentication.md
+++ b/windows/keep-secure/impersonate-a-client-after-authentication.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Impersonate a client after authentication** security policy setting.
 
diff --git a/windows/keep-secure/implement-microsoft-passport-in-your-organization.md b/windows/keep-secure/implement-microsoft-passport-in-your-organization.md
index 2175dcb0ae..62e8486943 100644
--- a/windows/keep-secure/implement-microsoft-passport-in-your-organization.md
+++ b/windows/keep-secure/implement-microsoft-passport-in-your-organization.md
@@ -19,11 +19,11 @@ author: brianlic-msft
 
 **In this article**
 
--   [Group Policy settings for Passport](#group_policy_settings_for_passport)
--   [MDM policy settings for Passport](#mdm_policy_settings_for_passport)
+-   [Group Policy settings for Passport](#group-policy-settings-for-passport)
+-   [MDM policy settings for Passport](#mdm-policy-settings-for-passport)
 -   [Prerequisites](#prerequisites)
--   [Passport for BYOD](#passport_for_byod)
--   [Related topics](#related_topics)
+-   [Passport for BYOD](#passport-for-byod)
+-   [Related topics](#related-topics)
 
 You can create a Group Policy or mobile device management (MDM) policy that will implement Microsoft Passport on devices running Windows 10.
 
@@ -121,7 +121,7 @@ Require uppercase letters
 
 **Disabled**: Users cannot include an uppercase letter in their PIN.
 
-[Remote Passport](prepare-people-to-use-microsoft-passport.md#BMK_remote)
+[Remote Passport](prepare-people-to-use-microsoft-passport.md#bmk-remote)
 Use Remote Passport
 
 **Note**  Applies to desktop only. Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants.
@@ -242,9 +242,9 @@ UseRemotePassport
 
 Device or user
 False
-True: [Remote Passport](prepare-people-to-use-microsoft-passport.md#BMK_remote) is enabled.
+True: [Remote Passport](prepare-people-to-use-microsoft-passport.md#bmk-remote) is enabled.
 
-False: [Remote Passport](prepare-people-to-use-microsoft-passport.md#BMK_remote) is disabled.
+False: [Remote Passport](prepare-people-to-use-microsoft-passport.md#bmk-remote) is disabled.
 
  
 
diff --git a/windows/keep-secure/increase-a-process-working-set.md b/windows/keep-secure/increase-a-process-working-set.md
index 8571c8e851..b89d544572 100644
--- a/windows/keep-secure/increase-a-process-working-set.md
+++ b/windows/keep-secure/increase-a-process-working-set.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Increase a process working set** security policy setting.
 
diff --git a/windows/keep-secure/increase-scheduling-priority.md b/windows/keep-secure/increase-scheduling-priority.md
index 6b95be4eff..2c04849e21 100644
--- a/windows/keep-secure/increase-scheduling-priority.md
+++ b/windows/keep-secure/increase-scheduling-priority.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Increase scheduling priority** security policy setting.
 
diff --git a/windows/keep-secure/index.md b/windows/keep-secure/index.md
index df645b3995..e2d29ec8bd 100644
--- a/windows/keep-secure/index.md
+++ b/windows/keep-secure/index.md
@@ -58,7 +58,7 @@ Learn about keeping Windows 10 and Windows 10 Mobile secure.
 </tr>
 <tr class="even">
 <td align="left"><p>[Protect derived domain credentials with Credential Guard](credential-guard.md)</p></td>
-<td align="left"><p>Introduced in Windows 10 Enterprise, Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket by protecting NTLM password hashes and Kerberos Ticket Granting Tickets.</p></td>
+<td align="left"><p>Introduced in Windows 10 Enterprise, Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Credential Guard prevents these attacks by protecting NTLM password hashes and Kerberos Ticket Granting Tickets.</p></td>
 </tr>
 <tr class="odd">
 <td align="left"><p>[Use Windows Event Forwarding to help with intrusion detection](use-windows-event-forwarding-to-assist-in-instrusion-detection.md)</p></td>
diff --git a/windows/keep-secure/initialize-and-configure-ownership-of-the-tpm.md b/windows/keep-secure/initialize-and-configure-ownership-of-the-tpm.md
index 6820750d6f..741bc28561 100644
--- a/windows/keep-secure/initialize-and-configure-ownership-of-the-tpm.md
+++ b/windows/keep-secure/initialize-and-configure-ownership-of-the-tpm.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 This topic for the IT professional describes how to initialize and set the ownership the Trusted Platform Module (TPM), turn the TPM on and off, and clear TPM keys. It also explains how to troubleshoot issues that you might encounter as a result of using these procedures.
 
-## About TPM initialization and ownership
+## <a href="" id="bkmk-init"></a>About TPM initialization and ownership
 
 
 The TPM must be initialized and ownership must be taken before it can be used to help secure your computer. The owner of the TPM is the user who possesses the owner password and is able to set it and change it. Only one owner password exists per TPM. The owner of the TPM can make full use of TPM capabilities. Taking ownership of the TPM can be done as part of the initialization process.
@@ -26,17 +26,17 @@ When you start the TPM Initialization Wizard, which is accessed through the TPM
 
 This topic contains procedures for the following tasks:
 
--   [Initialize the TPM and set ownership](#BKMK_InitializeTPM)
+-   [Initialize the TPM and set ownership](#bkmk-initializetpm)
 
--   [Troubleshoot TPM initialization](#BKMK_TroubleshootInit)
+-   [Troubleshoot TPM initialization](#bkmk-troubleshootinit)
 
--   [Turn on or turn off the TPM](#BKMK_onoff)
+-   [Turn on or turn off the TPM](#bkmk-onoff)
 
--   [Clear all the keys from the TPM](#BKMK_clear1)
+-   [Clear all the keys from the TPM](#bkmk-clear1)
 
--   [Use the TPM cmdlets](#BKMK_TPMcmdlets)
+-   [Use the TPM cmdlets](#bkmk-tpmcmdlets)
 
-## Initialize the TPM and set ownership
+## <a href="" id="bkmk-initializetpm"></a>Initialize the TPM and set ownership
 
 
 Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. In addition, the computer must be equipped with a Trusted Computing Group-compliant BIOS.
@@ -50,7 +50,7 @@ Membership in the local Administrators group, or equivalent, is the minimum requ
 3.  If the TPM has never been initialized or is turned off, the TPM Initialization Wizard displays the **Turn on the TPM security hardware** dialog box. This dialog box provides guidance for initializing or turning on the TPM. Follow the instructions in the wizard.
 
     **Note**  
-    If the TPM is already turned on, the TPM Initialization Wizard displays the **Create the TPM owner password** dialog box. Skip the remainder of this procedure and continue with the [To set ownership of the TPM](#BKMK_SetOwnership) procedure.
+    If the TPM is already turned on, the TPM Initialization Wizard displays the **Create the TPM owner password** dialog box. Skip the remainder of this procedure and continue with the [To set ownership of the TPM](#bkmk-setownership) procedure.
 
      
 
@@ -78,7 +78,7 @@ To finish initializing the TPM for use, you must set an owner for the TPM. The p
 
 **To set ownership of the TPM**
 
-1.  If you are not continuing immediately from the last procedure, start the TPM Initialization Wizard. If you need to review the steps to do so, see the previous procedure [To start the TPM Initialization Wizard](#BKMK_StartTPMinitWizard).
+1.  If you are not continuing immediately from the last procedure, start the TPM Initialization Wizard. If you need to review the steps to do so, see the previous procedure [To start the TPM Initialization Wizard](#bkmk-starttpminitwizard).
 
 2.  In the **Create the TPM owner password** dialog box, click **Automatically create the password (recommended)**.
 
@@ -112,7 +112,7 @@ To finish initializing the TPM for use, you must set an owner for the TPM. The p
 
      
 
-## Troubleshoot TPM initialization
+## <a href="" id="bkmk-troubleshootinit"></a>Troubleshoot TPM initialization
 
 
 Managing the Trusted Platform Module (TPM) is usually a straightforward procedure. If are unable to complete the initialization procedure, review the following information:
@@ -150,7 +150,7 @@ Managing the Trusted Platform Module (TPM) is usually a straightforward procedur
 
      
 
--   If the TPM has been previously initialized and you do not have the owner password, you may have to clear or reset the TPM to the factory default values. For more information, see [Clear all the keys from the TPM](#BKMK_clear1).
+-   If the TPM has been previously initialized and you do not have the owner password, you may have to clear or reset the TPM to the factory default values. For more information, see [Clear all the keys from the TPM](#bkmk-clear1).
 
     **Caution**  
     Clearing the TPM can result in data loss. To avoid data loss, make sure that you have a backup or recovery method for any data that is protected or encrypted by the TPM.
@@ -173,12 +173,12 @@ In either case, an error message appears, and you cannot complete the initializa
 
 Some systems may have multiple TPMs and the active TPM may be toggled in the BIOS. Windows 10 does not support this behavior. If you switch TPMs, functionality that depends on the TPM will not work with the new TPM unless it is cleared and put through provisioning. Performing this clear may cause data loss, in particular of keys and certificates associated with the previous TPM. For example, toggling TPMs will cause Bitlocker to enter recovery mode. It is strongly recommended that, on systems with two TPMs, one TPM is selected to be used and the selection is not changed.
 
-## Turn on or turn off the TPM
+## <a href="" id="bkmk-onoff"></a>Turn on or turn off the TPM
 
 
 Normally, the TPM is turned on as part of the TPM initialization process. You do not normally need to turn the TPM on or off. However, if necessary you can do so by using the TPM MMC.
 
-### Turn on the TPM
+### <a href="" id="turn-on-the-tpm-"></a>Turn on the TPM
 
 If the TPM has been initialized but has never been used, or if you want to use the TPM after you have turned it off, you can use the following procedure to turn on the TPM.
 
@@ -192,7 +192,7 @@ If the TPM has been initialized but has never been used, or if you want to use t
 
     After the computer restarts, but before you sign in to Windows, you will be prompted to accept the reconfiguration of the TPM. This ensures that the user has physical access to the computer and that malicious software is not attempting to make changes to the TPM.
 
-### Turn off the TPM
+### <a href="" id="turn-off-the-tpm-"></a>Turn off the TPM
 
 If you want to stop using the services that are provided by the TPM, you can use the TPM MMC to turn off the TPM. If you have the TPM owner password, physical access to the computer is not required to turn off the TPM. If you do not have the TPM owner password, you must have physical access to the computer to turn off the TPM.
 
@@ -210,7 +210,7 @@ If you want to stop using the services that are provided by the TPM, you can use
 
     -   If you do not know your TPM owner password, click **I do not have the TPM owner password**, and follow the instructions that are provided in the dialog box and subsequent BIOS screens to turn off the TPM without entering the password.
 
-## Clear all the keys from the TPM
+## <a href="" id="bkmk-clear1"></a>Clear all the keys from the TPM
 
 
 Clearing the TPM resets it to an unowned state. After clearing the TPM, you need to complete the TPM initialization process before using software that relies on the TPM, such as BitLocker Drive Encryption. By default, the TPM is initialized automatically.
@@ -256,7 +256,7 @@ Membership in the local Administrators group, or equivalent, is the minimum requ
 
     The status of your TPM is displayed under **Status** in TPM MMC.
 
-## Use the TPM cmdlets
+## <a href="" id="bkmk-tpmcmdlets"></a>Use the TPM cmdlets
 
 
 If you are using Windows PowerShell to manage your computers, you can also manage the TPM by using Windows PowerShell. To install the TPM cmdlets, type the following command:
@@ -268,7 +268,7 @@ For details about the individual cmdlets, see [TPM Cmdlets in Windows PowerShell
 ## Additional resources
 
 
-For more info about TPM, see [Trusted Platform Module Technology Overview](trusted-platform-module-technology-overview.md#BKMK_AdditionalResources).
+For more info about TPM, see [Trusted Platform Module Technology Overview](trusted-platform-module-technology-overview.md#bkmk-additionalresources).
 
  
 
diff --git a/windows/keep-secure/installing-digital-certificates-on-windows-10-mobile.md b/windows/keep-secure/installing-digital-certificates-on-windows-10-mobile.md
index fa9a207f95..76b8b703ea 100644
--- a/windows/keep-secure/installing-digital-certificates-on-windows-10-mobile.md
+++ b/windows/keep-secure/installing-digital-certificates-on-windows-10-mobile.md
@@ -18,10 +18,10 @@ author: brianlic-msft
 
 **In this article**
 
--   [Install certificates using Internet Explorer](#install_certificates_using_internet_explorer)
--   [Install certificates using email](#install_certificates_using_email)
--   [Install certificates using mobile device management (MDM)](#install_certificates_using_mobile_device_management__mdm_)
--   [Related topics](#related_topics)
+-   [Install certificates using Internet Explorer](#install-certificates-using-internet-explorer)
+-   [Install certificates using email](#install-certificates-using-email)
+-   [Install certificates using mobile device management (MDM)](#install-certificates-using-mobile-device-management--mdm-)
+-   [Related topics](#related-topics)
 
 Digital certificates bind the identity of a user or computer to a pair of keys that can be used to encrypt and sign digital information. Certificates are issued by a certification authority (CA) that vouches for the identity of the certificate holder, and they enable secure client communications with websites and services.
 
diff --git a/windows/keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md b/windows/keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md
index fb6820cfbe..d7a596056b 100644
--- a/windows/keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md
+++ b/windows/keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Interactive logon: Display user information when the session is locked** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md b/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md
index a56171b97b..0f56b85970 100644
--- a/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md
+++ b/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Interactive logon: Do not display last user name** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-do-not-require-ctrl-alt-del.md b/windows/keep-secure/interactive-logon-do-not-require-ctrl-alt-del.md
index 71380ed60c..ace634e3cc 100644
--- a/windows/keep-secure/interactive-logon-do-not-require-ctrl-alt-del.md
+++ b/windows/keep-secure/interactive-logon-do-not-require-ctrl-alt-del.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Interactive logon: Do not require CTRL+ALT+DEL** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-machine-account-lockout-threshold.md b/windows/keep-secure/interactive-logon-machine-account-lockout-threshold.md
index db067c7d3c..760a19fd48 100644
--- a/windows/keep-secure/interactive-logon-machine-account-lockout-threshold.md
+++ b/windows/keep-secure/interactive-logon-machine-account-lockout-threshold.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management, and security considerations for the **Interactive logon: Machine account lockout threshold** security policy setting.
 
@@ -37,7 +37,7 @@ Failed password attempts on workstations or member servers that have been locked
 
 You can set the **invalid logon attempts** value between 1 and 999. Values from 1 to 3 are interpreted as 4. If you set the value to 0, or leave blank, the computer or device will never be locked as a result of this policy setting.
 
-### Best practices
+### <a href="" id="bkmk-bestpractices"></a>Best practices
 
 Use this policy setting in conjunction with your other failed account logon attempts policy. For example, if the [Account lockout threshold](account-lockout-threshold.md) policy setting is set at 4, then setting **Interactive logon: Machine account lockout threshold** at 6 allows the user to restore access to resources without having to restore access to the device resulting from a BitLocker lock out.
 
diff --git a/windows/keep-secure/interactive-logon-machine-inactivity-limit.md b/windows/keep-secure/interactive-logon-machine-inactivity-limit.md
index 7a59fe20bd..2fcef3d8e2 100644
--- a/windows/keep-secure/interactive-logon-machine-inactivity-limit.md
+++ b/windows/keep-secure/interactive-logon-machine-inactivity-limit.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management, and security considerations for the **Interactive logon: Machine inactivity limit** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-message-text-for-users-attempting-to-log-on.md b/windows/keep-secure/interactive-logon-message-text-for-users-attempting-to-log-on.md
index e1c12b8959..587ca5a72e 100644
--- a/windows/keep-secure/interactive-logon-message-text-for-users-attempting-to-log-on.md
+++ b/windows/keep-secure/interactive-logon-message-text-for-users-attempting-to-log-on.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management, and security considerations for the **Interactive logon: Message text for users attempting to log on** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-message-title-for-users-attempting-to-log-on.md b/windows/keep-secure/interactive-logon-message-title-for-users-attempting-to-log-on.md
index a15627e5fa..85aa67ffbf 100644
--- a/windows/keep-secure/interactive-logon-message-title-for-users-attempting-to-log-on.md
+++ b/windows/keep-secure/interactive-logon-message-title-for-users-attempting-to-log-on.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Interactive logon: Message title for users attempting to log on** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md b/windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md
index e732280971..b1223a95a3 100644
--- a/windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md
+++ b/windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Interactive logon: Number of previous logons to cache (in case domain controller is not available)** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-prompt-user-to-change-password-before-expiration.md b/windows/keep-secure/interactive-logon-prompt-user-to-change-password-before-expiration.md
index 555f1f9fb8..afaf12f2f1 100644
--- a/windows/keep-secure/interactive-logon-prompt-user-to-change-password-before-expiration.md
+++ b/windows/keep-secure/interactive-logon-prompt-user-to-change-password-before-expiration.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Interactive logon: Prompt user to change password before expiration** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md b/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md
index 82694f484f..5686105d6e 100644
--- a/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md
+++ b/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Interactive logon: Require Domain Controller authentication to unlock workstation** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-require-smart-card.md b/windows/keep-secure/interactive-logon-require-smart-card.md
index 79e788892e..28f82c0eff 100644
--- a/windows/keep-secure/interactive-logon-require-smart-card.md
+++ b/windows/keep-secure/interactive-logon-require-smart-card.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Interactive logon: Require smart card** security policy setting.
 
diff --git a/windows/keep-secure/interactive-logon-smart-card-removal-behavior.md b/windows/keep-secure/interactive-logon-smart-card-removal-behavior.md
index 45a2ccc82b..a92e17a6ea 100644
--- a/windows/keep-secure/interactive-logon-smart-card-removal-behavior.md
+++ b/windows/keep-secure/interactive-logon-smart-card-removal-behavior.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Interactive logon: Smart card removal behavior** security policy setting.
 
diff --git a/windows/keep-secure/load-and-unload-device-drivers.md b/windows/keep-secure/load-and-unload-device-drivers.md
index c6fdb2f8bb..8a28296a0f 100644
--- a/windows/keep-secure/load-and-unload-device-drivers.md
+++ b/windows/keep-secure/load-and-unload-device-drivers.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Load and unload device drivers** security policy setting.
 
diff --git a/windows/keep-secure/lock-pages-in-memory.md b/windows/keep-secure/lock-pages-in-memory.md
index c50b635bbb..ed755f625f 100644
--- a/windows/keep-secure/lock-pages-in-memory.md
+++ b/windows/keep-secure/lock-pages-in-memory.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Lock pages in memory** security policy setting.
 
diff --git a/windows/keep-secure/log-on-as-a-batch-job.md b/windows/keep-secure/log-on-as-a-batch-job.md
index 4dc6a414dc..d3ae984616 100644
--- a/windows/keep-secure/log-on-as-a-batch-job.md
+++ b/windows/keep-secure/log-on-as-a-batch-job.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Log on as a batch job** security policy setting.
 
diff --git a/windows/keep-secure/log-on-as-a-service.md b/windows/keep-secure/log-on-as-a-service.md
index 7e59e654fb..dda592fd8a 100644
--- a/windows/keep-secure/log-on-as-a-service.md
+++ b/windows/keep-secure/log-on-as-a-service.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Log on as a service** security policy setting.
 
diff --git a/windows/keep-secure/maintain-applocker-policies.md b/windows/keep-secure/maintain-applocker-policies.md
index 414005ff42..edc7834283 100644
--- a/windows/keep-secure/maintain-applocker-policies.md
+++ b/windows/keep-secure/maintain-applocker-policies.md
@@ -33,9 +33,9 @@ Common AppLocker maintenance scenarios include:
 
 There are two methods you can use to maintain AppLocker policies:
 
--   [Maintaining AppLocker policies by using Group Policy](#BKMK_AppLkr_Use_GP)
+-   [Maintaining AppLocker policies by using Group Policy](#bkmk-applkr-use-gp)
 
--   [Maintaining AppLocker policies on the local computer](#BKMK_AppLkr_Use_LocSnapin)
+-   [Maintaining AppLocker policies on the local computer](#bkmk-applkr-use-locsnapin)
 
 As new apps are deployed or existing apps are removed by your organization or updated by the software publisher, you might need to make revisions to your rules and update the Group Policy Object (GPO) to ensure that your policy is current.
 
@@ -46,7 +46,7 @@ You should not edit an AppLocker rule collection while it is being enforced in G
 
  
 
-## Maintaining AppLocker policies by using Group Policy
+## <a href="" id="bkmk-applkr-use-gp"></a>Maintaining AppLocker policies by using Group Policy
 
 
 For every scenario, the steps to maintain an AppLocker policy distributed by Group Policy include the following tasks.
@@ -85,7 +85,7 @@ After testing, import the AppLocker policy back into the GPO for implementation.
 
 After deploying a policy, evaluate the policy's effectiveness.
 
-## Maintaining AppLocker policies by using the Local Security Policy snap-in
+## <a href="" id="bkmk-applkr-use-locsnapin"></a>Maintaining AppLocker policies by using the Local Security Policy snap-in
 
 
 For every scenario, the steps to maintain an AppLocker policy by using the Local Group Policy Editor or the Local Security Policy snap-in include the following tasks.
diff --git a/windows/keep-secure/manage-auditing-and-security-log.md b/windows/keep-secure/manage-auditing-and-security-log.md
index 790b808273..7b520ae9d3 100644
--- a/windows/keep-secure/manage-auditing-and-security-log.md
+++ b/windows/keep-secure/manage-auditing-and-security-log.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Manage auditing and security log** security policy setting.
 
diff --git a/windows/keep-secure/manage-identity-verification-using-microsoft-passport.md b/windows/keep-secure/manage-identity-verification-using-microsoft-passport.md
index 4cf37232e2..982188c6e2 100644
--- a/windows/keep-secure/manage-identity-verification-using-microsoft-passport.md
+++ b/windows/keep-secure/manage-identity-verification-using-microsoft-passport.md
@@ -19,11 +19,11 @@ author: brianlic-msft
 
 **In this article**
 
--   [Benefits of Microsoft Passport](#benefits_of_microsoft_passport)
--   [How Microsoft Passport works: key points](#how_microsoft_passport_works__key_points)
--   [Comparing key-based and certificate-based authentication](#comparing_key-based_and_certificate-based_authentication)
--   [Learn more](#learn_more)
--   [Related topics](#related_topics)
+-   [Benefits of Microsoft Passport](#benefits-of-microsoft-passport)
+-   [How Microsoft Passport works: key points](#how-microsoft-passport-works--key-points)
+-   [Comparing key-based and certificate-based authentication](#comparing-key-based-and-certificate-based-authentication)
+-   [Learn more](#learn-more)
+-   [Related topics](#related-topics)
 
 In Windows 10, Microsoft Passport replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and a Windows Hello (biometric) or PIN.
 
@@ -66,7 +66,7 @@ Imagine that someone is looking over your shoulder as you get money from an ATM
 
 Passport helps protect user identities and user credentials. Because no passwords are used, it helps circumvent phishing and brute force attacks. It also helps prevent server breaches because Passport credentials are an asymmetric key pair, which helps prevent replay attacks when these keys are generated within isolated environments of TPMs.
 
-Microsoft Passport also enables Windows 10 Mobile devices to be used as [a remote credential](prepare-people-to-use-microsoft-passport.md#BMK_remote) when signing into Windows 10 PCs. During the sign-in process, the Windows 10 PC can connect using Bluetooth to access Microsoft Passport on the user’s Windows 10 Mobile device. Because users carry their phone with them, Microsoft Passport makes implementing two-factor authentication across the enterprise less costly and complex than other solutions.
+Microsoft Passport also enables Windows 10 Mobile devices to be used as [a remote credential](prepare-people-to-use-microsoft-passport.md#bmk-remote) when signing into Windows 10 PCs. During the sign-in process, the Windows 10 PC can connect using Bluetooth to access Microsoft Passport on the user’s Windows 10 Mobile device. Because users carry their phone with them, Microsoft Passport makes implementing two-factor authentication across the enterprise less costly and complex than other solutions.
 
 **Note**  Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants.
 
diff --git a/windows/keep-secure/manage-packaged-apps-with-applocker.md b/windows/keep-secure/manage-packaged-apps-with-applocker.md
index e22d3f55e4..0db2b96b96 100644
--- a/windows/keep-secure/manage-packaged-apps-with-applocker.md
+++ b/windows/keep-secure/manage-packaged-apps-with-applocker.md
@@ -29,7 +29,7 @@ AppLocker supports only publisher rules for packaged apps. All packaged apps mus
 
 Typically, an app consists of multiple components: the installer that is used to install the app, and one or more exes, dlls, or scripts. With classic Windows apps, not all these components always share common attributes such as the software’s publisher name, product name, and product version. Therefore, AppLocker controls each of these components separately through different rule collections, such as exe, dll, script, and Windows Installer rules. In contrast, all the components of a packaged app share the same publisher name, package name, and package version attributes. Therefore, you can control an entire app with a single rule.
 
-### Comparing classic Windows apps and packaged apps
+### <a href="" id="bkmk-compareclassicmetro"></a>Comparing classic Windows apps and packaged apps
 
 AppLocker policies for packaged apps can only be applied to apps installed on computers running at least Windows Server 2012 or Windows 8, but classic Windows apps can be controlled on devices running at least Windows Server 2008 R2 or Windows 7. The rules for classic Windows apps and packaged apps can be enforced in tandem. The differences between packaged apps and classic Windows apps that you should consider include:
 
diff --git a/windows/keep-secure/manage-tpm-commands.md b/windows/keep-secure/manage-tpm-commands.md
index d7ea8add94..d833568317 100644
--- a/windows/keep-secure/manage-tpm-commands.md
+++ b/windows/keep-secure/manage-tpm-commands.md
@@ -17,16 +17,16 @@ author: brianlic-msft
 
 This topic for the IT professional describes how to manage which Trusted Platform Module (TPM) commands are available to domain users and to local users.
 
-## 
+## <a href="" id="bkmk-commands1"></a>
 
 
 After a computer user takes ownership of the TPM, the TPM owner can limit which TPM commands can be run by creating a list of blocked TPM commands. The list can be created and applied to all computers in a domain by using Group Policy, or a list can be created for individual computers by using the TPM MMC. Because some hardware vendors might provide additional commands or the Trusted Computing Group may decide to add commands in the future, the TPM MMC also supports the ability to block new commands.
 
-Domain administrators can configure a list of blocked TPM commands by using Group Policy. Local administrators cannot allow TPM commands that are blocked through Group Policy. For more information about this Group Policy setting, see [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md#BKMK_tpmgp_clbtc).
+Domain administrators can configure a list of blocked TPM commands by using Group Policy. Local administrators cannot allow TPM commands that are blocked through Group Policy. For more information about this Group Policy setting, see [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md#bkmk-tpmgp-clbtc).
 
 Local administrators can block commands by using the TPM MMC, and commands on the default block list are also blocked unless the Group Policy settings are changed from the default settings.
 
-Two policy settings control the enforcement which allows TPM commands to run. For more information about these policy settings, see [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md#BKMK_tpmgp_idlb).
+Two policy settings control the enforcement which allows TPM commands to run. For more information about these policy settings, see [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md#bkmk-tpmgp-idlb).
 
 The following procedures describe how to manage the TPM command lists. You must be a member of the local Administrators group.
 
@@ -82,7 +82,7 @@ The following procedures describe how to manage the TPM command lists. You must
 
 4.  In the **Command Number** text box, type the number of the new command that you want to block, and then click **OK**. The command number you entered is added to the blocked list.
 
-## Use the TPM cmdlets
+## <a href="" id="bkmk-tpmcmdlets"></a>Use the TPM cmdlets
 
 
 If you are using Windows PowerShell to manage your computers, you can also manage the TPM by using Windows PowerShell. To install the TPM cmdlets, type the following command:
@@ -94,7 +94,7 @@ For details about the individual cmdlets, see [TPM Cmdlets in Windows PowerShell
 ## Additional resources
 
 
-For more info about TPM, see [Trusted Platform Module technology overview](trusted-platform-module-technology-overview.md#BKMK_AdditionalResources).
+For more info about TPM, see [Trusted Platform Module technology overview](trusted-platform-module-technology-overview.md#bkmk-additionalresources).
 
  
 
diff --git a/windows/keep-secure/manage-tpm-lockout.md b/windows/keep-secure/manage-tpm-lockout.md
index fcce268307..cd4748f94d 100644
--- a/windows/keep-secure/manage-tpm-lockout.md
+++ b/windows/keep-secure/manage-tpm-lockout.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 This topic for the IT professional describes how to manage the lockout feature for the Trusted Platform Module (TPM) in Windows.
 
-## About TPM lockout
+## <a href="" id="bkmk-lockout1"></a>About TPM lockout
 
 
 The TPM will lock itself to prevent tampering or malicious attacks. TPM lockout often lasts for a variable amount of time or until the computer is turned off. While the TPM is in lockout mode, it generally returns an error message when it receives commands that require an authorization value. One exception is that the TPM always allows the owner at least one attempt to reset the TPM lockout when it is in lockout mode.
@@ -59,21 +59,21 @@ The TPM Group Policy settings in the following list are located at:
 
 **Computer Configuration\\Administrative Templates\\System\\Trusted Platform Module Services\\**
 
--   [Standard User Lockout Duration](trusted-platform-module-services-group-policy-settings.md#BKMK_Individual)
+-   [Standard User Lockout Duration](trusted-platform-module-services-group-policy-settings.md#bkmk-individual)
 
     This policy setting allows you to manage the duration in minutes for counting standard user authorization failures for TPM commands that require authorization. An authorization failure occurs each time a user sends a command to the TPM and receives an error message that indicates an authorization failure occurred. Authorization failures that are older than the duration you set are ignored. If the number of TPM commands with an authorization failure within the lockout duration equals a threshold, the user is prevented from sending commands to the TPM that require authorization.
 
--   [Standard User Individual Lockout Threshold](trusted-platform-module-services-group-policy-settings.md#BKMK_tpmgp_suld)
+-   [Standard User Individual Lockout Threshold](trusted-platform-module-services-group-policy-settings.md#bkmk-tpmgp-suld)
 
     This policy setting allows you to manage the maximum number of authorization failures for the TPM for each user. This value is the maximum number of authorization failures that each user can have before the user is not allowed to send commands to the TPM that require authorization. If the number of authorization failures equals the duration that is set for the policy setting, the user is prevented from sending commands to the TPM that require authorization.
 
--   [Standard User Total Lockout Threshold](trusted-platform-module-services-group-policy-settings.md#BKMK_Total)
+-   [Standard User Total Lockout Threshold](trusted-platform-module-services-group-policy-settings.md#bkmk-total)
 
     This policy setting allows you to manage the maximum number of authorization failures for the TPM for all standard users. If the total number of authorization failures for all users equals the duration that is set for the policy, all users are prevented from sending commands to the TPM that require authorization.
 
-For information about mitigating dictionary attacks that use the lockout settings, see [TPM fundamentals](tpm-fundamentals-windows-8.md#BKMK_HowTPMmitigates).
+For information about mitigating dictionary attacks that use the lockout settings, see [TPM fundamentals](tpm-fundamentals-windows-8.md#bkmk-howtpmmitigates).
 
-## Use the TPM cmdlets
+## <a href="" id="bkmk-tpmcmdlets"></a>Use the TPM cmdlets
 
 
 If you are using Windows PowerShell to manage your computers, you can also manage the TPM by using Windows PowerShell. To install the TPM cmdlets, type the following command:
@@ -85,7 +85,7 @@ For details about the individual cmdlets, see [TPM Cmdlets in Windows PowerShell
 ## Additional resources
 
 
-For more info about TPM, see [TPM technology overview](trusted-platform-module-technology-overview.md#BKMK_AdditionalResources).
+For more info about TPM, see [TPM technology overview](trusted-platform-module-technology-overview.md#bkmk-additionalresources).
 
  
 
diff --git a/windows/keep-secure/maximum-lifetime-for-service-ticket.md b/windows/keep-secure/maximum-lifetime-for-service-ticket.md
index 468220e102..f10a2388a0 100644
--- a/windows/keep-secure/maximum-lifetime-for-service-ticket.md
+++ b/windows/keep-secure/maximum-lifetime-for-service-ticket.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Maximum lifetime for service ticket** security policy setting.
 
diff --git a/windows/keep-secure/maximum-lifetime-for-user-ticket-renewal.md b/windows/keep-secure/maximum-lifetime-for-user-ticket-renewal.md
index 997636766b..02b454e1be 100644
--- a/windows/keep-secure/maximum-lifetime-for-user-ticket-renewal.md
+++ b/windows/keep-secure/maximum-lifetime-for-user-ticket-renewal.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Maximum lifetime for user ticket renewal** security policy setting.
 
diff --git a/windows/keep-secure/maximum-lifetime-for-user-ticket.md b/windows/keep-secure/maximum-lifetime-for-user-ticket.md
index c2fa9dcfe8..5369012f1e 100644
--- a/windows/keep-secure/maximum-lifetime-for-user-ticket.md
+++ b/windows/keep-secure/maximum-lifetime-for-user-ticket.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Maximum lifetime for user ticket** policy setting.
 
diff --git a/windows/keep-secure/maximum-password-age.md b/windows/keep-secure/maximum-password-age.md
index 7637387b0b..c27fdd455f 100644
--- a/windows/keep-secure/maximum-password-age.md
+++ b/windows/keep-secure/maximum-password-age.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Maximum password age** security policy setting.
 
diff --git a/windows/keep-secure/maximum-tolerance-for-computer-clock-synchronization.md b/windows/keep-secure/maximum-tolerance-for-computer-clock-synchronization.md
index a514fe5f0a..f8f79f84bf 100644
--- a/windows/keep-secure/maximum-tolerance-for-computer-clock-synchronization.md
+++ b/windows/keep-secure/maximum-tolerance-for-computer-clock-synchronization.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Maximum tolerance for computer clock synchronization** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--always.md b/windows/keep-secure/microsoft-network-client-digitally-sign-communications--always.md
index e3b2a88584..64163e2632 100644
--- a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--always.md
+++ b/windows/keep-secure/microsoft-network-client-digitally-sign-communications--always.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Microsoft network client: Digitally sign communications (always)** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--if-server-agrees.md b/windows/keep-secure/microsoft-network-client-digitally-sign-communications--if-server-agrees.md
index 2aa0518b53..8d35639bcc 100644
--- a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--if-server-agrees.md
+++ b/windows/keep-secure/microsoft-network-client-digitally-sign-communications--if-server-agrees.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Microsoft network client: Digitally sign communications (if server agrees)** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md b/windows/keep-secure/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md
index 779903570f..10c2b01f17 100644
--- a/windows/keep-secure/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md
+++ b/windows/keep-secure/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Microsoft network client: Send unencrypted password to third-party SMB servers** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md b/windows/keep-secure/microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md
index 3eab4db737..2ef6e8aff2 100644
--- a/windows/keep-secure/microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md
+++ b/windows/keep-secure/microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Microsoft network server: Amount of idle time required before suspending session** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md b/windows/keep-secure/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md
index b3eb315014..52f56df697 100644
--- a/windows/keep-secure/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md
+++ b/windows/keep-secure/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management, and security considerations for the **Microsoft network server: Attempt S4U2Self to obtain claim information** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--always.md b/windows/keep-secure/microsoft-network-server-digitally-sign-communications--always.md
index f72ee069f2..1958cb3d0d 100644
--- a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--always.md
+++ b/windows/keep-secure/microsoft-network-server-digitally-sign-communications--always.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Microsoft network server: Digitally sign communications (always)** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--if-client-agrees.md b/windows/keep-secure/microsoft-network-server-digitally-sign-communications--if-client-agrees.md
index 7bb55132a9..b1175da29e 100644
--- a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--if-client-agrees.md
+++ b/windows/keep-secure/microsoft-network-server-digitally-sign-communications--if-client-agrees.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Microsoft network server: Digitally sign communications (if client agrees)** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-server-disconnect-clients-when-logon-hours-expire.md b/windows/keep-secure/microsoft-network-server-disconnect-clients-when-logon-hours-expire.md
index e85fdefc6e..5645bc96b5 100644
--- a/windows/keep-secure/microsoft-network-server-disconnect-clients-when-logon-hours-expire.md
+++ b/windows/keep-secure/microsoft-network-server-disconnect-clients-when-logon-hours-expire.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Microsoft network server: Disconnect clients when logon hours expire** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-network-server-server-spn-target-name-validation-level.md b/windows/keep-secure/microsoft-network-server-server-spn-target-name-validation-level.md
index 5ee2152c28..7f3351eca4 100644
--- a/windows/keep-secure/microsoft-network-server-server-spn-target-name-validation-level.md
+++ b/windows/keep-secure/microsoft-network-server-server-spn-target-name-validation-level.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, and values, policy management and security considerations for the **Microsoft network server: Server SPN target name validation level** security policy setting.
 
diff --git a/windows/keep-secure/microsoft-passport-errors-during-pin-creation.md b/windows/keep-secure/microsoft-passport-errors-during-pin-creation.md
index 3442d53d2e..8116bf4c11 100644
--- a/windows/keep-secure/microsoft-passport-errors-during-pin-creation.md
+++ b/windows/keep-secure/microsoft-passport-errors-during-pin-creation.md
@@ -19,10 +19,10 @@ author: brianlic-msft
 
 **In this article**
 
--   [Where is the error code?](#where_is_the_error_code_)
--   [Error mitigations](#error_mitigations)
--   [Errors with unknown mitigation](#errors_with_unknown_mitigation)
--   [Related topics](#related_topics)
+-   [Where is the error code?](#where-is-the-error-code-)
+-   [Error mitigations](#error-mitigations)
+-   [Errors with unknown mitigation](#errors-with-unknown-mitigation)
+-   [Related topics](#related-topics)
 
 When you set up Microsoft Passport in Windows 10, you may get an error during the **Create a work PIN** step. This topic lists some of the error codes with recommendations for mitigating the problem. If you get an error code that is not listed here, contact Microsoft Support.
 
@@ -44,9 +44,9 @@ When a user encounters an error when creating the work PIN, advise the user to t
 
 3.  Reboot the device and then try to create the PIN again.
 
-4.  Unjoin the device from Azure Active Directory (Azure AD), rejoin, and then try to create the PIN again.
+4.  Unjoin the device from Azure Active Directory (Azure AD), rejoin, and then try to create the PIN again. To unjoin a desktop PC, go to **Settings** &gt; **System** &gt; **About** and select **Disconnect from organization**. To unjoin a device running Windows 10 Mobile, you must [reset the device](http://go.microsoft.com/fwlink/p/?LinkId=715697).
 
-5.  On mobile devices, if you are unable to setup a PIN after multiple attempts, reset your device and start over. For help on how to reset your phone go to [Reset my phone](http://go.microsoft.com/fwlink/p/?LinkId=715697)
+5.  On mobile devices, if you are unable to setup a PIN after multiple attempts, reset your device and start over. For help on how to reset your phone go to [Reset my phone](http://go.microsoft.com/fwlink/p/?LinkId=715697).
 
 If the error occurs again, check the error code against the following table to see if there is another mitigation for that error. When no mitigation is listed in the table, contact Microsoft Support for assistance.
 
@@ -151,17 +151,17 @@ If the error occurs again, check the error code against the following table to s
 <tr class="odd">
 <td align="left">0x801C0016</td>
 <td align="left">The federation provider configuration is empty</td>
-<td align="left">Go to [http://clientconfig.microsoftonline-p.net/FPURL.xml](http://clientconfig.microsoftonline-p.net/FPURL.xml" class="uri) and verify that the file is not empty.</td>
+<td align="left">Go to [http://clientconfig.microsoftonline-p.net/FPURL.xml](http://clientconfig.microsoftonline-p.net/FPURL.xml) and verify that the file is not empty.</td>
 </tr>
 <tr class="even">
 <td align="left">0x801C0017</td>
 <td align="left">​The federation provider domain is empty</td>
-<td align="left">Go to [http://clientconfig.microsoftonline-p.net/FPURL.xml](http://clientconfig.microsoftonline-p.net/FPURL.xml" class="uri) and verify that the FPDOMAINNAME element is not empty.</td>
+<td align="left">Go to [http://clientconfig.microsoftonline-p.net/FPURL.xml](http://clientconfig.microsoftonline-p.net/FPURL.xml) and verify that the FPDOMAINNAME element is not empty.</td>
 </tr>
 <tr class="odd">
 <td align="left">0x801C0018</td>
 <td align="left">The federation provider client configuration URL is empty</td>
-<td align="left">Go to [http://clientconfig.microsoftonline-p.net/FPURL.xml](http://clientconfig.microsoftonline-p.net/FPURL.xml" class="uri) and verify that the CLIENTCONFIG element contains a valid URL.</td>
+<td align="left">Go to [http://clientconfig.microsoftonline-p.net/FPURL.xml](http://clientconfig.microsoftonline-p.net/FPURL.xml) and verify that the CLIENTCONFIG element contains a valid URL.</td>
 </tr>
 <tr class="even">
 <td align="left">0x801C03E9</td>
diff --git a/windows/keep-secure/microsoft-passport-guide.md b/windows/keep-secure/microsoft-passport-guide.md
index 275089764a..c1d916fa4e 100644
--- a/windows/keep-secure/microsoft-passport-guide.md
+++ b/windows/keep-secure/microsoft-passport-guide.md
@@ -18,13 +18,13 @@ author: brianlic-msft
 
 **In this article**
 
--   [Problems with traditional credentials](#problems_with_traditional_credentials)
--   [Solve credential problems](#solve_credential_problems)
--   [What is Windows Hello?](#what_is_windows_hello_)
--   [What is Microsoft Passport?](#what_is_microsoft_passport_)
--   [How Microsoft Passport works](#how_microsoft_passport_works)
+-   [Problems with traditional credentials](#problems-with-traditional-credentials)
+-   [Solve credential problems](#solve-credential-problems)
+-   [What is Windows Hello?](#what-is-windows-hello-)
+-   [What is Microsoft Passport?](#what-is-microsoft-passport-)
+-   [How Microsoft Passport works](#how-microsoft-passport-works)
 -   [Design a Microsoft Passport for Work deployment](#design)
--   [Implement Microsoft Passport](#implement_microsoft_passport)
+-   [Implement Microsoft Passport](#implement-microsoft-passport)
 -   [Roadmap](#roadmap)
 
 This guide describes the new Windows Hello and Microsoft Passport technologies that are part of the Windows 10 operating system. It highlights specific capabilities of these technologies that help mitigate threats from conventional credentials and provides guidance about how to design and deploy these technologies as part of your Windows 10 rollout.
@@ -50,7 +50,7 @@ Another, related risk is that of credential replay, in which an attacker capture
 
 The common approach of using an email address as the user name makes a bad problem worse. An attacker who successfully recovers a user name–password pair from a compromised system can then try that same pair on other systems. Surprisingly often, this tactic works to allow attackers to springboard from a compromised system into other systems. The use of email addresses as user names leads to other problems, too, which we’ll explore later in this guide.
 
-### 
+### <a href="" id="trading"></a>
 
 **Trading convenience for complexity**
 
@@ -64,11 +64,11 @@ If the major risk to passwords is that an attacker might guess them through brut
 
 Because a reusable password is the only authentication factor in password-based systems, designers have attempted to reduce the risk of credential theft and reuse. One common method for doing so is the use of limited-lifetime passwords. Some systems allow for passwords that can be used only once, but by far the more common approach is to make passwords expire after a certain period. Limiting the useful lifetime of a password puts a cap on how long a stolen password will be useful to an attacker. This practice helps protect against cases where a long-lived password is stolen, held, and used for a long time, but it also harkens back to the time when password cracking was impractical for everyone except nation state-level attackers. A smart attacker would attempt to steal passwords rather than crack them because of the time penalty associated with password cracking.
 
-The widespread availability of commodity password-cracking tools and the massive computing power available through mechanisms such as GPU-powered crackers or distributed cloud-based cracking tools has reversed this equation so that it is often more effective for an attacker to crack a password than to try to steal it. In addition, the widespread availability of self-service [password-reset mechanisms](#password_reset) means that an attacker needs only a short window of time during which the password is valid to change the password and thus reset the validity period. Relatively few enterprise networks provide self-service password-reset mechanisms, but they are common for Internet services. In addition, many users use the secure credential store on Windows and Mac OS X systems to store valuable passwords for Internet services, so an attacker who can compromise the operating system password may be able to obtain a treasure trove of other service passwords at no cost.
+The widespread availability of commodity password-cracking tools and the massive computing power available through mechanisms such as GPU-powered crackers or distributed cloud-based cracking tools has reversed this equation so that it is often more effective for an attacker to crack a password than to try to steal it. In addition, the widespread availability of self-service [password-reset mechanisms](#password-reset) means that an attacker needs only a short window of time during which the password is valid to change the password and thus reset the validity period. Relatively few enterprise networks provide self-service password-reset mechanisms, but they are common for Internet services. In addition, many users use the secure credential store on Windows and Mac OS X systems to store valuable passwords for Internet services, so an attacker who can compromise the operating system password may be able to obtain a treasure trove of other service passwords at no cost.
 
 Finally, overly short timelines for password expiration can tempt users to make small changes in their passwords at each expiration period — for example, moving from password123 to password456 to password789. This approach reduces the work necessary to crack the password, especially if the attacker knows any of the old passwords.
 
-### 
+### <a href="" id="password-reset"></a>
 
 **Password-reset mechanisms**
 
@@ -287,7 +287,7 @@ Microsoft Passport depends on having compatible IDPs available to it. As of this
 
 In addition to the IDP, Microsoft Passport requires an MDM system. This system can be the cloud-based Intune if you use Azure AD, or an on-premises System Center Configuration Manager deployment that meets the system requirements described in the [Deployment requirements](#deployreq) section of this document.
 
-## Design a Microsoft Passport for Work deployment
+## <a href="" id="design"></a>Design a Microsoft Passport for Work deployment
 
 
 Microsoft Passport for Work is designed for integration with your existing and future directory infrastructure and device deployments, but this flexibility means there are many considerations to think about when you design your deployment. Some of these decisions are technical, while others are organizational or even political. In this section, we examine the key points where you have to make decisions about how to implement Microsoft Passport for Work. Remember, individual devices can use the individual version of Microsoft Passport without any infrastructure changes on your part. Microsoft Passport for Work allows you to control and centrally manage user authentication and device registration. To use the initial version of Microsoft Passport for Work, each device must have an Azure AD identity, so automatic registration of devices provides a means both to register new devices and to apply optional policies to manage Microsoft Passport for Work.
@@ -349,7 +349,7 @@ Which rollout method you choose depends on several factors:
 
 -   **Your plans for the cloud.** If you’re already planning a move to the cloud, Azure AD eases the process of Microsoft Passport for Work deployment, because you can use Azure AD as an IDP alongside your existing on-premises AD DS setup without making significant changes to your on-premises environment. Future versions of Microsoft Passport for Work will support the ability to simultaneously register devices that are already members of an on-premises AD DS domain in an Azure AD partition so that they use Microsoft Passport for Work from the cloud. Hybrid deployments that combine AD DS with Azure AD give you the ability to keep machine authentication and policy management against your local AD DS domain while providing the full set of Microsoft Passport for Work services (and Microsoft Office 365 integration) for your users. If you plan to use on-premises AD DS only, then the design and configuration of your on-premises environment will dictate what kind of changes you may need to make.
 
-### 
+### <a href="" id="deployreq"></a>
 
 **Deployment requirements**
 
diff --git a/windows/keep-secure/minimum-password-age.md b/windows/keep-secure/minimum-password-age.md
index 31f648e955..7e0541d58e 100644
--- a/windows/keep-secure/minimum-password-age.md
+++ b/windows/keep-secure/minimum-password-age.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Minimum password age** security policy setting.
 
diff --git a/windows/keep-secure/minimum-password-length.md b/windows/keep-secure/minimum-password-length.md
index eee3fe77bf..bb282ece97 100644
--- a/windows/keep-secure/minimum-password-length.md
+++ b/windows/keep-secure/minimum-password-length.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Minimum password length** security policy setting.
 
diff --git a/windows/keep-secure/modify-an-object-label.md b/windows/keep-secure/modify-an-object-label.md
index 626effa684..88f42193af 100644
--- a/windows/keep-secure/modify-an-object-label.md
+++ b/windows/keep-secure/modify-an-object-label.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Modify an object label** security policy setting.
 
diff --git a/windows/keep-secure/modify-firmware-environment-values.md b/windows/keep-secure/modify-firmware-environment-values.md
index ed9f95cd86..fcbc1062c5 100644
--- a/windows/keep-secure/modify-firmware-environment-values.md
+++ b/windows/keep-secure/modify-firmware-environment-values.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Modify firmware environment values** security policy setting.
 
diff --git a/windows/keep-secure/monitor-application-usage-with-applocker.md b/windows/keep-secure/monitor-application-usage-with-applocker.md
index 9f9eeac0e0..f1dfd53488 100644
--- a/windows/keep-secure/monitor-application-usage-with-applocker.md
+++ b/windows/keep-secure/monitor-application-usage-with-applocker.md
@@ -19,7 +19,7 @@ This topic for IT professionals describes how to monitor app usage when AppLocke
 
 Once you set rules and deploy the AppLocker policies, it is good practice to determine if the policy implementation is what you expected.
 
-### Discover the effect of an AppLocker policy
+### <a href="" id="bkmk-applkr-disc-effect-pol"></a>Discover the effect of an AppLocker policy
 
 You can evaluate how the AppLocker policy is currently implemented for documentation or audit purposes, or before you modify the policy. Updating your AppLocker Policy Deployment Planning document will help you track your findings. For information about creating this document, see [Create your AppLocker planning document](create-your-applocker-planning-document.md). You can perform one or more of the following steps to understand what application controls are currently enforced through AppLocker rules.
 
@@ -27,7 +27,7 @@ You can evaluate how the AppLocker policy is currently implemented for documenta
 
     When AppLocker policy enforcement is set to **Enforce rules**, rules are enforced for the rule collection and all events are audited. When AppLocker policy enforcement is set to **Audit only**, rules are not enforced but are still evaluated to generate audit event data that is written to the AppLocker logs.
 
-    For the procedure to access the log, see [View the AppLocker Log in Event Viewer](#BKMK_AppLkr_View_Log).
+    For the procedure to access the log, see [View the AppLocker Log in Event Viewer](#bkmk-applkr-view-log).
 
 -   **Enable the Audit only AppLocker enforcement setting**
 
@@ -39,7 +39,7 @@ You can evaluate how the AppLocker policy is currently implemented for documenta
 
     For both event subscriptions and local events, you can use the **Get-AppLockerFileInformation** Windows PowerShell cmdlet to determine which files have been blocked or would have been blocked (if you are using the audit-only enforcement mode) and how many times the event has occurred for each file.
 
-    For the procedure to do this, see [Review AppLocker Events with Get-AppLockerFileInformation](#BKMK_AppLkr_Review_Events).
+    For the procedure to do this, see [Review AppLocker Events with Get-AppLockerFileInformation](#bkmk-applkr-review-events).
 
 -   **Review AppLocker events with Test-AppLockerPolicy**
 
@@ -47,7 +47,7 @@ You can evaluate how the AppLocker policy is currently implemented for documenta
 
     For the procedure to do this, see [Test an AppLocker policy by using Test-AppLockerPolicy](test-an-applocker-policy-by-using-test-applockerpolicy.md).
 
-### Review AppLocker events with Get-AppLockerFileInformation
+### <a href="" id="bkmk-applkr-review-events"></a>Review AppLocker events with Get-AppLockerFileInformation
 
 For both event subscriptions and local events, you can use the **Get-AppLockerFileInformation** Windows PowerShell cmdlet to determine which files have been blocked or would have been blocked (if the **Audit only** enforcement setting is applied) and how many times the event has occurred for each file.
 
@@ -70,7 +70,7 @@ If the AppLocker logs are not on your local device, you will need permission to
 
     `Get-AppLockerFileInformation –EventLog –EventType Allowed –Statistics`
 
-### View the AppLocker Log in Event Viewer
+### <a href="" id="bkmk-applkr-view-log"></a>View the AppLocker Log in Event Viewer
 
 When AppLocker policy enforcement is set to **Enforce rules**, rules are enforced for the rule collection and all events are audited. When AppLocker policy enforcement is set to **Audit only**, rules are only evaluated but all events generated from that evaluation are written to the AppLocker log.
 
diff --git a/windows/keep-secure/network-access-allow-anonymous-sidname-translation.md b/windows/keep-secure/network-access-allow-anonymous-sidname-translation.md
index 57504662e0..dbef22ed99 100644
--- a/windows/keep-secure/network-access-allow-anonymous-sidname-translation.md
+++ b/windows/keep-secure/network-access-allow-anonymous-sidname-translation.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Allow anonymous SID/Name translation** security policy setting.
 
diff --git a/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares.md b/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares.md
index 0456c5a27e..e5eb757d25 100644
--- a/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares.md
+++ b/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Network access: Do not allow anonymous enumeration of SAM accounts and shares** security policy setting.
 
diff --git a/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts.md b/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts.md
index 6b45c2e554..e07642a154 100644
--- a/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts.md
+++ b/windows/keep-secure/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Network access: Do not allow anonymous enumeration of SAM accounts** security policy setting.
 
diff --git a/windows/keep-secure/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication.md b/windows/keep-secure/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication.md
index 0873ee0926..f7a1a688f2 100644
--- a/windows/keep-secure/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication.md
+++ b/windows/keep-secure/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Do not allow storage of passwords and credentials for network authentication** security policy setting.
 
diff --git a/windows/keep-secure/network-access-let-everyone-permissions-apply-to-anonymous-users.md b/windows/keep-secure/network-access-let-everyone-permissions-apply-to-anonymous-users.md
index 5b7d7fd8c2..b28e5ae65c 100644
--- a/windows/keep-secure/network-access-let-everyone-permissions-apply-to-anonymous-users.md
+++ b/windows/keep-secure/network-access-let-everyone-permissions-apply-to-anonymous-users.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Let Everyone permissions apply to anonymous users** security policy setting.
 
diff --git a/windows/keep-secure/network-access-named-pipes-that-can-be-accessed-anonymously.md b/windows/keep-secure/network-access-named-pipes-that-can-be-accessed-anonymously.md
index eafac07e13..b2992d4455 100644
--- a/windows/keep-secure/network-access-named-pipes-that-can-be-accessed-anonymously.md
+++ b/windows/keep-secure/network-access-named-pipes-that-can-be-accessed-anonymously.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Named Pipes that can be accessed anonymously** security policy setting.
 
diff --git a/windows/keep-secure/network-access-remotely-accessible-registry-paths-and-subpaths.md b/windows/keep-secure/network-access-remotely-accessible-registry-paths-and-subpaths.md
index 1a37a2ff3d..abb34f1f05 100644
--- a/windows/keep-secure/network-access-remotely-accessible-registry-paths-and-subpaths.md
+++ b/windows/keep-secure/network-access-remotely-accessible-registry-paths-and-subpaths.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Network access: Remotely accessible registry paths and subpaths** security policy setting.
 
diff --git a/windows/keep-secure/network-access-remotely-accessible-registry-paths.md b/windows/keep-secure/network-access-remotely-accessible-registry-paths.md
index e1f91db54f..0987705b78 100644
--- a/windows/keep-secure/network-access-remotely-accessible-registry-paths.md
+++ b/windows/keep-secure/network-access-remotely-accessible-registry-paths.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Remotely accessible registry paths** security policy setting.
 
diff --git a/windows/keep-secure/network-access-restrict-anonymous-access-to-named-pipes-and-shares.md b/windows/keep-secure/network-access-restrict-anonymous-access-to-named-pipes-and-shares.md
index a0bb0be3ea..d43a81ddf8 100644
--- a/windows/keep-secure/network-access-restrict-anonymous-access-to-named-pipes-and-shares.md
+++ b/windows/keep-secure/network-access-restrict-anonymous-access-to-named-pipes-and-shares.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Restrict anonymous access to Named Pipes and Shares** security policy setting.
 
diff --git a/windows/keep-secure/network-access-shares-that-can-be-accessed-anonymously.md b/windows/keep-secure/network-access-shares-that-can-be-accessed-anonymously.md
index 6acc461ccc..6f7108c36a 100644
--- a/windows/keep-secure/network-access-shares-that-can-be-accessed-anonymously.md
+++ b/windows/keep-secure/network-access-shares-that-can-be-accessed-anonymously.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Shares that can be accessed anonymously** security policy setting.
 
diff --git a/windows/keep-secure/network-access-sharing-and-security-model-for-local-accounts.md b/windows/keep-secure/network-access-sharing-and-security-model-for-local-accounts.md
index 5adfd27765..605afc8e34 100644
--- a/windows/keep-secure/network-access-sharing-and-security-model-for-local-accounts.md
+++ b/windows/keep-secure/network-access-sharing-and-security-model-for-local-accounts.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network access: Sharing and security model for local accounts** security policy setting.
 
diff --git a/windows/keep-secure/network-security-allow-local-system-to-use-computer-identity-for-ntlm.md b/windows/keep-secure/network-security-allow-local-system-to-use-computer-identity-for-ntlm.md
index 6ce76e750f..495a944451 100644
--- a/windows/keep-secure/network-security-allow-local-system-to-use-computer-identity-for-ntlm.md
+++ b/windows/keep-secure/network-security-allow-local-system-to-use-computer-identity-for-ntlm.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the location, values, policy management, and security considerations for the **Network security: Allow Local System to use computer identity for NTLM** security policy setting.
 
diff --git a/windows/keep-secure/network-security-allow-localsystem-null-session-fallback.md b/windows/keep-secure/network-security-allow-localsystem-null-session-fallback.md
index 283434a90b..fe4880704a 100644
--- a/windows/keep-secure/network-security-allow-localsystem-null-session-fallback.md
+++ b/windows/keep-secure/network-security-allow-localsystem-null-session-fallback.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Network security: Allow LocalSystem NULL session fallback** security policy setting.
 
diff --git a/windows/keep-secure/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md b/windows/keep-secure/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md
index 6135445577..e801efd1af 100644
--- a/windows/keep-secure/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md
+++ b/windows/keep-secure/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, and values for the **Network Security: Allow PKU2U authentication requests to this computer to use online identities** security policy setting.
 
diff --git a/windows/keep-secure/network-security-configure-encryption-types-allowed-for-kerberos.md b/windows/keep-secure/network-security-configure-encryption-types-allowed-for-kerberos.md
index af8f09206b..d94e9f606c 100644
--- a/windows/keep-secure/network-security-configure-encryption-types-allowed-for-kerberos.md
+++ b/windows/keep-secure/network-security-configure-encryption-types-allowed-for-kerberos.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values and security considerations for the **Network security: Configure encryption types allowed for Kerberos Win7 only** security policy setting.
 
diff --git a/windows/keep-secure/network-security-do-not-store-lan-manager-hash-value-on-next-password-change.md b/windows/keep-secure/network-security-do-not-store-lan-manager-hash-value-on-next-password-change.md
index d57e9d035a..34b4602835 100644
--- a/windows/keep-secure/network-security-do-not-store-lan-manager-hash-value-on-next-password-change.md
+++ b/windows/keep-secure/network-security-do-not-store-lan-manager-hash-value-on-next-password-change.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network security: Do not store LAN Manager hash value on next password change** security policy setting.
 
diff --git a/windows/keep-secure/network-security-force-logoff-when-logon-hours-expire.md b/windows/keep-secure/network-security-force-logoff-when-logon-hours-expire.md
index 0dbcdafcf2..6afa4c577f 100644
--- a/windows/keep-secure/network-security-force-logoff-when-logon-hours-expire.md
+++ b/windows/keep-secure/network-security-force-logoff-when-logon-hours-expire.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network security: Force logoff when logon hours expire** security policy setting.
 
diff --git a/windows/keep-secure/network-security-lan-manager-authentication-level.md b/windows/keep-secure/network-security-lan-manager-authentication-level.md
index 3b76c609ad..ea9365e356 100644
--- a/windows/keep-secure/network-security-lan-manager-authentication-level.md
+++ b/windows/keep-secure/network-security-lan-manager-authentication-level.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network security: LAN Manager authentication level** security policy setting.
 
diff --git a/windows/keep-secure/network-security-ldap-client-signing-requirements.md b/windows/keep-secure/network-security-ldap-client-signing-requirements.md
index ee2e2a5a76..912a606ca5 100644
--- a/windows/keep-secure/network-security-ldap-client-signing-requirements.md
+++ b/windows/keep-secure/network-security-ldap-client-signing-requirements.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 This security policy reference topic for the IT professional describes the best practices, location, values, policy management and security considerations for this policy setting. This information applies to computers running at least the Windows Server 2008 operating system.
 
diff --git a/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md b/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md
index 1fb1010795..347d87392b 100644
--- a/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md
+++ b/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network security: Minimum session security for NTLM SSP based (including secure RPC) clients** security policy setting.
 
diff --git a/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md b/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md
index 94a7abf07d..f6ccf49cf5 100644
--- a/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md
+++ b/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Network security: Minimum session security for NTLM SSP based (including secure RPC) servers** security policy setting.
 
diff --git a/windows/keep-secure/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md b/windows/keep-secure/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md
index 46f94bc0b4..9a9bab7854 100644
--- a/windows/keep-secure/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md
+++ b/windows/keep-secure/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management aspects, and security considerations for the **Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication** security policy setting.
 
diff --git a/windows/keep-secure/network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md b/windows/keep-secure/network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md
index 6490a428f8..07a39848bd 100644
--- a/windows/keep-secure/network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md
+++ b/windows/keep-secure/network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management aspects, and security considerations for the **Network security: Restrict NTLM: Add server exceptions in this domain** security policy setting.
 
diff --git a/windows/keep-secure/network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md b/windows/keep-secure/network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md
index 17dc167233..bf74af1eee 100644
--- a/windows/keep-secure/network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md
+++ b/windows/keep-secure/network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management aspects, and security considerations for the **Network Security: Restrict NTLM: Audit incoming NTLM traffic** security policy setting.
 
diff --git a/windows/keep-secure/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain.md b/windows/keep-secure/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain.md
index 482c56e052..4cfde5f34d 100644
--- a/windows/keep-secure/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain.md
+++ b/windows/keep-secure/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management aspects, and security considerations for the **Network Security: Restrict NTLM: Audit NTLM authentication in this domain** security policy setting.
 
diff --git a/windows/keep-secure/network-security-restrict-ntlm-incoming-ntlm-traffic.md b/windows/keep-secure/network-security-restrict-ntlm-incoming-ntlm-traffic.md
index 8bcb81142d..5b2a894d21 100644
--- a/windows/keep-secure/network-security-restrict-ntlm-incoming-ntlm-traffic.md
+++ b/windows/keep-secure/network-security-restrict-ntlm-incoming-ntlm-traffic.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management aspects, and security considerations for the **Network Security: Restrict NTLM: Incoming NTLM traffic** security policy setting.
 
@@ -107,7 +107,7 @@ This section describes different features and tools available to help you manage
 
 None. Changes to this policy become effective without a restart when saved locally or distributed through Group Policy.
 
-### Group Policy
+### <a href="" id="bkmk-grouppolicy"></a>Group Policy
 
 Setting and deploying this policy using Group Policy takes precedence over the setting on the local device. If the Group Policy is set to **Not Configured**, local settings will apply.
 
diff --git a/windows/keep-secure/network-security-restrict-ntlm-ntlm-authentication-in-this-domain.md b/windows/keep-secure/network-security-restrict-ntlm-ntlm-authentication-in-this-domain.md
index 2ce163e549..39589de882 100644
--- a/windows/keep-secure/network-security-restrict-ntlm-ntlm-authentication-in-this-domain.md
+++ b/windows/keep-secure/network-security-restrict-ntlm-ntlm-authentication-in-this-domain.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management aspects, and security considerations for the **Network Security: Restrict NTLM: NTLM authentication in this domain** security policy setting.
 
diff --git a/windows/keep-secure/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers.md b/windows/keep-secure/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers.md
index c706147781..bc9e9c55c6 100644
--- a/windows/keep-secure/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers.md
+++ b/windows/keep-secure/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, management aspects, and security considerations for the **Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers** security policy setting.
 
@@ -34,7 +34,7 @@ Modifying this policy setting may affect compatibility with client computers, se
 
  
 
-### Possible values
+### <a href="" id="bkmk-resoutntlm-possvals"></a>Possible values
 
 -   **Allow all**
 
diff --git a/windows/keep-secure/password-must-meet-complexity-requirements.md b/windows/keep-secure/password-must-meet-complexity-requirements.md
index eaa4625fd7..37e53c2106 100644
--- a/windows/keep-secure/password-must-meet-complexity-requirements.md
+++ b/windows/keep-secure/password-must-meet-complexity-requirements.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Password must meet complexity requirements** security policy setting.
 
diff --git a/windows/keep-secure/perform-volume-maintenance-tasks.md b/windows/keep-secure/perform-volume-maintenance-tasks.md
index 1010a60895..276e8181c2 100644
--- a/windows/keep-secure/perform-volume-maintenance-tasks.md
+++ b/windows/keep-secure/perform-volume-maintenance-tasks.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Perform volume maintenance tasks** security policy setting.
 
diff --git a/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md b/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md
index 81c566d5e8..72f0ddaca7 100644
--- a/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md
+++ b/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md
@@ -73,27 +73,27 @@ By carefully planning, designing, testing, and deploying a solution based on you
 
 The process of designing and deploying a Windows security audit policy involves the following tasks, which are described in greater detail throughout this document:
 
--   [Identifying your Windows security audit policy deployment goals](#BKMK_1)
+-   [Identifying your Windows security audit policy deployment goals](#bkmk-1)
 
     This section helps define the business objectives that will guide your Windows security audit policy. It also helps you define the resources, users, and computers that will be the focus of your security auditing.
 
--   [Mapping the security audit policy to groups of users, computers, and resources in your organization](#BKMK_2)
+-   [Mapping the security audit policy to groups of users, computers, and resources in your organization](#bkmk-2)
 
     This section explains how to integrate security audit policy settings with domain Group Policy settings for different groups of users, computers, and resources. In addition, if your network includes multiple versions of Windows client and server operating systems, it also explains when to use basic audit policy settings and when to use advanced security audit policy settings.
 
--   [Mapping your security auditing goals to a security audit policy configuration](#BKMK_3)
+-   [Mapping your security auditing goals to a security audit policy configuration](#bkmk-3)
 
     This section explains the categories of Windows security auditing settings that are available. It also identifies individual Windows security auditing policy settings that can be of particular value to address auditing scenarios.
 
--   [Planning for security audit monitoring and management](#BKMK_4)
+-   [Planning for security audit monitoring and management](#bkmk-4)
 
     This section helps you plan to collect, analyze, and store Windows audit data. Depending on the number of computers and types of activity that you want to audit, Windows event logs can fill up quickly. In addition, this section explains how auditors can access and aggregate event data from multiple servers and desktop computers. It also explains how to address storage requirements, including how much audit data to store and how it must be stored.
 
--   [Deploying the security audit policy](#BKMK_5)
+-   [Deploying the security audit policy](#bkmk-5)
 
     This section provides recommendations and guidelines for the effective deployment of a Windows security audit policy. Configuring and deploying Windows audit policy settings in a test lab environment can help you confirm that the settings you have selected will produce the type of audit data you need. However, only a carefully staged pilot and incremental deployments based on your domain and organizational unit (OU) structure will enable you to confirm that the audit data you generate can be monitored and that it meets your organization's audit needs.
 
-## Identifying your Windows security audit policy deployment goals
+## <a href="" id="bkmk-1"></a>Identifying your Windows security audit policy deployment goals
 
 
 A security audit policy must support and be a critical and integrated aspect of an organization's overall security design and framework.
@@ -110,7 +110,7 @@ To create your Windows security audit plan, begin by identifying:
 
 ### Network environment
 
-An organization's domain and OU structure provide a fundamental starting point for thinking about how to apply a security audit policy because it likely provides a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. It is also likely that certain portions of your domain and OU structure already provide logical groups of users, resources, and activities that justify the time and resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#BKMK_2) later in this document.
+An organization's domain and OU structure provide a fundamental starting point for thinking about how to apply a security audit policy because it likely provides a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. It is also likely that certain portions of your domain and OU structure already provide logical groups of users, resources, and activities that justify the time and resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document.
 
 In addition to your domain model, you should also find out whether your organization creates and maintains a systematic threat model. A good threat model can help you identify threats to key components in your infrastructure, so you can define and apply audit settings that enhance the organization's ability to identify and counter those threats.
 
@@ -298,7 +298,7 @@ Many industries and locales have strict and specific requirements for network op
 
 For more info, see the [System Center Process Pack for IT GRC](http://technet.microsoft.com/library/dd206732.aspx).
 
-## Mapping the security audit policy to groups of users, computers, and resources in your organization
+## <a href="" id="bkmk-2"></a>Mapping the security audit policy to groups of users, computers, and resources in your organization
 
 
 By using Group Policy, you can apply your security audit policy to defined groups of users, computers, and resources. To map a security auditing policy to these defined groups in your organization, you should understand the following considerations for using Group Policy to apply security audit policy settings:
@@ -332,7 +332,7 @@ The following are examples of how audit policies can be applied to an organizati
 
 -   Apply network and system activity audit policies to OUs that contain the organization's most critical servers, such as domain controllers, CAs, email servers, or database servers.
 
-## Mapping your security auditing goals to a security audit policy configuration
+## <a href="" id="bkmk-3"></a>Mapping your security auditing goals to a security audit policy configuration
 
 
 After you identify your security auditing goals, you can begin to map them to a security audit policy configuration. This audit policy configuration must address your most critical security auditing goals, but it also must address your organization's constraints, such as the number of computers that need to be monitored, the number of activities that you want to audit, the number of audit events that your desired audit configuration will generate, and the number of administrators available to analyze and act upon audit data.
@@ -396,7 +396,7 @@ For many organizations, compromising the organization's data resources can cause
 -   **Global Object Access Auditing**. A growing number of organizations are using security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be extremely difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system, which cannot be overridden or circumvented.
 
     **Important**  
-    The **Global Object Access Auditing** policy settings must be configured and applied in conjunction with the **Audit File System** and **Audit Registry** audit policy settings in the **Object Access** category. For more information about using the **Global Object Access Auditing** policy settings, see the [Advanced security auditing walkthrough](../keep-secure/advanced-security-auditing-walkthrough.md).
+    The **Global Object Access Auditing** policy settings must be configured and applied in conjunction with the **Audit File System** and **Audit Registry** audit policy settings in the **Object Access** category.
 
      
 
@@ -497,7 +497,7 @@ For example, on a file server that is accessed frequently by legitimate users, y
 
 On the other hand, if the file share has extremely sensitive and valuable information, such as trade secrets, you may want to log every access attempt, whether successful or unsuccessful, so that you have an audit trail of every user who accessed the resource.
 
-## Planning for security audit monitoring and management
+## <a href="" id="bkmk-4"></a>Planning for security audit monitoring and management
 
 
 Networks can contain hundreds of servers running critical services or storing critical data, all of which need to be monitored. The number of client computers on the network can easily range into the tens or even hundreds of thousands. This may not be an issue if the ratio of servers or client computers per administrator is low. Even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how an administrator will obtain event data to review. Following are some options for obtaining the event data.
@@ -526,7 +526,7 @@ You can also configure the audit log size and other key management options by us
 
 In addition, a growing number of organizations are being required to store archived log files for a number of years. You should consult with regulatory compliance officers in your organization to determine whether such guidelines apply to your organization. For more information, see the [IT Compliance Management Guide](http://go.microsoft.com/fwlink/p/?LinkId=163435).
 
-## Deploying the security audit policy
+## <a href="" id="bkmk-5"></a>Deploying the security audit policy
 
 
 Before deploying the audit policy in a production environment, it is critical that you determine the effects of the policy settings that you have configured.
diff --git a/windows/keep-secure/prepare-people-to-use-microsoft-passport.md b/windows/keep-secure/prepare-people-to-use-microsoft-passport.md
index 20af4910a7..cca33b7828 100644
--- a/windows/keep-secure/prepare-people-to-use-microsoft-passport.md
+++ b/windows/keep-secure/prepare-people-to-use-microsoft-passport.md
@@ -19,11 +19,11 @@ author: brianlic-msft
 
 **In this article**
 
--   [On devices owned by the organization](#on_devices_owned_by_the_organization)
--   [On personal devices](#on_personal_devices)
--   [Using Windows Hello and biometrics](#using_windows_hello_and_biometrics)
--   [Use a phone to sign in to a PC](#BMK_remote)
--   [Related topics](#related_topics)
+-   [On devices owned by the organization](#on-devices-owned-by-the-organization)
+-   [On personal devices](#on-personal-devices)
+-   [Using Windows Hello and biometrics](#using-windows-hello-and-biometrics)
+-   [Use a phone to sign in to a PC](#bmk-remote)
+-   [Related topics](#related-topics)
 
 When you set a policy to require Microsoft Passport in the workplace, you will want to prepare people in your organization by explaining how to use Passport.
 
@@ -64,7 +64,7 @@ If your policy allows it, people can add Windows Hello to their Passport. Window
 
 ![sign in to windows, apps, and services using fingerprint or face](images/hellosettings.png)
 
-## Use a phone to sign in to a PC
+## <a href="" id="bmk-remote"></a>Use a phone to sign in to a PC
 
 
 If your enterprise enables phone sign-in, users can pair a phone running Windows 10 Mobile to a PC running Windows 10 and then use an app on the phone to sign in to the PC using their Microsoft Passport credentials.
diff --git a/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md b/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md
index e4f18d7b67..136f485e58 100644
--- a/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md
+++ b/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md
@@ -19,27 +19,27 @@ This topic for the IT professional explains how can you plan your BitLocker depl
 
 When you design your BitLocker deployment strategy, define the appropriate policies and configuration requirements based on the business requirements of your organization. The following topics will help you collect information that you can use to frame your decision-making process about deploying and managing BitLocker systems.
 
--   [Audit your environment](#BKMK_audit)
+-   [Audit your environment](#bkmk-audit)
 
--   [Encryption keys and authentication](#BKK_encrypt)
+-   [Encryption keys and authentication](#bkk-encrypt)
 
--   [TPM hardware configurations](#BKMK_TPMConfigurations)
+-   [TPM hardware configurations](#bkmk-tpmconfigurations)
 
--   [Non-TPM hardware configurations](#BKMK_NonTPM)
+-   [Non-TPM hardware configurations](#bkmk-nontpm)
 
--   [Disk configuration considerations](#BKMK_disk)
+-   [Disk configuration considerations](#bkmk-disk)
 
--   [BitLocker provisioning](#BKMK_prov)
+-   [BitLocker provisioning](#bkmk-prov)
 
--   [Used Disk Space Only encryption](#BKK_used)
+-   [Used Disk Space Only encryption](#bkk-used)
 
--   [Active Directory Domain Services considerations](#BKMK_addscons)
+-   [Active Directory Domain Services considerations](#bkmk-addscons)
 
--   [FIPS support for recovery password protector](#BKMK_FIPSsupport)
+-   [FIPS support for recovery password protector](#bkmk-fipssupport)
 
 -   [BitLocker Group Policy settings](bitlocker-group-policy-settings.md)
 
-## Audit your environment
+## <a href="" id="bkmk-audit"></a>Audit your environment
 
 
 To plan your enterprise deployment of BitLocker, you must first understand your current environment. Conduct an informal audit to define your current policies, procedures, and hardware environment. Begin by reviewing your existing corporate security policies as they relate to disk encryption software. If your organization is not currently using disk encryption software, none of these policies will exist. If you are using disk encryption software, then you might need to modify your organization's policies to address the capabilities of BitLocker.
@@ -56,7 +56,7 @@ Use the following questions to help you document your organization's current dis
 
 5.  What policies exist to control computer decommissioning or retirement?
 
-## Encryption keys and authentication
+## <a href="" id="bkk-encrypt"></a>Encryption keys and authentication
 
 
 BitLocker helps prevent unauthorized access to data on lost or stolen computers by:
@@ -178,7 +178,7 @@ If there are areas of your organization where data residing on user computers is
 
 The protection differences provided by multifactor authentication methods cannot be easily quantified. Consider each authentication method's impact on Helpdesk support, user education, user productivity, and automated systems management processes.
 
-## TPM hardware configurations
+## <a href="" id="bkmk-tpmconfigurations"></a>TPM hardware configurations
 
 
 In your deployment plan, identify what TPM-based hardware platforms will be supported. Document the hardware models from an OEM of your choice, so that their configurations can be tested and supported. TPM hardware requires special consideration during all aspects of planning and deployment.
@@ -245,7 +245,7 @@ An endorsement key can be created at various points in the TPM’s lifecycle, bu
 
 For more information about the TPM and the TCG, see the Trusted Computing Group: Trusted Platform Module (TPM) Specifications (<http://go.microsoft.com/fwlink/p/?linkid=69584>).
 
-## Non-TPM hardware configurations
+## <a href="" id="bkmk-nontpm"></a>Non-TPM hardware configurations
 
 
 Devices that do not include a TPM can still be protected by drive encryption. Windows To Go workspaces can be BitLocker protected using a startup password and PCs without a TPM can use a startup key.
@@ -260,7 +260,7 @@ Use the following questions to identify issues that might affect your deployment
 
 Test your individual hardware platforms with the BitLocker system check option while you are enabling BitLocker. The system check will ensure that BitLocker can read the recovery information from a USB device and encryption keys correctly before it encrypts the volume. CD and DVD drives cannot act as a block storage device and cannot be used to store the BitLocker recovery material.
 
-## Disk configuration considerations
+## <a href="" id="bkmk-disk"></a>Disk configuration considerations
 
 
 To function correctly, BitLocker requires a specific disk configuration. BitLocker requires two partitions that meet the following requirements:
@@ -275,7 +275,7 @@ Windows Recovery Environment (Windows RE) is an extensible recovery platform tha
 
 Windows RE can also be used from boot media other than the local hard disk. If you choose not to install Windows RE on the local hard disk of BitLocker-enabled computers, you can use alternate boot methods, such as Windows Deployment Services, CD-ROM, or USB flash drive, for recovery.
 
-## BitLocker provisioning
+## <a href="" id="bkmk-prov"></a>BitLocker provisioning
 
 
 In Windows Vista and Windows 7, BitLocker was provisioned post installation for system and data volumes through either the manage-bde command line interface or the Control Panel user interface. With newer operating systems, BitLocker can be easily provisioned before the operating system is installed. Preprovisioning requires that the computer have a TPM.
@@ -286,7 +286,7 @@ When using the control panel options, administrators can choose to **Turn on Bit
 
 Administrators can enable BitLocker prior to operating system deployment from the Windows Pre-installation Environment (WinPE). This is done with a randomly generated clear key protector applied to the formatted volume and encrypting the volume prior to running the Windows setup process. If the encryption uses the Used Disk Space Only option this step takes only a few seconds and so incorporates well into regular deployment processes.
 
-## Used Disk Space Only encryption
+## <a href="" id="bkk-used"></a>Used Disk Space Only encryption
 
 
 The BitLocker Setup wizard provides administrators the ability to choose the Used Disk Space Only or Full encryption method when enabling BitLocker for a volume. Administrators can use the new BitLocker Group Policy setting to enforce either Used Disk Space Only or Full disk encryption.
@@ -297,7 +297,7 @@ Used Disk Space Only means that only the portion of the drive that contains data
 
 Full drive encryption means that the entire drive will be encrypted, regardless of whether data is stored on it or not. This is useful for drives that have been repurposed and may contain data remnants from their previous use.
 
-## Active Directory Domain Services considerations
+## <a href="" id="bkmk-addscons"></a>Active Directory Domain Services considerations
 
 
 BitLocker integrates with Active Directory Domain Services (AD DS) to provide centralized key management. By default, no recovery information is backed up to Active Directory. Administrators can configure Group Policy settings to enable backup of BitLocker or TPM recovery information. Before configuring these settings verify that access permissions have been granted to perform the backup.
@@ -401,7 +401,7 @@ To initialize the TPM successfully so that you can turn on BitLocker requires th
 
 9.  Click **Finish** to apply the permissions settings.
 
-## FIPS support for recovery password protector
+## <a href="" id="bkmk-fipssupport"></a>FIPS support for recovery password protector
 
 
 Functionality introduced in Windows Server 2012 R2 and Windows 8.1, allows BitLocker to be fully functional in FIPS mode.
diff --git a/windows/keep-secure/profile-single-process.md b/windows/keep-secure/profile-single-process.md
index 37c1b9e8e5..fb95d5f9ae 100644
--- a/windows/keep-secure/profile-single-process.md
+++ b/windows/keep-secure/profile-single-process.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Profile single process** security policy setting.
 
diff --git a/windows/keep-secure/profile-system-performance.md b/windows/keep-secure/profile-system-performance.md
index 07db3b430c..9ef47136fd 100644
--- a/windows/keep-secure/profile-system-performance.md
+++ b/windows/keep-secure/profile-system-performance.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 This security policy reference topic for the IT professional describes the best practices, location, values, policy management, and security considerations for the **Profile system performance** security policy setting.
 
diff --git a/windows/keep-secure/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md b/windows/keep-secure/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md
index eb90bcb17c..421a638767 100644
--- a/windows/keep-secure/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md
+++ b/windows/keep-secure/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md
@@ -19,12 +19,12 @@ author: brianlic-msft
 **In this article**
 
 -   [Introduction](#introduction)
--   [Description of a robust end-to-end security solution](#description_of_a_robust_end-to-end_security_solution)
--   [Protect devices and enterprise credentials against threats](#protect_devices_and_enterprise_credentials_against_threats)
--   [Detect an unhealthy Windows 10-based device](#detect_unhealthy)
--   [Control the security of a Windows 10-based device before access is granted](#control_the_security_of_a_windows_10-based_device_before_access_is_granted)
--   [Takeaways and summary](#takeaways_and_summary)
--   [Related topics](#related_topics)
+-   [Description of a robust end-to-end security solution](#description-of-a-robust-end-to-end-security-solution)
+-   [Protect devices and enterprise credentials against threats](#protect-devices-and-enterprise-credentials-against-threats)
+-   [Detect an unhealthy Windows 10-based device](#detect-unhealthy)
+-   [Control the security of a Windows 10-based device before access is granted](#control-the-security-of-a-windows-10-based-device-before-access-is-granted)
+-   [Takeaways and summary](#takeaways-and-summary)
+-   [Related topics](#related-topics)
 
 This article details an end-to-end solution that helps you protect high-value assets by enforcing, controlling, and reporting the health of Windows 10-based devices.
 
@@ -88,7 +88,7 @@ Access to content is then authorized to the appropriate level of trust for whate
 
 Depending on the requirements and the sensitivity of the managed asset, device health status can be combined with user identity information when processing an access request. Access to content is then authorized to the appropriate level of trust. The Conditional Access engine may be structured to allow additional verification as needed by the sensitivity of the managed asset. For example, if access to high-value data is requested, additional security authentication may need to be established by querying the user to answer a phone call before access is granted.
 
-### Microsoft’s security investments in Windows 10
+### <a href="" id="microsoft-s-security-investments-in-windows-10"></a>Microsoft’s security investments in Windows 10
 
 In Windows 10, there are three pillars of investments:
 
@@ -164,7 +164,7 @@ This section describes what Windows 10 offers in terms of security defenses and
 
 The most aggressive forms of malware try to insert themselves into the boot process as early as possible so that they can take control of the operating system early and prevent protection mechanisms and antimalware software from working. This type of malicious code is often called a rootkit or bootkit. The best way to avoid having to deal with low-level malware is to secure the boot process so that the device is protected from the very start.
 
-Windows 10 supports multiple layers of boot protection. Some of these features are available only if specific types of hardware are installed. For more information, see the [Hardware requirements](#hardware_req) section.
+Windows 10 supports multiple layers of boot protection. Some of these features are available only if specific types of hardware are installed. For more information, see the [Hardware requirements](#hardware-req) section.
 
 ![figure 4](images/hva-fig4-hardware.png)
 
@@ -279,7 +279,7 @@ Windows 10 supports features to help prevent sophisticated low-level malware li
 
     Although Secure Boot is a proactive form of protection, health attestation is a reactive form of boot protection. Health attestation ships disabled in Windows and is enabled by an antimalware or an MDM vendor. Unlike Secure Boot, health attestation will not stop the boot process and enter remediation when a measurement does not work. But with conditional access control, health attestation will help to prevent access to high-value assets.
 
-### Virtualization-based security
+### <a href="" id="virtual"></a>Virtualization-based security
 
 Virtualization-based security provides a new trust boundary for Windows 10. leverages Hyper-V hypervisor technology to enhance platform security. Virtualization-based security provides a secure execution environment to run specific Windows trusted code (trustlet) and to protect sensitive data.
 
@@ -404,9 +404,9 @@ Device health attestation leverages the TPM 2.0 to provide cryptographically str
 
 For Windows 10-based devices, Microsoft introduces a new public API that will allow MDM software to access a remote attestation service called Windows Health Attestation Service. A health attestation result, in addition with other elements, can be used to allow or deny access to networks, apps, or services, based on whether devices prove to be healthy.
 
-For more information on device health attestation, see the [Detect an unhealthy Windows 10-based device](#detect_unhealthy) section.
+For more information on device health attestation, see the [Detect an unhealthy Windows 10-based device](#detect-unhealthy) section.
 
-### Hardware requirements
+### <a href="" id="hardware-req"></a>Hardware requirements
 
 The following table details the hardware requirements for both virtualization-based security services and the health attestation feature. For more information, see [Minimum hardware requirements](http://go.microsoft.com/fwlink/p/?LinkId=733951).
 
@@ -459,7 +459,7 @@ The following table details the hardware requirements for both virtualization-ba
 
 This section presented information about several closely related controls in Windows 10. The multi-layer defenses and in-depth approach helps to eradicate low-level malware during boot sequence. Virtualization-based security is a fundamental operating system architecture change that adds a new security boundary. Device Guard and Credential Guard respectively help to block untrusted code and protect corporate domain credentials from theft and reuse. This section also briefly discussed the importance of managing devices and patching vulnerabilities. All these technologies can be used to harden and lock down devices while limiting the risk of attackers compromising them.
 
-## Detect an unhealthy Windows 10-based device
+## <a href="" id="detect-unhealthy"></a>Detect an unhealthy Windows 10-based device
 
 
 As of today, many organizations only consider devices to be compliant with company policy after they’ve passed a variety of checks that show, for example, that the operating system is in the correct state, properly configured, and has security protection enabled. Unfortunately, with today’s systems, this form of reporting is not entirely reliable because malware can spoof a software statement about system health. A rootkit, or a similar low-level exploit, can report a false healthy state to traditional compliance tools.
@@ -560,7 +560,7 @@ The following process describes how health boot measurements are sent to the hea
 
 The device health attestation solution involves different components that are TPM, Health Attestation CSP, and the Windows Health Attestation Service. Those components are described in this section.
 
-### Trusted Platform Module
+### <a href="" id="trusted-platform-module-"></a>Trusted Platform Module
 
 *It’s all about TPM 2.0 and endorsement certificates.* This section describes how PCRs (that contain system configuration data), endorsement key (EK) (that act as an identity card for TPM), SRK (that protect keys) and AIKs (that can report platform state) are used for health attestation reporting.
 
@@ -840,7 +840,7 @@ MDM servers do not need to create or download a client to manage Windows 10. Fo
 
 The third-party MDM server will have the same consistent first-party user experience for enrollment, which also provides simplicity for Windows 10 users.
 
-### Management of Windows Defender by third-party MDM
+### <a href="" id="management-of-windows-defender-by-third-party-mdm-"></a>Management of Windows Defender by third-party MDM
 
 This management infrastructure makes it possible for IT pros to use MDM-capable products like Intune, to manage health attestation, Device Guard, or Windows Defender on Windows 10-based devices, including BYODs that aren’t domain joined. IT pros will be able to manage and configure all of the actions and settings they are familiar with customizing by using Intune with Intune Endpoint Protection on down-level operating systems. Admins that currently only manage domain joined devices through Group Policy will find it easy to transition to managing Windows 10-based devices by using MDM because many of the settings and actions are shared across both mechanisms.
 
@@ -856,7 +856,7 @@ If the device is not registered, the user will get a message with instructions o
 
 ![figure 11](images/hva-fig10-conditionalaccesscontrol.png)
 
-### Office 365 conditional access control
+### <a href="" id="office-365-conditional-access-control-"></a>Office 365 conditional access control
 
 Azure AD enforces conditional access policies to secure access to Office 365 services. A tenant admin can create a conditional access policy that blocks a user on a non-compliant device from accessing an Office 365 service. The user must conform to the company’s device policies before access can be granted to the service. Alternately, the admin can also create a policy that requires users to just enroll their devices to gain access to an Office 365 service. Policies may be applied to all users of an organization, or limited to a few target groups and enhanced over time to include additional target groups.
 
@@ -898,7 +898,7 @@ At the present time, conditional access policies are selectively enforced on use
 
  
 
-### Cloud and on-premises apps conditional access control
+### <a href="" id="cloud-and-on-premises-apps-conditional-access-control-"></a>Cloud and on-premises apps conditional access control
 
 Conditional access control is a powerful policy evaluation engine built into Azure AD. It gives IT pros an easy way to create access rules beyond Office 365 that evaluate the context of a user's logon to make real-time decisions about which applications they should be allowed to access.
 
diff --git a/windows/keep-secure/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md b/windows/keep-secure/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md
index 43fab99127..5ed8ed7a78 100644
--- a/windows/keep-secure/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md
+++ b/windows/keep-secure/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md
@@ -19,7 +19,7 @@ This topic for IT pros describes how to protect CSVs and SANs with BitLocker.
 
 BitLocker can protect both physical disk resources and cluster shared volumes version 2.0 (CSV2.0). BitLocker on clustered volumes allows for an additional layer of protection for administrators wishing to protect sensitive, highly available data. By adding additional protectors to the clustered volume, administrators can also add an additional barrier of security to resources within an organization by allowing only certain user accounts access to unlock the BitLocker volume.
 
-## Configuring BitLocker on Cluster Shared Volumes
+## <a href="" id="configuring-bitlocker-on-cluster-shared-volumes-"></a>Configuring BitLocker on Cluster Shared Volumes
 
 
 ### Using BitLocker with Clustered Volumes
diff --git a/windows/keep-secure/recovery-console-allow-automatic-administrative-logon.md b/windows/keep-secure/recovery-console-allow-automatic-administrative-logon.md
index de6c6d0b7b..493930dd1c 100644
--- a/windows/keep-secure/recovery-console-allow-automatic-administrative-logon.md
+++ b/windows/keep-secure/recovery-console-allow-automatic-administrative-logon.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Recovery console: Allow automatic administrative logon** security policy setting.
 
diff --git a/windows/keep-secure/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders.md b/windows/keep-secure/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders.md
index 0edecd985a..33f265753a 100644
--- a/windows/keep-secure/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders.md
+++ b/windows/keep-secure/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Recovery console: Allow floppy copy and access to all drives and folders** security policy setting.
 
diff --git a/windows/keep-secure/remove-computer-from-docking-station.md b/windows/keep-secure/remove-computer-from-docking-station.md
index f2c6cb952e..70b9ea2193 100644
--- a/windows/keep-secure/remove-computer-from-docking-station.md
+++ b/windows/keep-secure/remove-computer-from-docking-station.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Remove computer from docking station** security policy setting.
 
diff --git a/windows/keep-secure/replace-a-process-level-token.md b/windows/keep-secure/replace-a-process-level-token.md
index 5dee858dbc..4e2f7e1f4a 100644
--- a/windows/keep-secure/replace-a-process-level-token.md
+++ b/windows/keep-secure/replace-a-process-level-token.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Replace a process level token** security policy setting.
 
diff --git a/windows/keep-secure/requirements-for-deploying-applocker-policies.md b/windows/keep-secure/requirements-for-deploying-applocker-policies.md
index 8858ca5e67..278b2c3be5 100644
--- a/windows/keep-secure/requirements-for-deploying-applocker-policies.md
+++ b/windows/keep-secure/requirements-for-deploying-applocker-policies.md
@@ -19,15 +19,15 @@ This deployment topic for the IT professional lists the requirements that you ne
 
 The following requirements must be met or addressed before you deploy your AppLocker policies:
 
--   [Deployment plan](#BKMK_ReqDepPlan)
+-   [Deployment plan](#bkmk-reqdepplan)
 
--   [Supported operating systems](#BKMK_ReqSupportedOS)
+-   [Supported operating systems](#bkmk-reqsupportedos)
 
--   [Policy distribution mechanism](#BKMK_ReqPolicyDistMech)
+-   [Policy distribution mechanism](#bkmk-reqpolicydistmech)
 
--   [Event collection and analysis system](#BKMK_ReqEventCollectionSystem)
+-   [Event collection and analysis system](#bkmk-reqeventcollectionsystem)
 
-### Deployment plan
+### <a href="" id="bkmk-reqdepplan"></a>Deployment plan
 
 An AppLocker policy deployment plan is the result of investigating which applications are required and necessary in your organization, which apps are optional, and which apps are forbidden. To develop this plan, see [AppLocker Design Guide](applocker-policies-design-guide.md). The following table is an example of the data you need to collect and the decisions you need to make to successfully deploy AppLocker policies on the supported operating systems (as listed in [Requirements to use AppLocker](requirements-to-use-applocker.md)).
 
@@ -213,15 +213,15 @@ An AppLocker policy deployment plan is the result of investigating which applica
 
  
 
-### Supported operating systems
+### <a href="" id="bkmk-reqsupportedos"></a>Supported operating systems
 
 AppLocker is supported only on certain operating systems. Some features are not available on all operating systems. For more information, see [Requirements to use AppLocker](requirements-to-use-applocker.md).
 
-### Policy distribution mechanism
+### <a href="" id="bkmk-reqpolicydistmech"></a>Policy distribution mechanism
 
 You need a way to distribute the AppLocker policies throughout the targeted business groups. AppLocker uses Group Policy management architecture to effectively distribute application control policies. AppLocker policies can also be configured on individual computers by using the Local Security Policy snap-in.
 
-### Event collection and analysis system
+### <a href="" id="bkmk-reqeventcollectionsystem"></a>Event collection and analysis system
 
 Event processing is important to understand application usage. You must have a process in place to collect and analyze AppLocker events so that application usage is appropriately restricted and understood. For procedures to monitor AppLocker events, see:
 
diff --git a/windows/keep-secure/reset-account-lockout-counter-after.md b/windows/keep-secure/reset-account-lockout-counter-after.md
index 19d8233464..ab14d9719e 100644
--- a/windows/keep-secure/reset-account-lockout-counter-after.md
+++ b/windows/keep-secure/reset-account-lockout-counter-after.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Reset account lockout counter after** security policy setting.
 
diff --git a/windows/keep-secure/restore-files-and-directories.md b/windows/keep-secure/restore-files-and-directories.md
index 6f7242f354..d5250de181 100644
--- a/windows/keep-secure/restore-files-and-directories.md
+++ b/windows/keep-secure/restore-files-and-directories.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Restore files and directories** security policy setting.
 
diff --git a/windows/keep-secure/run-the-automatically-generate-rules-wizard.md b/windows/keep-secure/run-the-automatically-generate-rules-wizard.md
index 8b15b5dc9e..63611e7155 100644
--- a/windows/keep-secure/run-the-automatically-generate-rules-wizard.md
+++ b/windows/keep-secure/run-the-automatically-generate-rules-wizard.md
@@ -19,7 +19,7 @@ This topic for IT professionals describes steps to run the wizard to create AppL
 
 AppLocker allows you to automatically generate rules for all files within a folder. It will scan the specified folder and create the condition types that you choose for each file in that folder.
 
-You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local device or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#BKMK_Using_Snapins).
+You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local device or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
 
 **To automatically generate rules**
 
diff --git a/windows/keep-secure/schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md b/windows/keep-secure/schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md
index 28b58cd634..6916504ad6 100644
--- a/windows/keep-secure/schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md
+++ b/windows/keep-secure/schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md
@@ -22,7 +22,7 @@ This topic provides more details about this change and provides template schema
 
 The TPM owner authorization value is now stored in a separate object which is linked to the Computer object. This value was stored as a property in the Computer object itself for the default Windows Server 2008 R2 schemas. Windows Server 2012 domain controllers have the default schema to backup TPM owner authorization information in the separate object. If you are not upgrading your domain controller to Windows Server 2012 you need to extend the schema to support this change. If Active Directory backup of the TPM owner authorization value is enabled in a Windows Server 2008 R2 environment without extending the schema, the TPM provisioning will fail and the TPM will remain in a Not Ready state for computers running Windows 8. The following are the two schema extensions that you can use to bring your Windows Server 2008 R2 domain to parity with Windows Server 2012:
 
-### TpmSchemaExtension.ldf
+### <a href="" id="tpmschemaextension-ldf-"></a>TpmSchemaExtension.ldf
 
 This schema extension brings parity with the Windows Server 2012 schema and is required if you want to store the TPM owner authorization value for a computer running Windows 8 in a Windows Server 2008 R2 AD DS domain. With this extension the TPM owner authorization information will be stored in a separate TPM object linked to the corresponding computer object.
 
diff --git a/windows/keep-secure/security-auditing-overview-glbl.md b/windows/keep-secure/security-auditing-overview-glbl.md
index ac7d5b52ac..bc9ff675c5 100644
--- a/windows/keep-secure/security-auditing-overview-glbl.md
+++ b/windows/keep-secure/security-auditing-overview-glbl.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 Topics in this section are for IT professionals and describes the security auditing features in Windows and how your organization can benefit from using these technologies to enhance the security and manageability of your network.
 
-## 
+## <a href="" id="bkmk-over"></a>
 
 
 Security auditing is one of the most powerful tools that you can use to maintain the integrity of your system. As part of your overall security strategy, you should determine the level of auditing that is appropriate for your environment. Auditing should identify attacks (successful or not) that pose a threat to your network, and attacks against resources that you have determined to be valuable in your risk assessment.
diff --git a/windows/keep-secure/security-policy-settings.md b/windows/keep-secure/security-policy-settings.md
index 6030d5c6d6..2e9a21f118 100644
--- a/windows/keep-secure/security-policy-settings.md
+++ b/windows/keep-secure/security-policy-settings.md
@@ -17,9 +17,9 @@ author: brianlic-msft
 
 **In this article**
 
--   [Policy-based security settings management](#policy-based_security_settings_management)
--   [Security Settings extension architecture](#w2k3tr_gpssp_how_ebls)
--   [Security settings policy processes and interactions](#w2k3tr_gpssp_how_hjxe)
+-   [Policy-based security settings management](#policy-based-security-settings-management)
+-   [Security Settings extension architecture](#w2k3tr-gpssp-how-ebls)
+-   [Security settings policy processes and interactions](#w2k3tr-gpssp-how-hjxe)
 
 This reference topic describes the common scenarios, architecture, and processes for security settings.
 
@@ -190,7 +190,7 @@ The following diagram shows Security Settings and related features.
 
     The Local Group Policy Editor MMC snap-in.
 
-## Security Settings extension architecture
+## <a href="" id="w2k3tr-gpssp-how-ebls"></a>Security Settings extension architecture
 
 
 The Security Settings extension of the Local Group Policy Editor is part of the Security Configuration Manager tools, as shown in the following diagram.
@@ -261,12 +261,12 @@ The following list describes these primary features of the security configuratio
 
     These are text files that contain declarative security settings. They are loaded into a database before configuration or analysis. Group Policy security policies are stored in .inf files on the SYSVOL folder of domain controllers, where they are downloaded (by using file copy) and merged into the system database during policy propagation.
 
-## Security settings policy processes and interactions
+## <a href="" id="w2k3tr-gpssp-how-hjxe"></a>Security settings policy processes and interactions
 
 
 For a domain-joined device, where Group Policy is administered, security settings are processed in conjunction with Group Policy. Not all settings are configurable.
 
-### Group Policy processing
+### <a href="" id="bkmk-gpprocessing"></a>Group Policy processing
 
 When a computer starts and a user logs on, computer policy and user policy are applied according to the following sequence:
 
@@ -344,7 +344,7 @@ This order means that the local Group Policy Object is processed first, and Grou
 
 This is the default processing order and administrators can specify exceptions to this order. A Group Policy Object that is linked to a site, domain, or organizational unit (not a local Group Policy Object) can be set to **Enforced** with respect to that site, domain, or organizational unit, so that none of its policy settings can be overridden. At any site, domain, or organizational unit, you can mark Group Policy inheritance selectively as **Block Inheritance**. Group Policy Object links that are set to **Enforced** are always applied, however, and they cannot be blocked.
 
-### Security settings policy processing
+### <a href="" id="bkmk-secpolprocessing"></a>Security settings policy processing
 
 In the context of Group Policy processing, security settings policy is processed in the following order.
 
diff --git a/windows/keep-secure/shut-down-the-system.md b/windows/keep-secure/shut-down-the-system.md
index d64fc679b9..deb9e43320 100644
--- a/windows/keep-secure/shut-down-the-system.md
+++ b/windows/keep-secure/shut-down-the-system.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Shut down the system** security policy setting.
 
diff --git a/windows/keep-secure/shutdown-allow-system-to-be-shut-down-without-having-to-log-on.md b/windows/keep-secure/shutdown-allow-system-to-be-shut-down-without-having-to-log-on.md
index ab99fc2af8..4c8396b29e 100644
--- a/windows/keep-secure/shutdown-allow-system-to-be-shut-down-without-having-to-log-on.md
+++ b/windows/keep-secure/shutdown-allow-system-to-be-shut-down-without-having-to-log-on.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Shutdown: Allow system to be shut down without having to log on** security policy setting.
 
diff --git a/windows/keep-secure/shutdown-clear-virtual-memory-pagefile.md b/windows/keep-secure/shutdown-clear-virtual-memory-pagefile.md
index e75a66f68b..a124c9e8c0 100644
--- a/windows/keep-secure/shutdown-clear-virtual-memory-pagefile.md
+++ b/windows/keep-secure/shutdown-clear-virtual-memory-pagefile.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **Shutdown: Clear virtual memory pagefile** security policy setting.
 
diff --git a/windows/keep-secure/store-passwords-using-reversible-encryption.md b/windows/keep-secure/store-passwords-using-reversible-encryption.md
index 29bb2a8f86..61e849687e 100644
--- a/windows/keep-secure/store-passwords-using-reversible-encryption.md
+++ b/windows/keep-secure/store-passwords-using-reversible-encryption.md
@@ -18,8 +18,8 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **Store passwords using reversible encryption** security policy setting.
 
diff --git a/windows/keep-secure/switch-pcr-banks-on-tpm-2-0-devices.md b/windows/keep-secure/switch-pcr-banks-on-tpm-2-0-devices.md
index 40749ccea3..3da96de40b 100644
--- a/windows/keep-secure/switch-pcr-banks-on-tpm-2-0-devices.md
+++ b/windows/keep-secure/switch-pcr-banks-on-tpm-2-0-devices.md
@@ -23,7 +23,7 @@ PCR\[N\] = HASHalg( PCR\[N\] || ArgumentOfExtend )
 
 The existing value is concatenated with the argument of the TPM Extend operation. The resulting concatenation is then used as input to the associated hashing algorithm, which computes a digest of the input. This computed digest becomes the new value of the PCR.
 
-The [TCG PC Client Specific Platform TPM Profile for TPM 2.0](http://www.trustedcomputinggroup.org/files/static_page_files/DA21120F-1A4B-B294-D0B41C9F9432A352/PC Client Specific Platform TPM Profile for TPM 2.0 v43.pdf) defines the inclusion of at least one PCR bank with 24 registers. The only way to reset the first 16 PCRs is to reset the TPM itself. This restriction helps ensure that the value of those PCRs can only be modified via the TPM Extend operation.
+The [TCG PC Client Specific Platform TPM Profile for TPM 2.0](http://go.microsoft.com/fwlink/p/?LinkId=746577) defines the inclusion of at least one PCR bank with 24 registers. The only way to reset the first 16 PCRs is to reset the TPM itself. This restriction helps ensure that the value of those PCRs can only be modified via the TPM Extend operation.
 
 Some TPM PCRs are used as checksums of log events. The log events are extended in the TPM as the events occur. Later, an auditor can validate the logs by computing the expected PCR values from the log and comparing them to the PCR values of the TPM. Since the first 16 TPM PCRs cannot be modified arbitrarily, a match between an expected PCR value in that range and the actual TPM PCR value provides assurance of an unmodified log.
 
diff --git a/windows/keep-secure/synchronize-directory-service-data.md b/windows/keep-secure/synchronize-directory-service-data.md
index 5bb771bde9..77f19667e5 100644
--- a/windows/keep-secure/synchronize-directory-service-data.md
+++ b/windows/keep-secure/synchronize-directory-service-data.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Synchronize directory service data** security policy setting.
 
diff --git a/windows/keep-secure/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md b/windows/keep-secure/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md
index a318f73f06..993839b430 100644
--- a/windows/keep-secure/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md
+++ b/windows/keep-secure/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **System cryptography: Force strong key protection for user keys stored on the computer** security policy setting.
 
diff --git a/windows/keep-secure/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md b/windows/keep-secure/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md
index e9398bcd3e..85f47a89f5 100644
--- a/windows/keep-secure/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md
+++ b/windows/keep-secure/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 This security policy reference topic for the IT professional describes the best practices, location, values, policy management and security considerations for this policy setting.
 
diff --git a/windows/keep-secure/system-objects-require-case-insensitivity-for-non-windows-subsystems.md b/windows/keep-secure/system-objects-require-case-insensitivity-for-non-windows-subsystems.md
index 308e1ece5a..7f7d90f0aa 100644
--- a/windows/keep-secure/system-objects-require-case-insensitivity-for-non-windows-subsystems.md
+++ b/windows/keep-secure/system-objects-require-case-insensitivity-for-non-windows-subsystems.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **System objects: Require case insensitivity for non-Windows subsystems** security policy setting.
 
diff --git a/windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md b/windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md
index 5907c887d8..8dc21bd5fe 100644
--- a/windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md
+++ b/windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)** security policy setting.
 
diff --git a/windows/keep-secure/system-settings-optional-subsystems.md b/windows/keep-secure/system-settings-optional-subsystems.md
index 1985fb95a8..7bf1048052 100644
--- a/windows/keep-secure/system-settings-optional-subsystems.md
+++ b/windows/keep-secure/system-settings-optional-subsystems.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **System settings: Optional subsystems** security policy setting.
 
diff --git a/windows/keep-secure/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md b/windows/keep-secure/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md
index 7e470c5ed7..f0069ae2b3 100644
--- a/windows/keep-secure/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md
+++ b/windows/keep-secure/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **System settings: Use certificate rules on Windows executables for Software Restriction Policies** security policy setting.
 
diff --git a/windows/keep-secure/take-ownership-of-files-or-other-objects.md b/windows/keep-secure/take-ownership-of-files-or-other-objects.md
index fa033978ce..cc03a734c5 100644
--- a/windows/keep-secure/take-ownership-of-files-or-other-objects.md
+++ b/windows/keep-secure/take-ownership-of-files-or-other-objects.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management, and security considerations for the **Take ownership of files or other objects** security policy setting.
 
diff --git a/windows/keep-secure/tpm-fundamentals-windows-8.md b/windows/keep-secure/tpm-fundamentals-windows-8.md
index 557cb026d3..3c8b119c13 100644
--- a/windows/keep-secure/tpm-fundamentals-windows-8.md
+++ b/windows/keep-secure/tpm-fundamentals-windows-8.md
@@ -31,59 +31,59 @@ For info about which versions of Windows support which versions of the TPM, see
 
 The following sections provide an overview of the technologies that support the TPM:
 
--   [TPM-based Virtual Smart Card](#BKMK_VSC)
+-   [TPM-based Virtual Smart Card](#bkmk-vsc)
 
--   [Measured Boot with support for attestation](#BKMK_MeasuredBoot)
+-   [Measured Boot with support for attestation](#bkmk-measuredboot)
 
--   [Automated provisioning and management of the TPM](#BKMK_AutoProv)
+-   [Automated provisioning and management of the TPM](#bkmk-autoprov)
 
--   [TPM-based certificate storage](#BKMK_TPMCS)
+-   [TPM-based certificate storage](#bkmk-tpmcs)
 
--   [Physical presence interface](#BKMK_PhysicalPresenceInterface)
+-   [Physical presence interface](#bkmk-physicalpresenceinterface)
 
--   [TPM Cmdlets](#BKMK_TPMcmdlets)
+-   [TPM Cmdlets](#bkmk-tpmcmdlets)
 
--   [TPM Owner Authorization Value](#BKMK_AuthValue)
+-   [TPM Owner Authorization Value](#bkmk-authvalue)
 
--   [States of existence in a TPM](#BKMK_stateex)
+-   [States of existence in a TPM](#bkmk-stateex)
 
--   [Endorsement keys](#BKMK_EndorsementKeys)
+-   [Endorsement keys](#bkmk-endorsementkeys)
 
--   [TPM Key Attestation](#BKMK_KetAttestation)
+-   [TPM Key Attestation](#bkmk-ketattestation)
 
--   [How the TPM mitigates dictionary attacks](#BKMK_HowTPMmitigates)
+-   [How the TPM mitigates dictionary attacks](#bkmk-howtpmmitigates)
 
--   [How do I check the state of my TPM?](#BKMK_CheckState)
+-   [How do I check the state of my TPM?](#bkmk-checkstate)
 
--   [What can I do if my TPM is in reduced functionality mode?](#BKMK_FixRFM)
+-   [What can I do if my TPM is in reduced functionality mode?](#bkmk-fixrfm)
 
 The following topic describes the TPM Services that can be controlled centrally by using Group Policy settings:
 
 [Trusted Platform Module Services Group Policy Settings](trusted-platform-module-services-group-policy-settings.md)
 
-## Automated provisioning and management of the TPM
+## <a href="" id="bkmk-autoprov"></a>Automated provisioning and management of the TPM
 
 
 TPM provisioning can be streamlined to make it easier to deploy systems that are ready for BitLocker and other TPM-dependent features. These enhancements include simplifying the TPM state model to report **Ready**, **Ready with reduced functionality**, or **Not ready**. You can also automatically provision TPMs in the **Ready** state, remote provisioning to remove the requirement for the physical presence of a technician for the initial deployment. In addition, the TPM stack is available in the Windows Preinstallation Environment (Windows PE).
 
 A number of management settings have been added for easier management and configuration of the TPM through Group Policy. The primary new settings include Active Directory-based backup of TPM owner authentication, the level of owner authentication that should be stored locally on the TPM, and the software-based TPM lockout settings for standard users. For more info about backing up owner authentication to Windows Server 2008 R2 AD DS domains, see [AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md).
 
-## Measured Boot with support for attestation
+## <a href="" id="bkmk-measuredboot"></a>Measured Boot with support for attestation
 
 
 The Measured Boot feature provides antimalware software with a trusted (resistant to spoofing and tampering) log of all boot components. Antimalware software can use the log to determine whether components that ran before it are trustworthy versus infected with malware. It can also send the Measured Boot logs to a remote server for evaluation. The remote server can initiate remediation actions by interacting with software on the client or through out-of-band mechanisms, as appropriate.
 
-## TPM-based Virtual Smart Card
+## <a href="" id="bkmk-vsc"></a>TPM-based Virtual Smart Card
 
 
 The Virtual Smart Card emulates the functionality of traditional smart cards, but Virtual Smart Cards use the TPM chip that is available on an organization’s computers, rather than requiring the use of a separate physical smart card and reader. This greatly reduces the management and deployment cost of smart cards in an enterprise. To the end user, the Virtual Smart Card is always available on the computer. If a user needs to use more than one computer, a Virtual Smart Card must be issued to the user for each computer. A computer that is shared among multiple users can host multiple Virtual Smart Cards, one for each user.
 
-## TPM-based certificate storage
+## <a href="" id="bkmk-tpmcs"></a>TPM-based certificate storage
 
 
 The TPM can be used to protect certificates and RSA keys. The TPM key storage provider (KSP) provides easy, convenient use of the TPM as a way of strongly protecting private keys. The TPM KSP can be used to generate keys when an organization enrolls for certificates, and the KSP is managed by templates in the UI. The TPM can also be used to protect certificates that are imported from an outside source. TPM-based certificates can be used exactly as standard certificates with the added functionality that the certificate can never leave the TPM from which the keys were generated. The TPM can now be used for crypto-operations through Cryptography API: Next Generation (CNG). For more info, see [Cryptography API: Next Generation](http://msdn.microsoft.com/library/windows/desktop/aa376210.aspx).
 
-## TPM Owner Authorization Value
+## <a href="" id="bkmk-authvalue"></a>TPM Owner Authorization Value
 
 
 For Windows 8 a change to how the TPM owner authorization value is stored in AD DS was implemented in the AD DS schema. The TPM owner authorization value is now stored in a separate object which is linked to the Computer object. This value was stored as a property in the Computer object itself for the default Windows Server 2008 R2 schemas. Windows Server 2012 domain controllers have the default schema to backup TPM owner authorization information in the separate object. If you are not upgrading your domain controller to Windows Server 2012 you need to extend the schema to support this change. If Active Directory backup of the TPM owner authorization value is enabled in a Windows Server 2008 R2 environment without extending the schema, the TPM provisioning will fail and the TPM will remain in a Not Ready state for computers running Windows 8.
@@ -130,7 +130,7 @@ If the operating system managed TPM authentication setting is changed from "Full
 
  
 
-## TPM Cmdlets
+## <a href="" id="bkmk-tpmcmdlets"></a>TPM Cmdlets
 
 
 If you are using PowerShell to script and manage your computers, you can now manage the TPM using Windows PowerShell as well. To install the TPM cmdlets use the following command:
@@ -139,7 +139,7 @@ If you are using PowerShell to script and manage your computers, you can now man
 
 For details about the individual cmdlets, see [TPM Cmdlets in Windows PowerShell](http://technet.microsoft.com/library/jj603116.aspx)
 
-## Physical presence interface
+## <a href="" id="bkmk-physicalpresenceinterface"></a>Physical presence interface
 
 
 The TCG specifications for TPMs require physical presence to perform some TPM administrative functions, such as turning on and turning off the TPM. Physical presence means a person must physically interact with the system and the TPM interface to confirm or reject changes to TPM status. This typically cannot be automated with scripts or other automation tools unless the individual OEM supplies them. Here are some are examples of TPM administrative tasks that require physical presence:
@@ -149,7 +149,7 @@ The TCG specifications for TPMs require physical presence to perform some TPM ad
 -   Deactivating the TPM
 -   Disabling the TPM temporarily without the owner’s password
 
-## States of existence in a TPM
+## <a href="" id="bkmk-stateex"></a>States of existence in a TPM
 
 
 For each of these TPM 1.2 states of existence, the TPM can transition into another state (for example, moving from disabled to enabled). The states are not exclusive.
@@ -206,19 +206,19 @@ Applications cannot use the TPM until the state is enabled, activated, and owned
 
 The state of the TPM exists independently of the computer’s operating system. When the TPM is enabled, activated, and owned, the state of the TPM is preserved if the operating system is reinstalled.
 
-## Endorsement keys
+## <a href="" id="bkmk-endorsementkeys"></a>Endorsement keys
 
 
 For a TPM to be usable by a trusted application, it must contain an endorsement key, which is an RSA key pair. The private half of the key pair is held inside the TPM, and it is never revealed or accessible outside the TPM. If the TPM does not contain an endorsement key, the application might cause the TPM to generate one automatically as part of the setup.
 
 An endorsement key can be created at various points in the TPM’s lifecycle, but it needs to be created only once for the lifetime of the TPM. The existence of an endorsement key is a requirement before TPM ownership can be taken.
 
-## Key attestation
+## <a href="" id="bkmk-ketattestation"></a>Key attestation
 
 
 TPM key attestation allows a certification authority to verify that a private key is actually protected by a TPM and that the TPM is one that the certification authority trusts. Endorsement keys which have been proven valid can be used to bind the user identity to a device. Moreover, the user certificate with a TPM attested key provides higher security assurance backed up by the non-exportability, anti-hammering, and isolation of keys provided by a TPM.
 
-## How the TPM mitigates dictionary attacks
+## <a href="" id="bkmk-howtpmmitigates"></a>How the TPM mitigates dictionary attacks
 
 
 When a TPM processes a command, it does so in a protected environment, for example, a dedicated microcontroller on a discrete chip or a special hardware-protected mode on the main CPU. A TPM can be used to create a cryptographic key that is not disclosed outside the TPM, but is able to be used in the TPM after the correct authorization value is provided.
@@ -262,12 +262,12 @@ Hardware manufacturers and software developers have the option to use the securi
 
 The intent of selecting 32 failures as the lock-out threshold is so users rarely lock the TPM (even when learning to type new passwords or if they frequently lock and unlock their computers). If users lock the TPM, they must to wait two hours or use some other credential to sign in, such as a user name and password.
 
-## How do I check the state of my TPM?
+## <a href="" id="bkmk-checkstate"></a>How do I check the state of my TPM?
 
 
 You can check the state of the TPM on a PC by running the Trusted Platform Module snap-in (tpm.msc). The **Status** heading tells you the state of your TPM. The TPM can be in one of the following states: **Ready for use**, **Ready for use, with reduced functionality**, and **Not ready for use**. To take advantage of most of the TPM features in Windows 10, the TPM must be **Ready for use**.
 
-## What can I do if my TPM is in reduced functionality mode?
+## <a href="" id="bkmk-fixrfm"></a>What can I do if my TPM is in reduced functionality mode?
 
 
 If your TPM is in reduced functionality mode, some features that rely on the TPM will not function correctly. This is most often caused by doing a clean installation of Windows 10 on a device where Windows 8.1, Windows 8, or Windows 7 had previously been installed on the same hardware. If your TPM is in reduced functionality mode, the Status heading in the Trusted Platform Module snap-in shows **The TPM is ready for use, with reduced functionality**. You can fix this by clearing the TPM.
diff --git a/windows/keep-secure/troubleshoot-windows-defender-for-windows-10.md b/windows/keep-secure/troubleshoot-windows-defender-for-windows-10.md
index 55989437dd..84bd5daee5 100644
--- a/windows/keep-secure/troubleshoot-windows-defender-for-windows-10.md
+++ b/windows/keep-secure/troubleshoot-windows-defender-for-windows-10.md
@@ -2200,7 +2200,7 @@ For more information please see the following:</p>
 </p>
 </td>
 </tr>
-</table>
+</table> 
 
 ## Related topics
 
diff --git a/windows/keep-secure/trusted-platform-module--tpm-2-0--.md b/windows/keep-secure/trusted-platform-module--tpm-2-0--.md
index 8269ff2272..7a5c161b45 100644
--- a/windows/keep-secure/trusted-platform-module--tpm-2-0--.md
+++ b/windows/keep-secure/trusted-platform-module--tpm-2-0--.md
@@ -21,13 +21,13 @@ author: brianlic-msft
 **In this article**
 
 -   [Overview](#overview)
--   [TPM 1.2 vs. 2.0 comparison](#tpm_1.2_vs._2.0_comparison)
--   [Why TPM 2.0?](#why_tpm_2.0_)
--   [Discrete or firmware TPM?](#discrete_or_firmware_tpm_)
--   [TPM 2.0 Compliance for Windows 10 in the future](#tpm_2.0_compliance_for_windows_10_in_the_future)
--   [TPM and Windows Features](#tpm_and_windows_features)
--   [Chipset options for TPM 2.0](#chipset_options_for_tpm_2.0)
--   [OEM Feedback and Status on TPM 2.0 system availability](#oem_feedback_and_status_on_tpm_2.0_system_availability)
+-   [TPM 1.2 vs. 2.0 comparison](#tpm-1-2-vs--2-0-comparison)
+-   [Why TPM 2.0?](#why-tpm-2-0-)
+-   [Discrete or firmware TPM?](#discrete-or-firmware-tpm-)
+-   [TPM 2.0 Compliance for Windows 10 in the future](#tpm-2-0-compliance-for-windows-10-in-the-future)
+-   [TPM and Windows Features](#tpm-and-windows-features)
+-   [Chipset options for TPM 2.0](#chipset-options-for-tpm-2-0)
+-   [OEM Feedback and Status on TPM 2.0 system availability](#oem-feedback-and-status-on-tpm-2-0-system-availability)
 
 This topic provides recommendations for Trusted Platform Module (TPM) technology for Windows 10.
 
@@ -181,7 +181,7 @@ The following table defines which Windows features require TPM support. Some fea
 <td align="left">n/a</td>
 <td align="left">Required</td>
 <td align="left">Required</td>
-<td align="left">For Windows 10, Version 1511, TPM 1.2 or 2.0 is highly recommended. If you don't have a TPM installed, Credential Guard will still be enabled, but the keys used to encrypt Credential Guard will not be protected by the TPM.</td>
+<td align="left">For Windows 10, version 1511, TPM 1.2 or 2.0 is highly recommended. If you don't have a TPM installed, Credential Guard will still be enabled, but the keys used to encrypt Credential Guard will not be protected by the TPM.</td>
 </tr>
 <tr class="even">
 <td align="left">Device Health Attestation</td>
diff --git a/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md b/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md
index d439835cb0..b0a0d91b86 100644
--- a/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md
+++ b/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 This topic for the IT professional describes the Trusted Platform Module (TPM) Services that can be controlled centrally by using Group Policy settings.
 
-## 
+## <a href="" id="bkmk-version-table"></a>
 
 
 The TPM Services Group Policy settings are located at:
@@ -45,7 +45,7 @@ The TPM Services Group Policy settings are located at:
 </thead>
 <tbody>
 <tr class="odd">
-<td align="left"><p>[Turn on TPM backup to Active Directory Domain Services](#BKMK_tpmgp_addsbu)</p></td>
+<td align="left"><p>[Turn on TPM backup to Active Directory Domain Services](#bkmk-tpmgp-addsbu)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -53,7 +53,7 @@ The TPM Services Group Policy settings are located at:
 <td align="left"><p>X</p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Configure the list of blocked TPM commands](#BKMK_tpmgp_clbtc)</p></td>
+<td align="left"><p>[Configure the list of blocked TPM commands](#bkmk-tpmgp-clbtc)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -61,7 +61,7 @@ The TPM Services Group Policy settings are located at:
 <td align="left"><p>X</p></td>
 </tr>
 <tr class="odd">
-<td align="left"><p>[Ignore the default list of blocked TPM commands](#BKMK_tpmgp_idlb)</p></td>
+<td align="left"><p>[Ignore the default list of blocked TPM commands](#bkmk-tpmgp-idlb)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -69,7 +69,7 @@ The TPM Services Group Policy settings are located at:
 <td align="left"><p>X</p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Ignore the local list of blocked TPM commands](#BKMK_tpmgp_illb)</p></td>
+<td align="left"><p>[Ignore the local list of blocked TPM commands](#bkmk-tpmgp-illb)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -77,7 +77,7 @@ The TPM Services Group Policy settings are located at:
 <td align="left"><p>X</p></td>
 </tr>
 <tr class="odd">
-<td align="left"><p>[Configure the level of TPM owner authorization information available to the operating system](#BKMK_tpmgp_oauthos)</p></td>
+<td align="left"><p>[Configure the level of TPM owner authorization information available to the operating system](#bkmk-tpmgp-oauthos)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -85,7 +85,7 @@ The TPM Services Group Policy settings are located at:
 <td align="left"><p></p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Standard User Lockout Duration](#BKMK_tpmgp_suld)</p></td>
+<td align="left"><p>[Standard User Lockout Duration](#bkmk-tpmgp-suld)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -93,7 +93,7 @@ The TPM Services Group Policy settings are located at:
 <td align="left"><p></p></td>
 </tr>
 <tr class="odd">
-<td align="left"><p>[Standard User Individual Lockout Threshold](#BKMK_tpmgp_suilt)</p></td>
+<td align="left"><p>[Standard User Individual Lockout Threshold](#bkmk-tpmgp-suilt)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -101,7 +101,7 @@ The TPM Services Group Policy settings are located at:
 <td align="left"><p></p></td>
 </tr>
 <tr class="even">
-<td align="left"><p>[Standard User Total Lockout Threshold](#BKMK_tpmgpsutlt)</p></td>
+<td align="left"><p>[Standard User Total Lockout Threshold](#bkmk-tpmgpsutlt)</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
 <td align="left"><p>X</p></td>
@@ -113,12 +113,12 @@ The TPM Services Group Policy settings are located at:
 
  
 
-### Turn on TPM backup to Active Directory Domain Services
+### <a href="" id="bkmk-tpmgp-addsbu"></a>Turn on TPM backup to Active Directory Domain Services
 
 This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of TPM owner information.
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
@@ -135,12 +135,12 @@ If you enable this policy setting, TPM owner information will be automatically a
 
 If you disable or do not configure this policy setting, TPM owner information will not be backed up to AD DS.
 
-### Configure the list of blocked TPM commands
+### <a href="" id="bkmk-tpmgp-clbtc"></a>Configure the list of blocked TPM commands
 
 This policy setting allows you to manage the Group Policy list of Trusted Platform Module (TPM) commands that are blocked by Windows.
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
@@ -154,31 +154,31 @@ If you disable or do not configure this policy setting, only those TPM commands
 
 For information how to enforce or ignore the default and local lists of blocked TPM commands, see
 
--   [Ignore the default list of blocked TPM commands](#BKMK_tpmgp_idlb)
+-   [Ignore the default list of blocked TPM commands](#bkmk-tpmgp-idlb)
 
--   [Ignore the local list of blocked TPM commands](#BKMK_tpmgp_illb)
+-   [Ignore the local list of blocked TPM commands](#bkmk-tpmgp-illb)
 
-### Ignore the default list of blocked TPM commands
+### <a href="" id="bkmk-tpmgp-idlb"></a>Ignore the default list of blocked TPM commands
 
 This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) commands.
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
-The default list of blocked TPM commands is preconfigured by Windows. You can view the default list by typing **tpm.msc** at the command prompt to open the TPM Management Console, navigating to the **Command Management** section, and exposing the **On Default Block List** column. Also see the related policy setting, [Configure the list of blocked TPM commands](#BKMK_tpmgp_clbtc).
+The default list of blocked TPM commands is preconfigured by Windows. You can view the default list by typing **tpm.msc** at the command prompt to open the TPM Management Console, navigating to the **Command Management** section, and exposing the **On Default Block List** column. Also see the related policy setting, [Configure the list of blocked TPM commands](#bkmk-tpmgp-clbtc).
 
 If you enable this policy setting, the Windows operating system will ignore the computer's default list of blocked TPM commands, and it will block only those TPM commands that are specified by Group Policy or the local list.
 
 If you disable or do not configure this policy setting, Windows will block the TPM commands in the default list, in addition to the commands that are specified by Group Policy and the local list of blocked TPM commands.
 
-### Ignore the local list of blocked TPM commands
+### <a href="" id="bkmk-tpmgp-illb"></a>Ignore the local list of blocked TPM commands
 
 This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) commands.
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
@@ -188,12 +188,12 @@ If you enable this policy setting, the Windows operating system will ignore the
 
 If you disable or do not configure this policy setting, Windows will block the TPM commands in the local list, in addition to the commands that are specified in Group Policy and the default list of blocked TPM commands.
 
-### Configure the level of TPM owner authorization information available to the operating system
+### <a href="" id="bkmk-tpmgp-oauthos"></a>Configure the level of TPM owner authorization information available to the operating system
 
 This policy setting configures how much of the TPM owner authorization information is stored in the registry of the local computer. Depending on the amount of TPM owner authorization information that is stored locally, the Windows operating system and TPM-based applications can perform certain actions in the TPM that require TPM owner authorization without requiring the user to enter the TPM owner password.
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
@@ -251,12 +251,12 @@ If you enable this policy setting, the Windows operating system will store the T
 
 If you disable or do not configure this policy setting, and the **Turn on TPM backup to Active Directory Domain Services** policy setting is also disabled or not configured, the default setting is to store the full TPM authorization value in the local registry. If this policy is disabled or not configured, and the **Turn on TPM backup to Active Directory Domain Services** policy setting is enabled, only the administrative delegation and the user delegation blobs are stored in the local registry.
 
-### Standard User Lockout Duration
+### <a href="" id="bkmk-tpmgp-suld"></a>Standard User Lockout Duration
 
 This policy setting allows you to manage the duration in minutes for counting standard user authorization failures for Trusted Platform Module (TPM) commands requiring authorization. An authorization failure occurs each time a standard user sends a command to the TPM and receives an error response that indicates an authorization failure occurred. Authorization failures that are older than the duration you set are ignored. If the number of TPM commands with an authorization failure within the lockout duration equals a threshold, a standard user is prevented from sending commands that require authorization to the TPM.
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
@@ -268,20 +268,20 @@ This setting helps administrators prevent the TPM hardware from entering a locko
 
 For each standard user, two thresholds apply. Exceeding either threshold prevents the user from sending a command that requires authorization to the TPM. Use the following policy settings to set the lockout duration:
 
--   [Standard User Individual Lockout Threshold](#BKMK_Individual)   This value is the maximum number of authorization failures that each standard user can have before the user is not allowed to send commands that require authorization to the TPM.
+-   [Standard User Individual Lockout Threshold](#bkmk-individual)   This value is the maximum number of authorization failures that each standard user can have before the user is not allowed to send commands that require authorization to the TPM.
 
--   [Standard User Total Lockout Threshold](#BKMK_Total)   This value is the maximum total number of authorization failures that all standard users can have before all standard users are not allowed to send commands that require authorization to the TPM.
+-   [Standard User Total Lockout Threshold](#bkmk-total)   This value is the maximum total number of authorization failures that all standard users can have before all standard users are not allowed to send commands that require authorization to the TPM.
 
 An administrator with the TPM owner password can fully reset the TPM's hardware lockout logic by using the TPM Management Console (tpm.msc). Each time an administrator resets the TPM's hardware lockout logic, all prior standard user TPM authorization failures are ignored. This allows standard users to immediately use the TPM normally.
 
 If you do not configure this policy setting, a default value of 480 minutes (8 hours) is used.
 
-### Standard User Individual Lockout Threshold
+### <a href="" id="bkmk-individual"></a>Standard User Individual Lockout Threshold
 
 This policy setting allows you to manage the maximum number of authorization failures for each standard user for the Trusted Platform Module (TPM). This value is the maximum number of authorization failures that each standard user can have before the user is not allowed to send commands that require authorization to the TPM. If the number of authorization failures for the user within the duration that is set for the **Standard User Lockout Duration** policy setting equals this value, the standard user is prevented from sending commands that require authorization to the Trusted Platform Module (TPM).
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
@@ -293,12 +293,12 @@ An administrator with the TPM owner password can fully reset the TPM's hardware
 
 If you do not configure this policy setting, a default value of 4 is used. A value of zero means that the operating system will not allow standard users to send commands to the TPM, which might cause an authorization failure.
 
-### Standard User Total Lockout Threshold
+### <a href="" id="bkmk-total"></a>Standard User Total Lockout Threshold
 
 This policy setting allows you to manage the maximum number of authorization failures for all standard users for the Trusted Platform Module (TPM). If the total number of authorization failures for all standard users within the duration that is set for the **Standard User Lockout Duration** policy equals this value, all standard users are prevented from sending commands that require authorization to the Trusted Platform Module (TPM).
 
 **Note**  
-This policy setting applies to the Windows operating systems listed in the [version table](#BKMK_version_table).
+This policy setting applies to the Windows operating systems listed in the [version table](#bkmk-version-table).
 
  
 
diff --git a/windows/keep-secure/trusted-platform-module-technology-overview.md b/windows/keep-secure/trusted-platform-module-technology-overview.md
index 9a9ecc1b5f..d8b99558cc 100644
--- a/windows/keep-secure/trusted-platform-module-technology-overview.md
+++ b/windows/keep-secure/trusted-platform-module-technology-overview.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 This topic for the IT professional describes the Trusted Platform Module (TPM) and how Windows uses it for access control and authentication. The topic provides links to other resources about the TPM.
 
-## Feature description
+## <a href="" id="bkmk-over"></a>Feature description
 
 
 Trusted Platform Module (TPM) technology is designed to provide hardware-based, security-related functions. A TPM chip is a secure crypto-processor that is designed to carry out cryptographic operations. The chip includes multiple physical security mechanisms to make it tamper resistant, and malicious software is unable to tamper with the security functions of the TPM. Some of the key advantages of using TPM technology are that you can:
@@ -36,7 +36,7 @@ Different versions of the TPM are defined in specifications by the Trusted Compu
 
 Windows can automatically provision and manage the TPM. Group Policy settings can be configured to control whether the TPM owner authorization value is backed up in Active Directory. Because the TPM state persists across operating system installations, TPM information is stored in a location in Active Directory that is separate from computer objects. Depending on an enterprise’s security goals, Group Policy can be configured to allow or prevent local administrators from resetting the TPM’s dictionary attack logic. Standard users can use the TPM, but Group Policy controls limit how many authorization failures standard users can attempt so that one user is unable to prevent other users or the administrator from using the TPM. TPM technology can also be used as a virtual smart card and for secure certificate storage. With BitLocker Network Unlock, domain-joined computers are not prompted for a BitLocker PIN.
 
-## Practical applications
+## <a href="" id="bkmk-app"></a>Practical applications
 
 
 Certificates can be installed or created on computers that are using the TPM. After a computer is provisioned, the RSA private key for a certificate is bound to the TPM and cannot be exported. The TPM can also be used as a replacement for smart cards, which reduces the costs associated with creating and disbursing smart cards.
@@ -47,12 +47,12 @@ Antimalware software can use the boot measurements of the operating system start
 
 The TPM has several Group Policy settings that can be used to manage how it is used. These settings can be used to manage the owner authorization value, the blocked TPM commands, the standard user lockout, and the backup of the TPM to AD DS. For more info, see [Trusted Platform Module Services Group Policy Settings](trusted-platform-module-services-group-policy-settings.md).
 
-## New and changed functionality
+## <a href="" id="bkmk-new"></a>New and changed functionality
 
 
 For more info on new and changed functionality for Trusted Platform Module in Windows 10, see [What's new in Trusted Platform Module?](../whats-new/trusted-platform-module.md).
 
-## Device health attestation
+## <a href="" id="bkmk-dha"></a>Device health attestation
 
 
 Device health attestation enables enterprises to establish trust based on hardware and software components of a managed device. With device heath attestation, you can configure an MDM server to query a health attestation service that will allow or deny a managed device access to a secure resource.
@@ -67,7 +67,7 @@ Some things that you can check on the device are:
 
  
 
-## Supported versions
+## <a href="" id="bkmk-supportedversions"></a>Supported versions
 
 
 <table>
@@ -107,7 +107,7 @@ Some things that you can check on the device are:
 
  
 
-## Additional Resources
+## <a href="" id="bkmk-additionalresources"></a>Additional Resources
 
 
 [TPM Fundamentals](tpm-fundamentals-windows-8.md)
diff --git a/windows/keep-secure/understand-applocker-policy-design-decisions.md b/windows/keep-secure/understand-applocker-policy-design-decisions.md
index 8ce60bebb6..d34824f7d7 100644
--- a/windows/keep-secure/understand-applocker-policy-design-decisions.md
+++ b/windows/keep-secure/understand-applocker-policy-design-decisions.md
@@ -62,7 +62,7 @@ You might need to control a limited number of apps because they access sensitive
 <tr class="odd">
 <td align="left"><p>Control only Classic Windows applications, only Universal Windows apps, or both</p></td>
 <td align="left"><p>AppLocker policies control apps by creating an allowed list of apps by file type. Because Universal Windows apps are categorized under the Publisher condition, Classic Windows applications and Universal Windows apps can be controlled together. AppLocker policies for Universal Windows apps can be applied only to apps that are installed on PCs that support the Windows Store, but Classic Windows applications can be controlled with AppLocker on all supported versions of Windows. The rules you currently have configured for Classic Windows applications can remain, and you can create new ones for Universal Windows apps.</p>
-<p>For a comparison of Classic Windows applications and Universal Windows apps, see [Comparing Classic Windows applications and Universal Windows apps for AppLocker policy design decisions](#BKMK_CompareClassicMetro) in this topic.</p></td>
+<p>For a comparison of Classic Windows applications and Universal Windows apps, see [Comparing Classic Windows applications and Universal Windows apps for AppLocker policy design decisions](#bkmk-compareclassicmetro) in this topic.</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p>Control apps by business group and user</p></td>
@@ -101,7 +101,7 @@ The following list contains files or types of files that cannot be managed by Ap
 
  
 
-### Comparing Classic Windows applications and Universal Windows apps for AppLocker policy design decisions
+### <a href="" id="bkmk-compareclassicmetro"></a>Comparing Classic Windows applications and Universal Windows apps for AppLocker policy design decisions
 
 AppLocker policies for Universal Windows apps can only be applied to apps that are installed on computers running Windows operating systems that support Windows Store apps. However, Classic Windows applications can be controlled in Windows Server 2008 R2 and Windows 7, in addition to those computers that support Universal Windows apps. The rules for Classic Windows applications and Universal Windows apps can be enforced together. The differences you should consider for Universal Windows apps are:
 
diff --git a/windows/keep-secure/use-windows-event-forwarding-to-assist-in-instrusion-detection.md b/windows/keep-secure/use-windows-event-forwarding-to-assist-in-instrusion-detection.md
index ecffacc0aa..ef5fe8f433 100644
--- a/windows/keep-secure/use-windows-event-forwarding-to-assist-in-instrusion-detection.md
+++ b/windows/keep-secure/use-windows-event-forwarding-to-assist-in-instrusion-detection.md
@@ -37,9 +37,9 @@ Here's an approximate scaling guide for WEF events:
 
  
 
-Event generation on a device must be enabled either separately or as part of the GPO for the baseline WEF implementation, including enabling of disabled event logs and setting channel permissions. For more info, see [Appendix C - Event channel settings (enable and channel access) methods](#BKMK_AppendixC). This is because WEF is a passive system with regards to the event log. It cannot change the size of event log files, enable disabled event channels, change channel permissions, or adjust a security audit policy. WEF only queries event channels for existing events. Additionally, having event generation already occurring on a device allows for more complete event collection building a complete history of system activity. Otherwise, you'll be limited to the speed of GPO and WEF subscription refresh cycles to make changes to what is being generated on the device. On modern devices, enabling additional event channels and expanding the size of event log files has not resulted in noticeable performance differences.
+Event generation on a device must be enabled either separately or as part of the GPO for the baseline WEF implementation, including enabling of disabled event logs and setting channel permissions. For more info, see [Appendix C - Event channel settings (enable and channel access) methods](#bkmk-appendixc). This is because WEF is a passive system with regards to the event log. It cannot change the size of event log files, enable disabled event channels, change channel permissions, or adjust a security audit policy. WEF only queries event channels for existing events. Additionally, having event generation already occurring on a device allows for more complete event collection building a complete history of system activity. Otherwise, you'll be limited to the speed of GPO and WEF subscription refresh cycles to make changes to what is being generated on the device. On modern devices, enabling additional event channels and expanding the size of event log files has not resulted in noticeable performance differences.
 
-For the minimum recommended audit policy and registry system ACL settings, see [Appendix A - Minimum recommended minimum audit policy](#BKMK_AppendixA) and [Appendix B - Recommended minimum registry system ACL policy](#BKMK_AppendixB).
+For the minimum recommended audit policy and registry system ACL settings, see [Appendix A - Minimum recommended minimum audit policy](#bkmk-appendixa) and [Appendix B - Recommended minimum registry system ACL policy](#bkmk-appendixb).
 
 **Note**  
 These are only minimum values need to meet what the WEF subscription selects.
@@ -55,7 +55,7 @@ This means you would create two base subscriptions:
 
 Each using the respective event query below. Note that for the Targeted subscription enabling the “read existing events” option should be set to true to allow collection of existing events from systems. By default, WEF subscriptions will only forward events generated after the WEF subscription was received by the client.
 
-In [Appendix E – Annotated Baseline Subscription Event Query](#BKMK_AppendixE) and [Appendix F – Annotated Suspect Subscription Event Query](#BKMK_AppendixF), the event query XML is included when creating WEF subscriptions. These are annotated for query purpose and clarity. Individual &lt;Query&gt; element can be removed or edited without affecting the rest of the query.
+In [Appendix E – Annotated Baseline Subscription Event Query](#bkmk-appendixe) and [Appendix F – Annotated Suspect Subscription Event Query](#bkmk-appendixf), the event query XML is included when creating WEF subscriptions. These are annotated for query purpose and clarity. Individual &lt;Query&gt; element can be removed or edited without affecting the rest of the query.
 
 ### Common WEF questions
 
@@ -93,7 +93,7 @@ The HTTPS option is available if certificate based authentication is used, in ca
 
 ### Do WEF Clients have a separate buffer for events?
 
-The WEF client machines local event log is the buffer for WEF for when the connection to the WEC server is lost. To increase the “buffer size”, increase the maximum file size of the specific event log file where events are being selected. For more info, see [Appendix C – Event Channel Settings (enable and Channel Access) methods](#BKMK_AppendixC).
+The WEF client machines local event log is the buffer for WEF for when the connection to the WEC server is lost. To increase the “buffer size”, increase the maximum file size of the specific event log file where events are being selected. For more info, see [Appendix C – Event Channel Settings (enable and Channel Access) methods](#bkmk-appendixc).
 
 When the event log overwrites existing events (resulting in data loss if the device is not connected to the Event Collector), there is no notification sent to the WEF collector that events are lost from the client. Neither is there an indicator that there was a gap encountered in the event stream.
 
@@ -147,7 +147,7 @@ For collector initiated subscriptions: The subscription contains the list of mac
 
 Yes. If you desire a High-Availability environment, simply configure multiple WEC servers with the same subscription configuration and publish both WEC Server URIs to WEF clients. WEF Clients will forward events simultaneously to the configured subscriptions on the WEC servers, if they have the appropriate access.
 
-### What are the WEC server’s limitations?
+### <a href="" id="what-are-the-wec-server-s-limitations-"></a>What are the WEC server’s limitations?
 
 There are three factors that limit the scalability of WEC servers. The general rule for a stable WEC server on commodity hardware is “10k x 10k” – meaning, no more than 10,000 concurrently active WEF Clients per WEC server and no more than 10,000 events/second average event volume.
 
@@ -178,7 +178,7 @@ The subscription is essentially a collection of query statements applied to the
 
 To gain the most value out of the baseline subscription we recommend to have the following requirements set on the device to ensure that the clients are already generating the required events to be forwarded off the system.
 
--   Apply a security audit policy that is a super-set of the recommended minimum audit policy. For more info, see [Appendix A – Minimum Recommended minimum Audit Policy](#BKMK_AppendixA). This ensures that the security event log is generating the required events.
+-   Apply a security audit policy that is a super-set of the recommended minimum audit policy. For more info, see [Appendix A – Minimum Recommended minimum Audit Policy](#bkmk-appendixa). This ensures that the security event log is generating the required events.
 
 -   Apply at least an Audit-Only AppLocker policy to devices.
 
@@ -188,9 +188,9 @@ To gain the most value out of the baseline subscription we recommend to have the
 
 -   Enable disabled event channels and set the minimum size for modern event files.
 
--   Currently, there is no GPO template for enabling or setting the maximum size for the modern event files. This must be done by using a GPO. For more info, see [Appendix C – Event Channel Settings (enable and Channel Access) methods](#BKMK_AppendixC).
+-   Currently, there is no GPO template for enabling or setting the maximum size for the modern event files. This must be done by using a GPO. For more info, see [Appendix C – Event Channel Settings (enable and Channel Access) methods](#bkmk-appendixc).
 
-The annotated event query can be found in the following. For more info, see [Appendix F – Annotated Baseline Subscription Event Query](#BKMK_AppendixF).
+The annotated event query can be found in the following. For more info, see [Appendix F – Annotated Baseline Subscription Event Query](#bkmk-appendixf).
 
 -   Anti-malware events from Microsoft Antimalware or Windows Defender. This can be configured for any given anti-malware product easily if it writes to the Windows event log.
 
@@ -198,7 +198,7 @@ The annotated event query can be found in the following. For more info, see [App
 
 -   AppLocker Process Create events (EXE, script, packaged App installation and execution).
 
--   Registry modification events. For more info, see [Appendix B – Recommended minimum Registry System ACL Policy](#BKMK_AppendixB).
+-   Registry modification events. For more info, see [Appendix B – Recommended minimum Registry System ACL Policy](#bkmk-appendixb).
 
 -   OS startup and shutdown
 
@@ -367,7 +367,7 @@ This adds some possible intruder-related activity to help analyst further refine
 
     -   Can possibly detect a USB device loading multiple device drivers. For example, a USB\_STOR device loading the keyboard or network driver.
 
-## Appendix A - Minimum recommended minimum audit policy
+## <a href="" id="bkmk-appendixa"></a>Appendix A - Minimum recommended minimum audit policy
 
 
 If your organizational audit policy enables additional auditing to meet its needs, that is fine. The policy below is the minimum audit policy settings needed to enable events collected by both baseline and targeted subscriptions.
@@ -407,7 +407,7 @@ If your organizational audit policy enables additional auditing to meet its need
 
  
 
-## Appendix B - Recommended minimum registry system ACL policy
+## <a href="" id="bkmk-appendixb"></a>Appendix B - Recommended minimum registry system ACL policy
 
 
 The Run and RunOnce keys are useful for intruders and malware persistence. It allows code to be run (or run only once then removed, respectively) when a user logs into the system.
@@ -418,7 +418,7 @@ Use the following figures to see how you can configure those registry keys.
 
 ![default acl for run key](images/runkey.png)![default acl for runonce key](images/runoncekey.png)
 
-## Appendix C - Event channel settings (enable and channel access) methods
+## <a href="" id="bkmk-appendixc"></a>Appendix C - Event channel settings (enable and channel access) methods
 
 
 Some channels are disabled by default and have to be enabled. Others, such as Microsoft-Windows-CAPI2/Operational must have the channel access modified to allow the Event Log Readers built-in security group to read from it.
@@ -441,7 +441,7 @@ The following GPO snippet performs the following:
 
 ![configure event channels](images/capi-gpo.png)
 
-## Appendix D - Minimum GPO for WEF Client configuration
+## <a href="" id="bkmk-appendixd"></a>Appendix D - Minimum GPO for WEF Client configuration
 
 
 Here are the minimum steps for WEF to operate:
@@ -454,7 +454,7 @@ Here are the minimum steps for WEF to operate:
 
 ![configure the wef client](images/wef-client-config.png)
 
-## Appendix E – Annotated baseline subscription event query
+## <a href="" id="bkmk-appendixe"></a>Appendix E – Annotated baseline subscription event query
 
 
 ``` syntax
@@ -620,7 +620,7 @@ Here are the minimum steps for WEF to operate:
 </QueryList>
 ```
 
-## Appendix F – Annotated Suspect Subscription Event Query
+## <a href="" id="bkmk-appendixf"></a>Appendix F – Annotated Suspect Subscription Event Query
 
 
 ``` syntax
@@ -692,7 +692,7 @@ Here are the minimum steps for WEF to operate:
 </QueryList> 
 ```
 
-## Appendix G - Online resources
+## <a href="" id="bkmk-appendixg"></a>Appendix G - Online resources
 
 
 You can get more info with the following links:
diff --git a/windows/keep-secure/user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md b/windows/keep-secure/user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md
index 9e3bce62cd..ecc4948360 100644
--- a/windows/keep-secure/user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md
+++ b/windows/keep-secure/user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Admin Approval Mode for the Built-in Administrator account** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop.md b/windows/keep-secure/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop.md
index 3c188f59ad..65a92d9326 100644
--- a/windows/keep-secure/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop.md
+++ b/windows/keep-secure/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, and security considerations for the **User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode.md b/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode.md
index 44daa6c1c8..8524789259 100644
--- a/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode.md
+++ b/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-standard-users.md b/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-standard-users.md
index 2cf38a7c23..d50a6930a3 100644
--- a/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-standard-users.md
+++ b/windows/keep-secure/user-account-control-behavior-of-the-elevation-prompt-for-standard-users.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Behavior of the elevation prompt for standard users** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-detect-application-installations-and-prompt-for-elevation.md b/windows/keep-secure/user-account-control-detect-application-installations-and-prompt-for-elevation.md
index ac4704600a..e229cd654f 100644
--- a/windows/keep-secure/user-account-control-detect-application-installations-and-prompt-for-elevation.md
+++ b/windows/keep-secure/user-account-control-detect-application-installations-and-prompt-for-elevation.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Detect application installations and prompt for elevation** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-only-elevate-executables-that-are-signed-and-validated.md b/windows/keep-secure/user-account-control-only-elevate-executables-that-are-signed-and-validated.md
index 2da0bc272b..6e31e0b35d 100644
--- a/windows/keep-secure/user-account-control-only-elevate-executables-that-are-signed-and-validated.md
+++ b/windows/keep-secure/user-account-control-only-elevate-executables-that-are-signed-and-validated.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Only elevate executables that are signed and validated** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations.md b/windows/keep-secure/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations.md
index 6ed8a660e3..d1772f9cee 100644
--- a/windows/keep-secure/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations.md
+++ b/windows/keep-secure/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Only elevate UIAccess applications that are installed in secure locations** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-overview.md b/windows/keep-secure/user-account-control-overview.md
index 6a43f96b95..71d4e00483 100644
--- a/windows/keep-secure/user-account-control-overview.md
+++ b/windows/keep-secure/user-account-control-overview.md
@@ -17,7 +17,7 @@ author: brianlic-msft
 
 User Account Control (UAC) helps prevent malware from damaging a PC and helps organizations deploy a better-managed desktop. With UAC, apps and tasks always run in the security context of a non-administrator account, unless an administrator specifically authorizes administrator-level access to the system. UAC can block the automatic installation of unauthorized apps and prevent inadvertent changes to system settings.
 
-## 
+## <a href="" id="bkmk-over"></a>
 
 
 UAC allows all users to log on to their computers using a standard user account. Processes launched using a standard user token may perform tasks using access rights granted to a standard user. For instance, Windows Explorer automatically inherits standard user level permissions. Additionally, any apps that are started using Windows Explorer (for example, by double-clicking a shortcut) also run with the standard set of user permissions. Many apps, including those that are included with the operating system itself, are designed to work properly in this way.
@@ -26,12 +26,12 @@ Other apps, especially those that were not specifically designed with security s
 
 When an app needs to run with more than standard user rights, UAC can restore additional user groups to the token. This enables the user to have explicit control of apps that are making system level changes to their computer or device.
 
-## Practical applications
+## <a href="" id="bkmk-app"></a>Practical applications
 
 
 Admin Approval Mode in UAC helps prevent malware from silently installing without an administrator's knowledge. It also helps protect from inadvertent system-wide changes. Lastly, it can be used to enforce a higher level of compliance where administrators must actively consent or provide credentials for each administrative process.
 
-## New and changed functionality
+## <a href="" id="bkmk-new"></a>New and changed functionality
 
 
 To find out what's new in UAC for Windows 10, see [User Account Control](../whats-new/user-account-control.md).
diff --git a/windows/keep-secure/user-account-control-run-all-administrators-in-admin-approval-mode.md b/windows/keep-secure/user-account-control-run-all-administrators-in-admin-approval-mode.md
index 2daaed2d20..0998c47e1a 100644
--- a/windows/keep-secure/user-account-control-run-all-administrators-in-admin-approval-mode.md
+++ b/windows/keep-secure/user-account-control-run-all-administrators-in-admin-approval-mode.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Run all administrators in Admin Approval Mode** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation.md b/windows/keep-secure/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation.md
index b69e7d9360..6cadbaa9d3 100644
--- a/windows/keep-secure/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation.md
+++ b/windows/keep-secure/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Switch to the secure desktop when prompting for elevation** security policy setting.
 
diff --git a/windows/keep-secure/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations.md b/windows/keep-secure/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations.md
index 67e3ec35c2..fa4736f4de 100644
--- a/windows/keep-secure/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations.md
+++ b/windows/keep-secure/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations.md
@@ -18,9 +18,9 @@ author: brianlic-msft
 **In this article**
 
 -   [Reference](#reference)
--   [Policy management](#policy_management)
--   [Security considerations](#security_considerations)
--   [Related topics](#related_topics)
+-   [Policy management](#policy-management)
+-   [Security considerations](#security-considerations)
+-   [Related topics](#related-topics)
 
 Describes the best practices, location, values, policy management and security considerations for the **User Account Control: Virtualize file and registry write failures to per-user locations** security policy setting.
 
diff --git a/windows/keep-secure/vpn-profile-options.md b/windows/keep-secure/vpn-profile-options.md
index e8d7dfa4da..bc3a1f3c4e 100644
--- a/windows/keep-secure/vpn-profile-options.md
+++ b/windows/keep-secure/vpn-profile-options.md
@@ -18,11 +18,11 @@ author: brianlic-msft
 
 **In this article**
 
--   [Always On](#always_on)
--   [App-triggered VPN](#app-triggered_vpn)
--   [Traffic filters](#traffic_filters)
--   [LockDown VPN](#lockdown_vpn)
--   [Learn more](#learn_more)
+-   [Always On](#always-on)
+-   [App-triggered VPN](#app-triggered-vpn)
+-   [Traffic filters](#traffic-filters)
+-   [LockDown VPN](#lockdown-vpn)
+-   [Learn more](#learn-more)
 
 Virtual private networks (VPN) let you give your users secure remote access to your company network. Windows 10 adds useful new VPN profile options to help you manage how users connect.
 
diff --git a/windows/keep-secure/why-a-pin-is-better-than-a-password.md b/windows/keep-secure/why-a-pin-is-better-than-a-password.md
index 35f2a1e433..2b456474f4 100644
--- a/windows/keep-secure/why-a-pin-is-better-than-a-password.md
+++ b/windows/keep-secure/why-a-pin-is-better-than-a-password.md
@@ -19,13 +19,13 @@ author: brianlic-msft
 
 **In this article**
 
--   [PIN is tied to the device](#pin_is_tied_to_the_device)
--   [PIN is local to the device](#pin_is_local_to_the_device)
--   [PIN is backed by hardware](#pin_is_backed_by_hardware)
--   [PIN can be complex](#pin_can_be_complex)
--   [What if someone steals the laptop or phone?](#what_if_someone_steals_the_laptop_or_phone_)
--   [Why do you need a PIN to use Windows Hello?](#why_do_you_need_a_pin_to_use_windows_hello_)
--   [Related topics](#related_topics)
+-   [PIN is tied to the device](#pin-is-tied-to-the-device)
+-   [PIN is local to the device](#pin-is-local-to-the-device)
+-   [PIN is backed by hardware](#pin-is-backed-by-hardware)
+-   [PIN can be complex](#pin-can-be-complex)
+-   [What if someone steals the laptop or phone?](#what-if-someone-steals-the-laptop-or-phone-)
+-   [Why do you need a PIN to use Windows Hello?](#why-do-you-need-a-pin-to-use-windows-hello-)
+-   [Related topics](#related-topics)
 
 Microsoft Passport in Windows 10 enables users to sign in to their device using a PIN. How is a PIN different from (and better than) a password?
 
diff --git a/windows/keep-secure/windows-10-mobile-security-guide.md b/windows/keep-secure/windows-10-mobile-security-guide.md
index c94eeae25a..0ec085e039 100644
--- a/windows/keep-secure/windows-10-mobile-security-guide.md
+++ b/windows/keep-secure/windows-10-mobile-security-guide.md
@@ -19,11 +19,11 @@ author: brianlic-msft
 **In this article**
 
 -   [Overview](#overview)
--   [Identity and access control](#identity_and_access_control)
--   [Data protection](#data_protection)
--   [Malware resistance](#malware_resistance)
--   [App platform security](#app_platform_security__)
--   [Related topics](#related_topics)
+-   [Identity and access control](#identity-and-access-control)
+-   [Data protection](#data-protection)
+-   [Malware resistance](#malware-resistance)
+-   [App platform security](#app-platform-security--)
+-   [Related topics](#related-topics)
 
 This guide provides a detailed description of the most important security features in the Windows 10 Mobile operating system—identity access and control, data protection, malware resistance, and app platform security.
 
@@ -200,7 +200,7 @@ Table 2. Windows 10 cryptography policies
 
 For a complete list of policies available, see [Policy CSP](http://go.microsoft.com/fwlink/p/?LinkId=733963).
 
-### Enterprise data protection
+### <a href="" id="enterprise-data-protection--"></a>Enterprise data protection
 
 Enterprises have seen huge growth in the convergence of personal and corporate data storage. Personal data is frequently stored on corporate devices and vice versa. This situation increases the potential for compromise of sensitive corporate data.
 
@@ -223,7 +223,7 @@ EDP is currently being tested in select customer evaluation programs. For more i
 
  
 
-### Enlightenment
+### <a href="" id="enlightenment--"></a>Enlightenment
 
 Third-party data loss protection solutions usually require developers to wrap their apps. In contrast, EDP puts the intelligence in Windows 10 Mobile so that it doesn’t require wrappers. As a result, most apps require nothing extra to work with EDP.
 
@@ -353,11 +353,11 @@ Windows 10 Mobile devices use a System on a Chip (SoC) design provided by SoC v
 
 The following sections describe these improvements in more detail.
 
-### Enterprise-grade secure hardware
+### <a href="" id="secure-hardware"></a>Enterprise-grade secure hardware
 
 Taking full advantage of Windows 10 Mobile security features requires advancements in hardware-based security. These advances include UEFI with Secure Boot, TPM, and biometric sensors (hardware dependent).
 
-### UEFI with Secure Boot
+### <a href="" id="uefi-with-secure-boot--"></a>UEFI with Secure Boot
 
 When a Windows 10 Mobile device starts, it begins the process of loading the operating system by locating the bootloader in the device’s storage system. Without safeguards in place, the phone might simply hand control over to the bootloader without even determining whether it’s a trusted operating system or malware.
 
@@ -371,7 +371,7 @@ All Windows 10 Mobile devices always have Secure Boot enabled. In addition, the
 
 Neither Windows 10 Mobile, apps, or even malware can change the UEFI configuration. For more information about UEFI with Secure Boot, read [Protecting the pre-OS environment with UEFI](http://go.microsoft.com/fwlink/p/?LinkId=722909).
 
-### Trusted Platform Module
+### <a href="" id="trusted-platform-module--"></a>Trusted Platform Module
 
 A Trusted Platform Module is a tamper-resistant cryptographic module that enhances the security and privacy of computing platforms. The TPM is incorporated as a component in a trusted computing platform like a PC, tablet, or mobile phone. A trusted computing platform is specially designed to work with the TPM to support privacy and security scenarios that software alone cannot achieve. It is a Windows 10 Mobile device hardware certification requirement to include a TPM in every Windows 10 Mobile device.
 
@@ -404,7 +404,7 @@ Several Windows 10 Mobile security features require TPM:
 
 Still other features will use the TPM if it is available. For example, Microsoft Passport does not require TPM but uses it if it’s available. Organizations can configure policy to require TPM for Microsoft Passport.
 
-### Biometrics
+### <a href="" id="biometrics--"></a>Biometrics
 
 Windows 10 Mobile makes biometrics a core security feature. Microsoft has fully integrated biometrics into the Windows 10 Mobile security components, not just tacked it on top of the platform (as was the case in previous versions of Windows). This is a big change. Earlier biometric implementations were largely front-end methods that simplified authentication. Under the hood, the system used biometrics to access a password, which it then used for authentication behind the scenes. Biometrics may have provided convenience but not necessarily enterprise-grade authentication.
 
@@ -412,17 +412,17 @@ Microsoft has been evangelizing the importance of enterprise-grade biometric sen
 
 In the future, Microsoft expects OEMs to produce even more advanced enterprise-grade biometric sensors and to continue to integrate them into mobile devices. As a result, biometrics will become a commonplace authentication method as part of an MFA system.
 
-### Enterprise-grade secure Windows startup
+### <a href="" id="enterprise-grade-secure-windows-startup--"></a>Enterprise-grade secure Windows startup
 
 UEFI with Secure Boot uses hardware technologies to help protect users from bootkits. Secure Boot can validate the integrity of the devices, firmware, and bootloader. After the bootloader launches, users must rely on the operating system to protect the integrity of the remainder of the system.
 
-### Trusted Boot
+### <a href="" id="trusted-boot--"></a>Trusted Boot
 
 When UEFI with Secure Boot verifies that it trusts the bootloader and starts Windows 10 Mobile, the Windows Trusted Boot feature protects the rest of the startup process by verifying that all Windows startup components are trustworthy (for example, signed by a trusted source) and have integrity. The bootloader verifies the digital signature of the Windows kernel before loading it. The Windows kernel, in turn, verifies every other component of the Windows startup process, including the boot drivers, and startup files.
 
 If someone has modified a file (for example, if malware has tampered with it or it has been corrupted), Trusted Boot will detect the problem and attempt to automatically repair the corrupted component. When repaired, Windows will start normally after only a brief delay.
 
-### Measured Boot
+### <a href="" id="measured-boot--"></a>Measured Boot
 
 The biggest challenge with rootkits and bootkits in earlier versions of Windows was that they could frequently be undetectable to the client. Because they often started before Windows defenses and the antimalware solution—and they had system-level privileges—rootkits and bootkits could completely disguise themselves while continuing to access system resources. Although UEFI with Secure Boot and Trusted Boot could prevent most rootkits and bootkits, intruders could still potentially exploit a few attack vectors (for example, if someone compromised the signature used to sign a boot component, such as a non-Microsoft driver, and used it to sign a malicious one).
 
@@ -430,13 +430,13 @@ Windows 10 Mobile implements the Measured Boot feature, which uses the TPM hard
 
 Measured Boot focuses on acquiring the measurement data and protecting it against tampering. You must couple it, however, with a service that can analyze the data to determine device health and provide a more complete security service. The next section introduces just such a service.
 
-### Device health attestation
+### <a href="" id="device-health-attestation--"></a>Device health attestation
 
 Device health attestation is new feature in Windows 10 Mobile that helps prevent low-level malware infections. Device health attestation uses a device’s TPM and firmware to measure the critical security properties of the device’s BIOS and Windows startup processes. These measurements are made in such a way that even on a system infected with kernel-level malware or a rootkit, an attacker is unlikely to spoof the properties.
 
 You can integrate Device health attestation with Microsoft Intune or non-Microsoft MDM solutions and combine these hardware-measured security properties with other device properties to gain an overall view of the device’s health and compliance state. From there, you can use this integration in a variety of scenarios, from detecting jailbroken devices to monitoring device compliance, generating compliance reports, alerting users or administrators, initiating corrective action on the device, and managing conditional access to resources such as Office 365.
 
-### Conditional Access
+### <a href="" id="conditional-access--"></a>Conditional Access
 
 The example that follows shows how Windows 10 protective measures integrate and work with Intune and non-Microsoft MDM solutions. It demonstrates how the phone security architecture in Windows 10 Mobile helps you monitor and verify compliance and how the security and trust rooted in the device hardware protect corporate resources end to end.
 
@@ -456,22 +456,22 @@ When a user turns on a phone:
 
 Because this solution can detect and prevent low-level malware that may be extremely difficult to detect any other way, Microsoft recommends that you consider implementing a Device health attestation-enabled MDM system like Intune that takes advantage of the Windows 10 Mobile cloud-based health attestation server feature to detect and block devices infected with advanced malware.
 
-## App platform security
+## <a href="" id="app-platform-security--"></a>App platform security
 
 
 Applications built for Windows are designed to be secure and free of defects, but the reality is that human error can create vulnerabilities in code. When malicious users and software identify such vulnerabilities, they may attempt to manipulate data in memory in the hope that they can compromise the system and take control.
 
 To mitigate these risks, Windows 10 Mobile includes a series of improvements to make it more difficult for malware to compromise the device. Windows 10 Mobile even enables organizations to choose which apps are allowed to run on mobile devices. In addition, it includes improvements that can dramatically reduce the likelihood that newly discovered vulnerabilities can be successful exploited. It takes detailed knowledge of operating system architecture and malware exploit techniques to fully appreciate the impact of these improvements, but the sections that follow explain them at a high level.
 
-### Device Guard
+### <a href="" id="device-guard--"></a>Device Guard
 
 Device Guard is a feature set that consists of both hardware and software system integrity-hardening features. These features revolutionize Windows operating system security by moving the entire operating system to a trust-nothing model.
 
 All apps on Windows 10 Mobile must be digitally signed and come from Windows Store or a trusted enterprise store. Device Guard implements policies that further restrict this. By default, Device Guard supports all apps from Windows Store. You can create policies that define the apps that can and cannot run on the Windows 10 Mobile device. If the app doesn’t have a digital signature or is prevented by policy, or it does not come from a trusted store, it will not run on Windows 10 Mobile.
 
-Advanced hardware features (described earlier in the [Enterprise-grade secure hardware](#secure_hardware) section) drive these security offerings. By integrating these hardware features further into the core operating system, Windows 10 Mobile can use them in new ways. To deliver this additional security, Device Guard requires UEFI with Secure Boot.
+Advanced hardware features (described earlier in the [Enterprise-grade secure hardware](#secure-hardware) section) drive these security offerings. By integrating these hardware features further into the core operating system, Windows 10 Mobile can use them in new ways. To deliver this additional security, Device Guard requires UEFI with Secure Boot.
 
-### AppContainer
+### <a href="" id="appcontainer--"></a>AppContainer
 
 The Windows 10 Mobile security model is based on the principle of least privilege and uses isolation to achieve it. Every app and even portions of the operating system itself run inside their own isolated sandbox called an AppContainer—a secured isolation boundary within which an app and its processes can run. Each AppContainer is defined and implemented through a security policy.
 
@@ -491,7 +491,7 @@ Apps receive the minimal privileges they need to perform their legitimate tasks.
 
 The combination of Device Guard and AppContainer help to prevent unauthorized apps from running. In the event malware slips into the app ecosystem, the AppContainer helps to constrain the app and limit potential damage. The Windows 10 Mobile trust-nothing model doesn’t assume that any component is perfect, however, potential vulnerabilities in apps, AppContainers, and Windows 10 Mobile itself could give an attacker a chance to compromise a system. For this reason, we need redundant vulnerability mitigations. The next several topics describe some of the redundant mitigations in Windows 10 Mobile.
 
-### Address Space Layout Randomization
+### <a href="" id="address-space-layout-randomization--"></a>Address Space Layout Randomization
 
 One of the most common techniques attackers use to gain access to a system is to find a vulnerability in a privileged process that is already running, guess or find a location in memory where important system code and data reside, and then overwrite that information with a malicious payload. In the early days of operating systems, any malware that could write directly to the system memory could do such a thing; the malware would simply overwrite system memory in well-known and predictable locations.
 
@@ -503,13 +503,13 @@ Figure 3. ASLR at work
 
 Microsoft has substantively improved the ASLR implementation in Windows 10 Mobile over previous versions, especially with 64-bit system and application processes that can take advantage of a vastly increased memory space, making it even more difficult for malware to predict where Windows 10 Mobile stores vital data. When used on systems that have TPMs, ASLR memory randomization will be increasingly unique across devices, making it even more difficult for a successful exploit that works on one system to work reliably on another. Microsoft also holistically applied ASLR across the entire system in Windows 10 Mobile rather than it working only on specific apps.
 
-### Data Execution Prevention
+### <a href="" id="data-execution-prevention--"></a>Data Execution Prevention
 
 Malware depends on its ability to put a malicious payload into memory with the hope that an unsuspecting user will execute it later. ASLR makes that much more difficult.
 
 Extending that protection, it would be great if you could prevent malware from running if it wrote to an area that you have allocated solely for the storage of information. Data Execution Prevention (DEP) does exactly that, substantially reducing the range of memory that malicious code can use for its benefit. DEP uses the **No execute** bit on modern CPUs to mark blocks of memory as read only so that malware can’t use those blocks to execute malicious code. All Windows 10 and Windows 10 Mobile devices support DEP.
 
-### Windows heap
+### <a href="" id="windows-heap--"></a>Windows heap
 
 The heap is a location in memory that Windows uses to store dynamic application data. Microsoft continues to improve on earlier Windows heap designs by further mitigating the risk of heap exploits that an attacker could use.
 
@@ -521,11 +521,11 @@ Windows 10 Mobile has several important improvements to the security of the hea
 
 -   Windows 10 Mobile uses “guard pages” before and after blocks of memory as tripwires. If an attacker attempts to write past a block of memory (a common technique known as a buffer overflow), the attacker will have to overwrite a guard page. Any attempt to modify a guard page is considered a memory corruption, and Windows 10 Mobile responds by instantly terminating the app.
 
-### Memory reservations
+### <a href="" id="memory-reservations--"></a>Memory reservations
 
 Microsoft reserves the lowest 64 KB of process memory for the operating system. Apps are no longer allowed to allocate that portion of the memory, which makes it more difficult for malware to overwrite critical system data structures in memory.
 
-### Control Flow Guard
+### <a href="" id="control-flow-guard--"></a>Control Flow Guard
 
 When Windows loads applications into memory, it allocates space to those applications based on the size of the code, requested memory, and other factors. When an application begins to execute code, it calls additional code located in other memory addresses. The relationships among the code locations are well known—they are written in the code itself—but until Windows 10 Mobile, the operating system didn’t enforce the flow among these locations, giving attackers the opportunity to change the flow to meet their needs. In other words, an application exploit takes advantage of this behavior by running code that the application may not typically run.
 
@@ -533,7 +533,7 @@ Windows 10 Mobile mitigates this kind of threat through the Control Flow Guard
 
 You cannot configure CFG; rather, an application developer can take advantage of CFG by configuring it when he or she compiles the application. Consider asking application developers and software vendors to deliver trustworthy Windows applications compiled with CFG enabled. Of course, browsers are a key entry point for attacks; thus Microsoft Edge and other Windows features take full advantage of CFG.
 
-### Protected processes
+### <a href="" id="protected-processes--"></a>Protected processes
 
 In general, preventing a computer security incident is more cost-effective than repairing the damage an incident can cause. For malware in particular, most security controls are designed to prevent an attack from being initially successful. The reasoning is that if malware cannot infect the system, the system is immune to malware.
 
@@ -597,7 +597,7 @@ Figure 4. The IT process for Store for Business
 
 For details about the process of distributing apps through Store for Business, see [Find and acquire apps](../manage/find-and-acquire-apps.md).
 
-### The user side
+### <a href="" id="the-user-side--"></a>The user side
 
 After you have prepared Store for Business, the user side of the process takes over. This side of the process is designed to be user friendly, with the primary app deployment method—through Store for Business—streamlined and straightforward. This process doesn’t require an MDM system or any on-premises infrastructure. In fact, the user never sees the “for Business” label, just the familiar Windows Store.
 
diff --git a/windows/keep-secure/windows-10-security-guide.md b/windows/keep-secure/windows-10-security-guide.md
index 20f2d49e8f..a8991c8f6e 100644
--- a/windows/keep-secure/windows-10-security-guide.md
+++ b/windows/keep-secure/windows-10-security-guide.md
@@ -22,10 +22,10 @@ author: brianlic-msft
 -   [Identity and access control](#identity)
 -   [Information protection](#information)
 -   [Malware resistance](#malware)
--   [Secure the Windows core](#secure_the_windows_core)
--   [Secure the Windows desktop](#secure_the_windows_desktop)
+-   [Secure the Windows core](#secure-the-windows-core)
+-   [Secure the Windows desktop](#secure-the-windows-desktop)
 -   [Conclusion](#conclusion)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 This guide provides a detailed description of the most important security improvements in the Windows 10 operating system, with links to more detailed articles about many of its security features. Wherever possible, specific recommendations are provided to help you implement and configure Windows 10 security features.
 
@@ -40,7 +40,7 @@ Windows 10 is designed to protect against known and emerging security threats a
 
 -   [**Malware resistance**](#malware) includes architectural changes that can isolate critical system and security components from threats. Several new features in Windows 10 help reduce the threat of malware, including VBS, Device Guard, Microsoft Edge, and an entirely new version of Windows Defender. In addition, the many antimalware features from the Windows 8.1 operating system— including AppContainers for application sandboxing and numerous boot-protection features, such as Trusted Boot—have been carried forward and improved in Windows 10.
 
-## Identity and access control
+## <a href="" id="identity"></a>Identity and access control
 
 
 Traditionally, access control is a process that has three components:
@@ -124,7 +124,7 @@ Microsoft Passport effectively mitigates two major security risks. First, it eli
 
 To compromise a Microsoft Passport credential that TPM protects, an attacker must have access to the physical device, and then must find a way to spoof the user’s biometrics or guess his or her PIN—and all of this must be done before TPM anti-hammer capabilities lock the device. This sets the bar magnitudes of order higher than password phishing attacks.
 
-### 
+### <a href="" id="windows-hello"></a>
 
 **Windows Hello**
 
@@ -156,7 +156,7 @@ Figure 1. Set the number of invalid access attempts prior to lockout
 
 Now, your PC is configured with brute-force protection. Restart your PC. When prompted to log on, mistype your password until the PC restarts. Now, try to guess the 48-character recovery key. You will be glad you printed it out beforehand.
 
-## Information protection
+## <a href="" id="information"></a>Information protection
 
 
 When users travel, their organization’s confidential data goes with them. Wherever confidential data is stored, it must be protected against unauthorized access. Windows has a long history of providing at-rest data-protection solutions that guard against nefarious attackers, beginning with the Encrypting File System in the Windows 2000 operating system. More recently, BitLocker has provided encryption for full drives and portable drives; in Windows 10, BitLocker will even protect individual files, with data loss prevention capabilities. Windows consistently improves data protection by improving existing options and by providing new strategies.
@@ -344,7 +344,7 @@ Part of the Microsoft Desktop Optimization Pack, MBAM makes it easier to manage
 
 For more information about MBAM, including how to obtain it, see [Microsoft BitLocker Administration and Monitoring](http://go.microsoft.com/fwlink/p/?LinkId=626935) on the MDOP TechCenter.
 
-## Malware resistance
+## <a href="" id="malware"></a>Malware resistance
 
 
 In movies, security threats always seem to be initiated by a nefarious hacker sitting in front of a monitor with green text scrolling across it. In the real world, the vast majority of security threats occur without any human interaction at all. Just as software has automated so much of our lives, malware has automated attacks on our PCs. Those attacks are relentless. Malware is constantly changing, and when it infects a PC, it can in some cases be extremely difficult to detect and remove.
@@ -437,7 +437,7 @@ This behavior doesn’t limit the choice of operating system. In fact, users typ
 -   **Use an operating system with a Microsoft-signed bootloader.** Microsoft offers a service to sign non-Microsoft bootloaders so that they can be used on the device. In this case, a signature from the Microsoft third-party UEFI CA is used to sign the non-Microsoft bootloader, and the signature itself is added to the UEFI database. Several non-Microsoft operating systems, including several varieties of Linux, have had their bootloaders signed by Microsoft so that they can take advantage of the Secure Boot capability. For more information about the Microsoft third-party UEFI signing policy, read [Microsoft UEFI CA Signing policy updates](http://go.microsoft.com/fwlink/p/?LinkId=626936) and [Pre-submission testing for UEFI submissions](http://go.microsoft.com/fwlink/p/?LinkId=626937).
 
     **Note**  
-    PCs configured to use Device Guard boot only a secured version of Windows and do not permit a third-party bootloader. For more information, see the [Device Guard](#device_guard) section of this document.
+    PCs configured to use Device Guard boot only a secured version of Windows and do not permit a third-party bootloader. For more information, see the [Device Guard](#device-guard) section of this document.
 
      
 
@@ -462,7 +462,7 @@ Think of the VBS environment as a miniature operating system: It has its own ker
 
 -   **Local Security Authority (LSA)** enforces Windows authentication and authorization policies. LSA is a well-known security component that has been part of Windows since 1993. Sensitive portions of LSA are isolated within the VBS environment and are protected by a new feature called Credential Guard.
 
--   **Hypervisor-enforced code integrity** verifies the integrity of kernel-mode code prior to execution. This is a part of the [Device Guard](#device_guard) feature described later in this document.
+-   **Hypervisor-enforced code integrity** verifies the integrity of kernel-mode code prior to execution. This is a part of the [Device Guard](#device-guard) feature described later in this document.
 
 VBS provides two major improvements in Windows 10 security: a new trust boundary between key Windows system components and a secure execution environment within which they run. A trust boundary between key Windows system components is enabled though the VBS environment’s use of platform virtualization to isolate the VBS environment from the Windows operating system. Running the VBS environment and Windows operating system as guests on top of Hyper-V and the processor’s virtualization extensions inherently prevents the guests from interacting with each other outside the limited and highly structured communication channels between the trustlets within the VBS environment and Windows operating system.
 
@@ -504,7 +504,7 @@ The functionality a TPM provides includes:
 
 Microsoft combined this small list of TPM benefits with Windows 10 and other hardware security technologies to provide practical security and privacy benefits.
 
-Among other functions, Windows 10 uses the TPM to protect the encryption keys for BitLocker volumes, virtual smart cards, certificates, and the many other keys that the TPM is used to generate. Windows 10 also uses the TPM to securely record and protect integrity-related measurements of select hardware and Windows boot components for the [Measured Boot](#measure_boot) feature described later in this document. In this scenario, Measured Boot measures each component, from firmware up through the drivers, and then stores those measurements in the PC’s TPM. From there, you can test the measurement log remotely so that a separate system verifies the boot state of the Windows 10 PC.
+Among other functions, Windows 10 uses the TPM to protect the encryption keys for BitLocker volumes, virtual smart cards, certificates, and the many other keys that the TPM is used to generate. Windows 10 also uses the TPM to securely record and protect integrity-related measurements of select hardware and Windows boot components for the [Measured Boot](#measure-boot) feature described later in this document. In this scenario, Measured Boot measures each component, from firmware up through the drivers, and then stores those measurements in the PC’s TPM. From there, you can test the measurement log remotely so that a separate system verifies the boot state of the Windows 10 PC.
 
 Windows 10 supports TPM implementations that comply with either the 1.2 or 2.0 standards. Several improvements have been made in the TPM 2.0 standard, the most notable of which is cryptographic agility. TPM 1.2 is restricted to a fixed set of encryption and hash algorithms. At the time the TPM 1.2 standard was created in the early 2000s, these algorithms were considered cryptographically strong. Since that time, advances in cryptographic algorithms and cryptanalysis attacks have increased expectations for stronger cryptography. TPM 2.0 supports additional algorithms that offer stronger cryptographic protection as well as the ability to plug in algorithms that may be preferred in certain geographies or industries. It also opens the possibility for inclusion of future algorithms without changing the TPM component itself.
 
@@ -531,7 +531,7 @@ All of these features are covered in this document.
 
 **Biometrics**
 
-You read in the [Windows Hello](#Windows_Hello) section of this document that Windows 10 has built-in support for biometric hardware. Windows has included some amount of built-in biometric support since the Windows XP operating system, so what’s different about this in Windows 10?
+You read in the [Windows Hello](#windows-hello) section of this document that Windows 10 has built-in support for biometric hardware. Windows has included some amount of built-in biometric support since the Windows XP operating system, so what’s different about this in Windows 10?
 
 Windows 10 makes biometrics a core security feature. Biometrics is fully integrated into the Windows 10 security components, not just tacked on as an extra part of a larger scheme. This is a big change. Earlier biometric implementations were largely front-end methods to simplify authentication. Under the hood, biometrics was used to access a password, which was then used for authentication behind the scenes. Biometrics may have provided convenience but not necessarily enterprise-grade authentication.
 
@@ -559,7 +559,7 @@ The design is simple but effective. ELAM is a component of a full-featured antim
 
 If you want to learn how to configure ELAM, you can use Group Policy settings to configure how ELAM responds to potentially malicious boot drivers. In the Group Policy Management Editor, go to Computer Configuration\\Administrative Templates\\System\\Early Launch Antimalware, and enable the **Boot-Start Driver Initialization Policy** setting. Now, you can select which driver classifications ELAM loads. When you select the **Good Only** setting, it provides the highest level of security, but test it thoroughly to ensure that it does not prevent users with healthy PCs from starting.
 
-### 
+### <a href="" id="measure-boot"></a>
 
 **Measured Boot**
 
@@ -608,7 +608,7 @@ Applications built for Windows are designed to be secure and free of defects, bu
 
 To mitigate these risks, Windows 10 includes core improvements to make it more difficult for malware to perform buffer overflow, heap spraying, and other low-level attacks and even which code is allowed to run on the PC. In addition, these improvements dramatically reduce the likelihood that newly discovered vulnerabilities result in a successful exploit. It takes detailed knowledge of operating system architecture and malware exploit techniques to fully appreciate the impact of these improvements, but the sections that follow explain them at a high level.
 
-### 
+### <a href="" id="device-guard"></a>
 
 **Device Guard**
 
@@ -662,7 +662,7 @@ The core functionality and protection of Device Guard starts at the hardware lev
 
 Device Guard leverages VBS to isolate its Hypervisor Code Integrity (HVCI) service, which enables Device Guard to protect all kernel mode processes and drivers from vulnerability exploits and zero days. HVCI uses the processor’s IOMMU functionality to force all software running in kernel mode to safely allocate memory. This means that after memory has been allocated, its state must be changed from writable to read only or execute only. By forcing memory into these states, it helps ensure that attacks are unable to inject malicious code into kernel mode processes and drivers through techniques such as buffer overruns or heap spraying. In the end, the VBS environment protects the Device Guard HVCI service from tampering even if the operating system’s kernel has been fully compromised, and HVCI protects kernel mode processes and drivers so that a compromise of this magnitude can’t happen in the first place.
 
-Another Windows 10 feature that employs VBS is Credential Guard. Credential Guard protects credentials by running the Windows authentication service known as LSA, and then storing the user’s derived credentials (for example, NTLM hashes; Kerberos tickets) within the same VBS environment that Device Guard uses to protect its HVCI service. By isolating the LSA service and the user’s derived credentials from both user mode and kernel mode, an attacker that has compromised the operating system core will still be unable to tamper with authentication or access derived credential data. Credential Guard prevents pass-the-hash and ticket types of attacks, which are central to the success of nearly every major network breach you’ve read about, which makes Credential Guard one of the most impactful and important features to deploy within your environment. For more information about how Credential Guard complements Device Guard, see the [Device Guard with Credential Guard](#DGwithCG) section.
+Another Windows 10 feature that employs VBS is Credential Guard. Credential Guard protects credentials by running the Windows authentication service known as LSA, and then storing the user’s derived credentials (for example, NTLM hashes; Kerberos tickets) within the same VBS environment that Device Guard uses to protect its HVCI service. By isolating the LSA service and the user’s derived credentials from both user mode and kernel mode, an attacker that has compromised the operating system core will still be unable to tamper with authentication or access derived credential data. Credential Guard prevents pass-the-hash and ticket types of attacks, which are central to the success of nearly every major network breach you’ve read about, which makes Credential Guard one of the most impactful and important features to deploy within your environment. For more information about how Credential Guard complements Device Guard, see the [Device Guard with Credential Guard](#dgwithcg) section.
 
 **Device Guard with AppLocker**
 
@@ -677,7 +677,7 @@ In another example, you could enable a configurable code integrity policy to all
 
 AppLocker and Device Guard can run side-by-side in your organization, which offers the best of both security features at the same time and provides the most comprehensive security to as many devices as possible. In addition to these features, Microsoft recommends that you continue to maintain an enterprise antivirus solution for a well-rounded enterprise security portfolio.
 
-### 
+### <a href="" id="dgwithcg"></a>
 
 **Device Guard with Credential Guard**
 
diff --git a/windows/keep-secure/windows-hello-biometrics-in-the-enterprise.md b/windows/keep-secure/windows-hello-biometrics-in-the-enterprise.md
index 424eac0255..4604f69b3e 100644
--- a/windows/keep-secure/windows-hello-biometrics-in-the-enterprise.md
+++ b/windows/keep-secure/windows-hello-biometrics-in-the-enterprise.md
@@ -20,14 +20,14 @@ Windows Hello is the biometric authentication feature that helps strengthen auth
 
 Because we realize your employees are going to want to use this new technology in your enterprise, we’ve been actively working with the device manufacturers to create strict design and performance recommendations that help to ensure that you can more confidently introduce Windows Hello biometrics into your organization.
 
-##  How does Windows Hello work?
+## <a href="" id="how-hello-works"></a> How does Windows Hello work?
 
 
 Windows Hello lets your employees use fingerprint or facial recognition as an alternative method to unlocking a device. With Windows Hello, authentication happens when the employee provides his or her unique biometric identifier while accessing the device-specific Microsoft Passport credentials.
 
 The Windows Hello authenticator works with Microsoft Passport to authenticate and allow employees onto your enterprise network. Authentication doesn’t roam among devices, isn’t shared with a server, and can’t easily be extracted from a device. If multiple employees share a device, each employee will use his or her own biometric data on the device.
 
-## Why should I let my employees use Windows Hello?
+## <a href="" id="why-use-hello"></a>Why should I let my employees use Windows Hello?
 
 
 Windows Hello provides many benefits, including:
@@ -40,12 +40,12 @@ Windows Hello provides many benefits, including:
 
     For more info about the available Group Policies and MDM CSPs, see the [Implement Microsoft Passport in your organization](implement-microsoft-passport-in-your-organization.md) topic.
 
-## Where is Microsoft Hello data stored?
+## <a href="" id="where-hello-data-stored"></a>Where is Microsoft Hello data stored?
 
 
 The biometric data used to support Windows Hello is stored on the local device only. It doesn’t roam and is never sent to external devices or servers. This separation helps to stop potential attackers by providing no single collection point that an attacker could potentially compromise to steal biometric data. Additionally, even if an attacker was actually able to get the biometric data, it still can’t be easily converted to a form that could be recognized by the biometric sensor.
 
-##  Has Microsoft set any device requirements for Windows Hello?
+## <a href="" id="hello-device-reqs"></a> Has Microsoft set any device requirements for Windows Hello?
 
 
 We’ve been working with the device manufacturers to help ensure a high-level of performance and protection is met by each sensor and device, based on these requirements:
@@ -54,7 +54,7 @@ We’ve been working with the device manufacturers to help ensure a high-level o
 
 -   **False Reject Rate (FRR).** Represents the instances a biometric identification solution fails to verify an authorized person correctly. Usually represented as a percentage, the sum of the True Accept Rate and False Reject Rate is 1. Can be with or without anti-spoofing or liveness detection.
 
-### Fingerprint sensor requirements
+### <a href="" id="fingerprint-sensor-reqs"></a>Fingerprint sensor requirements
 
 To allow fingerprint matching, you must have devices with fingerprint sensors and software. Fingerprint sensors, or sensors that use an employee’s unique fingerprint as an alternative log on option, can be touch sensors (large area or small area) or swipe sensors. Each type of sensor has its own set of detailed requirements that must be implemented by the manufacturer, but all of the sensors must include anti-spoofing measures (required) and a way to configure them (optional).
 
@@ -74,7 +74,7 @@ To allow fingerprint matching, you must have devices with fingerprint sensors an
 
 -   Effective, real world FRR with Anti-spoofing or liveness detection: &lt;10%
 
-### Facial recognition sensors
+### <a href="" id="facial-sensor-reqs"></a>Facial recognition sensors
 
 To allow facial recognition, you must have devices with integrated special infrared (IR) sensors and software. Facial recognition sensors use special cameras that see in IR light, letting them tell the difference between a photo and a living person while scanning an employee’s facial features. These sensors, like the fingerprint sensors, must also include anti-spoofing measures (required) and a way to configure them (optional).
 
diff --git a/windows/keep-secure/working-with-applocker-rules.md b/windows/keep-secure/working-with-applocker-rules.md
index 5b6e983f97..5fad689a53 100644
--- a/windows/keep-secure/working-with-applocker-rules.md
+++ b/windows/keep-secure/working-with-applocker-rules.md
@@ -169,7 +169,7 @@ If you use DLL rules, you need to create an allow rule for each DLL that is used
 
 When DLL rules are used, AppLocker must check each DLL that an application loads. Therefore, users may experience a reduction in performance if DLL rules are used.
 
-The DLL rule collection is not enabled by default. To learn how to enable the DLL rule collection, see [DLL rule collections](#BKMK_DLLruleCollections).
+The DLL rule collection is not enabled by default. To learn how to enable the DLL rule collection, see [DLL rule collections](#bkmk-dllrulecollections).
 
  
 
@@ -178,13 +178,13 @@ The DLL rule collection is not enabled by default. To learn how to enable the DL
 
 Rule conditions are criteria that help AppLocker identify the apps to which the rule applies. The three primary rule conditions are publisher, path, and file hash.
 
--   [Publisher](#BKMK_Publisher): Identifies an app based on its digital signature
+-   [Publisher](#bkmk-publisher): Identifies an app based on its digital signature
 
--   [Path](#BKMK_Path): Identifies an app by its location in the file system of the computer or on the network
+-   [Path](#bkmk-path): Identifies an app by its location in the file system of the computer or on the network
 
--   [File hash](#BKMK_FileHash): Represents the system computed cryptographic hash of the identified file
+-   [File hash](#bkmk-filehash): Represents the system computed cryptographic hash of the identified file
 
-### Publisher
+### <a href="" id="bkmk-publisher"></a>Publisher
 
 This condition identifies an app based on its digital signature and extended attributes when available. The digital signature contains info about the company that created the app (the publisher). Executable files, dlls, Windows installers, packaged apps and packaged app installers also have extended attributes, which are obtained from the binary resource. In case of executable files, dlls and Windows installers, these attributes contain the name of the product that the file is a part of, the original name of the file as supplied by the publisher, and the version number of the file. In case of packaged apps and packaged app installers, these extended attributes contain the name and the version of the app package.
 
@@ -267,7 +267,7 @@ The following table describes how a publisher condition is applied.
 
  
 
-### Path
+### <a href="" id="bkmk-path"></a>Path
 
 This rule condition identifies an application by its location in the file system of the computer or on the network.
 
@@ -330,7 +330,7 @@ Because a path rule condition can be configured to include a large number of fol
 
  
 
-### File hash
+### <a href="" id="bkmk-filehash"></a>File hash
 
 When you choose the file hash rule condition, the system computes a cryptographic hash of the identified file. The advantage of this rule condition is that because each file has a unique hash, a file hash rule condition applies to only one file. The disadvantage is that each time the file is updated (such as a security update or upgrade) the file's hash will change. As a result, you must manually update file hash rules.
 
@@ -403,7 +403,7 @@ You can apply AppLocker rules to individual users or to a group of users. If you
 
 The effect of this rule would prevent users such as Help Desk personnel from running a program that is necessary for their support tasks. To resolve this problem, create a second rule that applies to the Help Desk user group: "Allow Help Desk to run Registry Editor." If you create a deny rule that does not allow any users to run Registry Editor, the deny rule will override the second rule that allows the Help Desk user group to run Registry Editor.
 
-## DLL rule collection
+## <a href="" id="bkmk-dllrulecollections"></a>DLL rule collection
 
 
 Because the DLL rule collection is not enabled by default, you must perform the following procedure before you can create and enforce DLL rules.
diff --git a/windows/manage/TOC.md b/windows/manage/TOC.md
index 6b1d5feef9..8c214a782b 100644
--- a/windows/manage/TOC.md
+++ b/windows/manage/TOC.md
@@ -1,4 +1,4 @@
-# [Manage and update Windows 10](index.md)
+# [Manage and update Windows 10]
 ## [Change history for Manage and update Windows 10](change-history-for-manage-and-update-windows-10.md)
 ## [Administrative Tools in Windows 10](administrative-tools-in-windows-10.md)
 ## [Cortana integration in your business or enterprise](manage-cortana-in-your-enterprise.md)
@@ -17,7 +17,8 @@
 #### [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md)
 #### [Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise](set-up-a-kiosk-for-windows-10-for-mobile-edition.md)
 ### [Lock down Windows 10 to specific apps](lock-down-windows-10-to-specific-apps.md)
-### [Configure telemetry and other settings in your organization](manage-privacy-for-windows-10-in-your-company.md)
+### [Configure telemetry in your organization](configure-telemetry-in-your-organization.md)
+### [Disconnect from Microsoft and configure privacy settings in your organization](manage-privacy-for-windows-10-in-your-company.md)
 ### [Configure access to Windows Store](stop-employees-from-using-the-windows-store.md)
 ### [Manage Wi-Fi Sense in your company](manage-wi-fi-sense-in-your-company.md)
 ### [Configure Windows 10 Mobile using Lockdown XML](lockdown-xml.md)
diff --git a/windows/manage/add-unsigned-app-to-code-integrity-policy.md b/windows/manage/add-unsigned-app-to-code-integrity-policy.md
index c1f6d000d8..064d2cc81b 100644
--- a/windows/manage/add-unsigned-app-to-code-integrity-policy.md
+++ b/windows/manage/add-unsigned-app-to-code-integrity-policy.md
@@ -21,16 +21,16 @@ When you want to add an unsigned app to a code integrity policy, you need to sta
 ## In this section
 
 
--   [Create a code integrity policy based on a reference device](#create_ci_policy)
--   [Create catalog files for your unsigned app](#create_catalog_files)
--   [Catalog signing with Device Guard signing portal](#catalog_signing_device_guard_portal)
+-   [Create a code integrity policy based on a reference device](#create-ci-policy)
+-   [Create catalog files for your unsigned app](#create-catalog-files)
+-   [Catalog signing with Device Guard signing portal](#catalog-signing-device-guard-portal)
 
-## Create a code integrity policy based on a reference device
+## <a href="" id="create-ci-policy"></a>Create a code integrity policy based on a reference device
 
 
 To add an unsigned app to a code integrity policy, your code integrity policy must be created from golden image machine. For more information, see [Create a Device Guard code integrity policy based on a reference device](https://technet.microsoft.com/library/mt243445.aspx).
 
-## Create catalog files for your unsigned app
+## <a href="" id="create-catalog-files"></a>Create catalog files for your unsigned app
 
 
 Creating catalog files starts the process for adding an unsigned app to a code integrity policy.
@@ -47,7 +47,7 @@ Before you get started, be sure to review these best practices and requirements:
 
 -   **Naming convention** -- Using a naming convention makes it easier to find deployed catalog files. We'll use \*-Contoso.cat as the naming convention in this topic. For more information, see the section Inventorying catalog files by using Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
 
--   **Where to deploy code integrity policy** -- The [code integrity policy that you created](#create_ci_policy) should be deployed to the system on which you are running Package Inspector. This will ensure that the code integrity policy binaries are trusted.
+-   **Where to deploy code integrity policy** -- The [code integrity policy that you created](#create-ci-policy) should be deployed to the system on which you are running Package Inspector. This will ensure that the code integrity policy binaries are trusted.
 
 Copy the commands for each step into an elevated Windows PowerShell session. You'll use Package Inspector to find and trust all binaries in the app.
 
@@ -81,7 +81,7 @@ The Package Inspector scan catalogs the hash values for each binary file that is
 
 After you're done, the files are saved to your desktop. You still need to sign the catalog file so that it will be trusted within the code integrity policy.
 
-## Catalog signing with Device Guard signing portal
+## <a href="" id="catalog-signing-device-guard-portal"></a>Catalog signing with Device Guard signing portal
 
 
 To sign catalog files with the Device Guard signing portal, you need to be signed up with the Windows Store for Business. For more information, see [Sign up for the Windows Store for Business](sign-up-for-windows-store-for-business.md).
@@ -94,7 +94,7 @@ Catalog signing is a vital step to adding your unsigned apps to your code integr
 
 2.  Click **Settings**, and then choose **Device Guard signing**.
 
-3.  Click **Upload** to upload your unsigned catalog files. These are the catalog files you created earlier in [Create catalog files for your unsigned app](#create_catalog_files).
+3.  Click **Upload** to upload your unsigned catalog files. These are the catalog files you created earlier in [Create catalog files for your unsigned app](#create-catalog-files).
 
 4.  After the files are uploaded, click **Sign** to sign the catalog files.
 
diff --git a/windows/manage/app-inventory-managemement-for-windows-store-for-business.md b/windows/manage/app-inventory-managemement-for-windows-store-for-business.md
index 0b1842c286..8332ba51fb 100644
--- a/windows/manage/app-inventory-managemement-for-windows-store-for-business.md
+++ b/windows/manage/app-inventory-managemement-for-windows-store-for-business.md
@@ -44,7 +44,7 @@ There are a couple of ways to find specific apps, or groups of apps in your inve
 
 **Refine** - Use **Refine** to scope your list of apps by one or more of these app attributes:
 
--   **License** - Online or offline licenses. For more info, see [Apps in Windows Store for Business](apps-in-the-windows-store-for-business.md#licensing_model).
+-   **License** - Online or offline licenses. For more info, see [Apps in Windows Store for Business](apps-in-the-windows-store-for-business.md#licensing-model).
 
 -   **Platforms** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory.
 
@@ -54,7 +54,7 @@ There are a couple of ways to find specific apps, or groups of apps in your inve
 
 ### Manage apps in your inventory
 
-Each app in the Store for Business has an online, or an offline license. For more information on Store for Business licensing model, see [Apps in the Windows Store for Business](apps-in-the-windows-store-for-business.md#licensing_model). There are different actions you can take depending on the app license type. They're summarized in this table.
+Each app in the Store for Business has an online, or an offline license. For more information on Store for Business licensing model, see [Apps in the Windows Store for Business](apps-in-the-windows-store-for-business.md#licensing-model). There are different actions you can take depending on the app license type. They're summarized in this table.
 
 <table>
 <colgroup>
@@ -178,7 +178,7 @@ For each app in your inventory, you can view and manage license details. This gi
 
         Store for Business updates the list of assigned licenses.
 
-### Download offline-licensed app
+### <a href="" id="download-offline-licensed-apps"></a>Download offline-licensed app
 
 Offline licensing is a new feature in Windows 10 and allows apps to be deployed to devices that are not connected to the Internet. This means organizations can deploy apps when users or devices do not have connectivity to the Store.
 
@@ -192,9 +192,9 @@ You can download offline-licensed apps from your inventory. You'll need to downl
 
 -   App framework
 
-For more information about online and offline licenses, see [Apps in the Windows Store for Business](apps-in-the-windows-store-for-business.md#licensing_model).
+For more information about online and offline licenses, see [Apps in the Windows Store for Business](apps-in-the-windows-store-for-business.md#licensing-model).
 
-For more information about downloading offline-licensed apps, see [Download offline apps](../p_ent_manage_Update/download-offline-licensed-app.md).
+For more information about downloading offline-licensed apps, see [Download offline apps](../manage/download-offline-licensed-app.md).
 
  
 
diff --git a/windows/manage/apps-in-the-windows-store-for-business.md b/windows/manage/apps-in-the-windows-store-for-business.md
index d2c7a4435e..6f4e3b40cd 100644
--- a/windows/manage/apps-in-the-windows-store-for-business.md
+++ b/windows/manage/apps-in-the-windows-store-for-business.md
@@ -18,7 +18,7 @@ author: jdeckerMS
 
 Windows Store for Business has thousands of apps from many different categories.
 
-## 
+## <a href="" id="apps"></a>
 
 
 These app types are supported in Store for Business:
@@ -49,14 +49,14 @@ Apps that you acquire from the Store for Business only work on Windows 10-based
 
 Line-of-business (LOB) apps are also supported using the Store for Business. Admins can invite IT devs and ISVs to be LOB publishers. Apps developed by your LOB publishers that are submitted to the Store are only available to your organization. Once an administrator accepts an app submitted by one of their LOB publishers, the app can be distributed just like any other app from Store for Business. For more information, see Working with Line-of-Business apps.
 
-## In-app purchases
+## <a href="" id="iap"></a>In-app purchases
 
 
 Some apps offer you the option to make in-app purchases. In-app purchases are not currently supported for apps that are acquired through Store for Business and distributed to employees.
 
 If an employee makes an in-app purchase, they'll make it with their personal Microsoft account and pay for it with a personal payment method. The employee will own the item purchased, and it cannot be transferred to your organization’s inventory.
 
-## Licensing model: online and offline licenses
+## <a href="" id="licensing-model"></a>Licensing model: online and offline licenses
 
 
 Store for Business supports two options to license apps: online and offline.
diff --git a/windows/manage/change-history-for-manage-and-update-windows-10.md b/windows/manage/change-history-for-manage-and-update-windows-10.md
index c53a28ed78..832bf7d5a5 100644
--- a/windows/manage/change-history-for-manage-and-update-windows-10.md
+++ b/windows/manage/change-history-for-manage-and-update-windows-10.md
@@ -11,7 +11,7 @@ author: jdeckerMS
 # Change history for Manage and update Windows 10
 
 
-This topic lists new and updated topics in the [Manage and update Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
+This topic lists new and updated topics in the [Manage and update Windows 10] documentation for [Windows 10 and Windows 10 Mobile](../index.md).
 
 ## March 2016
 
@@ -59,7 +59,7 @@ This topic lists new and updated topics in the [Manage and update Windows 10](in
 </tr>
 <tr class="even">
 <td align="left">[Customize and export Start layout](customize-and-export-start-layout.md)</td>
-<td align="left">Added a note to clarify that partial Start layout is only supported in Windows 10, Version 1511 and later</td>
+<td align="left">Added a note to clarify that partial Start layout is only supported in Windows 10, version 1511 and later</td>
 </tr>
 <tr class="odd">
 <td align="left">[Customize Windows 10 Start with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management--mdm-.md)</td>
diff --git a/windows/manage/changes-to-start-policies-in-windows-10.md b/windows/manage/changes-to-start-policies-in-windows-10.md
index 2dd9ca8e5b..02ec8bdfdc 100644
--- a/windows/manage/changes-to-start-policies-in-windows-10.md
+++ b/windows/manage/changes-to-start-policies-in-windows-10.md
@@ -18,9 +18,9 @@ author: jdeckerMS
 
 **In this article**
 
--   [Start policy settings supported for Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education](#start_policy_settings_supported_for_windows_10_pro__windows_10_enterprise__and_windows_10_education)
--   [Deprecated Group Policy settings for Start](#deprecated_group_policy_settings_for_start_)
--   [Related topics](#related_topics)
+-   [Start policy settings supported for Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education](#start-policy-settings-supported-for-windows-10-pro--windows-10-enterprise--and-windows-10-education)
+-   [Deprecated Group Policy settings for Start](#deprecated-group-policy-settings-for-start-)
+-   [Related topics](#related-topics)
 
 Windows 10 has a brand new Start experience. As a result, there are changes to the Group Policy settings that you can use to manage Start. Some policy settings are new or changed, and some old Start policy settings still apply. Other Start policy settings no longer apply and are deprecated.
 
@@ -117,7 +117,7 @@ These policy settings are available in **Administrative Templates\\Start Menu an
 
  
 
-## Deprecated Group Policy settings for Start
+## <a href="" id="deprecated-group-policy-settings-for-start-"></a>Deprecated Group Policy settings for Start
 
 
 The Start policy settings listed below do not work on Windows 10. Most of them were deprecated in Windows 8 however a few more were deprecated in Windows 10. Deprecation in this case means that the policy setting will not work on Windows 10. The “Supported on” text for a policy setting will not list Windows 10. The policy settings are still in the Group Policy Management Console and can be used on the operating systems that they apply to.
diff --git a/windows/manage/configure-devices-without-mdm.md b/windows/manage/configure-devices-without-mdm.md
index 9978f43052..ea6b6cf007 100644
--- a/windows/manage/configure-devices-without-mdm.md
+++ b/windows/manage/configure-devices-without-mdm.md
@@ -20,11 +20,11 @@ author: jdeckerMS
 **In this article**
 
 -   [Advantages](#advantages)
--   [Typical use cases](#typical_use_cases)
--   [Create package](#create_package)
--   [Apply package](#apply_package)
--   [Manage a package](#manage_a_package)
--   [Learn more](#learn_more)
+-   [Typical use cases](#typical-use-cases)
+-   [Create package](#create-package)
+-   [Apply package](#apply-package)
+-   [Manage a package](#manage-a-package)
+-   [Learn more](#learn-more)
 
 Create a runtime provisioning package to apply settings, profiles, and file assets to a device running Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile, or Windows 10 Mobile Enterprise.
 
diff --git a/windows/manage/configure-telemetry-in-your-organization.md b/windows/manage/configure-telemetry-in-your-organization.md
new file mode 100644
index 0000000000..9fcca525af
--- /dev/null
+++ b/windows/manage/configure-telemetry-in-your-organization.md
@@ -0,0 +1,314 @@
+---
+title: Configure telemetry in your organization (Windows 10)
+description: Use this article to make informed decisions about how you can configure telemetry in your organization. We discuss telemetry as system data that is uploaded by the Connected User Experience and Telemetry component.
+ms.assetid: 68D9BEAD-8ACE-4771-AF10-CCCD65EC7D98
+keywords: ["privacy", "telemetry"]
+ms.prod: W10
+ms.mktglfcycl: manage
+ms.sitesec: library
+author: jdeckerMS
+---
+
+# Configure telemetry in your organization
+
+
+**Applies to**
+
+-   Windows 10
+-   Windows 10 Mobile
+-   Windows Server 2016 Technical Preview
+
+Use this article to make informed decisions about how you can configure telemetry in your organization. We discuss telemetry as system data that is uploaded by the Connected User Experience and Telemetry component.
+
+**Note**  
+This article does not apply to System Center Configuration Manager, System Center Endpoint Protection, or System Center Data Protection Manager because those products use a different telemetry service than Windows and Windows Server
+
+ 
+
+It describes the types of telemetry we collect and the ways you can manage its telemetry. This article also lists some examples of how telemetry can provide you with valuable insights into your enterprise deployments, and how Microsoft uses the data to quickly identify and address issues affecting its customers.
+
+We understand that the privacy and security of our customers’ information is important and we have taken a thoughtful and comprehensive approach to customer privacy and the protection of their data with Windows 10, Windows Server 2016 Technical Preview, and System Center 2016.
+
+## Overview
+
+
+*“In order to deliver the experiences our customers need for the mobile-first and cloud-first world, we will modernize our engineering processes to be customer-obsessed, data-driven, speed-oriented, and quality-focused. We will be more effective in predicting and understanding what our customers need and more nimble in adjusting to information we get from the market. We will streamline the engineering process and reduce the amount of time and energy it takes to get things done.” – Satya Nadella, July, 2014*
+
+In previous versions of Windows and Windows Server, Microsoft used telemetry to check for updated or new Windows Defender signatures, whether Windows Update installations were successful, collect reliability information through the Reliability Analysis Component (RAC) on Windows Server, and collect reliability information through the Windows Customer Experience Improvement Program (CEIP) on Windows. In Windows 10 and Windows Server 2016 Technical Preview , you can control telemetry streams by using **Settings** &gt; **Privacy**, Group Policy, or MDM.
+
+Microsoft is committed to improving customer experiences in a mobile-first and cloud-first world, and it all starts with our customers. Telemetry is one critical way Microsoft is using data to improve our products and services. Telemetry gives every enterprise customer a voice that helps us shape future versions of Windows, Windows Server and System Center, allowing us to respond quickly to your feedback and providing new features and improved quality to our customers.
+
+Our goal is to leverage the data to drive changes in the product and ecosystem to improve our customer experiences. We are also partnering with enterprises to provide added value from the telemetry information shared by their devices. Some examples include identifying outdated patches and downloading the latest antimalware signatures to help keep their devices secure, identifying application compatibility issues prior to upgrades, gaining insights into driver reliability issues affecting other customers, and using usage data to tune some of their operations to reduce the total cost of ownership (TCO) and downtime.
+
+For Windows 10, we invite IT pros to join the Windows Insider Program to give us feedback on what we can do to make Windows work better for your organization.
+
+## How is telemetry information handled by Microsoft?
+
+
+### Collection
+
+Information gathered by the Connected User Experience and Telemetry component complies with Microsoft’s [security and privacy policies](https://privacy.microsoft.com/privacystatement/), as well as international laws and regulations. The principle of least privilege guides access to telemetry data. Only those who can demonstrate a valid business need can access the telemetry info.
+
+### Data transfer
+
+All telemetry info is encrypted during transfer from the device to the Microsoft Data Management Service. Data is uploaded on a schedule that is sensitive to event priority, battery use, and network cost. Real-time events, such as gaming achievements, are always sent immediately. Normal events are not uploaded on metered networks, unless you are on a metered server connection. On a free network, normal events can be uploaded every 4 hours if on battery, or every 15 minutes if on A/C power. Diagnostic and crash data are only uploaded on A/C power and free networks.
+
+### Microsoft Data Management Service
+
+The Microsoft Data Management Service routes information to internal cloud storage. Only people with a valid business justification are permitted access. The Connected User Experiences and Telemetry component connects to the Microsoft Data Management service at v10.vortex-win.data.microsoft.com. The Connected User Experience and Telemetry component also connects to settings-win.data.microsoft.com to download configuration information.
+
+### Data usage
+
+Microsoft does not share personal data of our customers with third parties, except at the customer’s direction or for the limited purposes described in the Privacy Statement. We do share business reports with OEMs and third party partners that includes aggregated, anonymized telemetry information. Data-sharing decisions are made by an internal team including privacy, legal, and data management.
+
+### Retention
+
+Microsoft believes in and practices information minimization, so we only gather the info we need, and we only store it for as long as it’s needed to provide a service or for analysis. Much of the info about how Windows 10, Windows Server 2016 Technical Preview, and System Center are functioning is deleted within 30 days. Other info may be retained longer, particularly if there is a regulatory requirement to do so. Info is typically gathered at a fractional sampling rate, which for some client services, can be as low as 1%.
+
+## How is the data gathered?
+
+
+Windows 10 and Windows 10 includes the Connected User Experience and Telemetry component, which uses Event Tracing for Windows (ETW) [tracelogging](http://msdn.microsoft.com/library/dn904632.aspx) technology to gather and store telemetry events and data. The operating system and some Microsoft management solutions, such as System Center, use the same logging technology.
+
+1.  Operating system features and some management applications are instrumented to publish events and data. Examples of management applications include Virtual Machine Manager (VMM), Server Manager, and Storage Spaces.
+
+2.  Events are collected using public operating system event logging and tracing APIs.
+
+3.  You can configure the telemetry level by using an MDM policy, Group Policy, or registry settings.
+
+4.  The Connected User Experience and Telemetry component transmits telemetry data over HTTPS to Microsoft. It uses certificate pinning to protect against man-in-the-middle attacks and moresecurely deliver the data.
+
+## Telemetry levels
+
+
+This section explains the different telemetry levels in Windows 10, Windows Server 2016 Technical Preview, and System Center. These levels are available on all desktop and mobile editions of Windows 10, with the exception of the Security level which is limited to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), and Windows Server 2016 Technical Preview.
+
+The telemetry data is categorized into four levels:
+
+-   **Security**. Information that’s required to help keep Windows, Windows Server, and System Center secure, including info about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.
+
+-   **Basic**. Basic device info, including: quality-related info, app compat, and info from the Security level.
+
+-   **Enhanced**. Additional insights, including: how Windows, Windows Server, System Center, and apps are used, how they perform, advanced reliability info, and info from both the Basic and the Security levels.
+
+-   **Full**. All info necessary to identify and help to fix problems, plus info from the Security, Basic, and Enhanced levels.
+
+The levels are cumulative and are illustrated into the following diagram:
+
+![breakdown of telemetry levels and types of administrative controls](images/priv-telemetry-levels.png)
+
+### Security level
+
+The security level gathers only the telemetry info that is required to keep Windows devices, Windows Server, and guests secure with the latest security updates.
+
+**Note**  
+If your organization relies on Windows Update for updates, you shouldn’t use the Security level. Because no Windows Update information is gathered at this level, Microsoft can’t tell whether an update successfully installed.
+
+Windows Server Update Services (WSUS) and System Center Configuration Manager functionality is not affected at this level, nor is telemetry data about Windows Server features or System Center collected.
+
+ 
+
+Security level info includes:
+
+-   **Connected User Experience and Telemetry component settings**. If data has been gathered and is queued to be sent, the Connected User Experience and Telemetry component downloads its settings file from Microsoft’s servers. The data collected by the client for this request includes OS information, device id (used to identify what specific device is requesting settings) and device class (for example, whether the device is server or desktop).
+
+-   **Malicious Software Removal Tool (MSRT)** The MSRT infection report contains information, including device info and IP address.
+
+    **Note**  
+    You can turn off the MSRT infection report. No MSRT information is included if MSRT is not used. If Windows Update is turned off, MSRT will not be offered to users.
+
+     
+
+-   **Windows Defender**. Windows Defender requires some information to function, including: anti-malware signatures, diagnostic information, User Account Control settings, Unified Extensible Firmware Interface (UEFI) settings, and IP address.
+
+    **Note**  
+    This reporting can be turned off and no information is included if a customer is using third party antimalware software, or if Windows Defender is turned off.
+
+    Microsoft recommends that Windows Update, Windows Defender, and MSRT remain enabled unless the enterprise uses alternative solutions such as Windows Server Update Services, System Center Configuration Manager, or a third party antimalware solution. Windows Update, Windows Defender, and MSRT provide core Windows functionality such as driver and OS updates, including security updates.
+
+     
+
+For servers with default telemetry settings and no Internet connectivity, you should set the telemetry level to Security. This stops data collection for events that would not be uploaded due to the lack of Internet connectivity.
+
+No user content, such as user files or communications, is collected at the Security telemetry level, and we take steps to avoid gathering any information that directly identifies a company or user, such as name, email address, or account ID. However, in rare circumstances, MSRT information may unintentionally contain personal information. For instance, some malware may create entries in a computer’s registry that include information such as a username, causing it to be gathered. MSRT reporting is optional and can be turned off at any time.
+
+### Basic level
+
+The Basic level gathers a limited set of info that’s critical for understanding the device and its configuration. This level also includes the Security level info. This level helps to identify problems that can occur on a particular device hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a particular driver version. The Connected User Experience and Telemetry component does not gather telemetry data about System Center, but it can transmit telemetry for other non-Windows applications if they gained user consent.
+
+The data collected at this level includes:
+
+-   **Basic device info**. Helps provide an understanding about the types of Windows devices and the configurations and types of native and virtualized Windows Server 2016 Technical Previewinstances in the ecosystem, including:
+
+    -   Device attributes, such as camera resolution and display type
+
+    -   Internet Explorer version
+
+    -   Battery attributes, such as capacity and type
+
+    -   Networking attributes, such as number of network adapters, speed of network adapters, mobile operator network, and IMEI number
+
+    -   Processor and memory attributes, such as number of cores, arhcitecture, speed, memory size, and firmware
+
+    -   o Virtualization attribute, such as SLAT support and guest operating system
+
+    -   Operating system attributes, such as Windows edition and virtualization state
+
+    -   Storage attributes, such as number of drives, type, and size
+
+-   **Connected User Experience and Telemetry component quality metrics**. Helps provide an understanding about how the Connected User Experience and Telemetry component is functioning, including uploaded events, dropped events, and the last upload time.
+
+-   **Quality-related information**. Helps Microsoft develop a basic understanding of how a device and its operating system are performing. Some examples are the amount of time a connected standby device was able to fullsleep, the number of crashes or hangs, and application state change details, such as how much processor time and memory were used, and the total uptime for an app.
+
+-   **App compat info**. Helps provide an understanding about which apps are installed on a device and to help identify potential compatibility problems.
+
+    -   **General app info and app info for Internet Explorer add-ons**. Includes a list of apps that are installed on a native or virtualized instance of the OS and whether these apps function correctly after an upgrade.This app info includes the app name, publisher, version, and basic details about which files have been blocked from usage.
+
+    -   **Internet Explorer add-on info**. Includes a list of Internet Explorer add-ons that are installed on a device and whether these apps will work after an upgrade.
+
+    -   **System info**. Helps provide an understanding about whether a device meets the minimum requirements to upgrade to the next version of the operating system. System information includes the amount of memory, as well as info about the processor and BIOS.
+
+    -   **Accessory device info**. Includes a list of accessory devices, such as printers or external storage devices, that are connected to Windows PCs and whether these devices will function after upgrading to a new version of the operating system.
+
+    -   **Driver info**. Includes specific driver usage that’s meant to help figure out whether apps and devices will function after upgrading to a new version of the operating system. This info can help to determine blocking issues and then help Microsoft and our partners apply fixes and improvements.
+
+-   **Store**. Provides info about how the Windows Store performs, including app downloads, installations, and updates. It also includes Windows Store launches, page views, suspend and resumes, and obtaining licenses.
+
+Data collected at the Basic level helps to identify whether a problem occurs on a particular device hardware or software configuration. For example, it can help determine if a crash happens most frequently on devices with a certain memory type or a particular network driver version.
+
+### Enhanced level
+
+The Enhanced level collects info about how Windows and apps are used and how they perform. This level also includes info from both the Basic and Security levels. This level helps to improve experiences by analyzing user interaction with the operating system and apps. Info from this level can be abstracted into patterns and trends that can help Microsoft determine future improvements.
+
+This is the default level, and the minimum level needed to quickly identify and address Windows, Windows Server, and System Center quality issues. For example, in Windows Server 2016 Technical Preview 4, if the operating system or an application crashes or hangs, the memory contents of the faulting process at the time of the crash or hang is gathered in a heap dump. This data provides Microsoft with valuable information needed to analyze and fix the issues.
+
+The data collected at this level includes:
+
+-   **Operating system events**. Helps to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, storage, file system, and other components.
+
+-   **Operating system app events**. A set of events resulting from Microsoft applications and management tools that were downloaded from the Store or pre-installed with Windows or Windows Server, including Server Manager, Photos, Mail, and Microsoft Edge.
+
+-   **Device-specific events**. Contains info about events that are specific to certain devices, such as Surface Hub and Microsoft HoloLens. For example, Microsoft HoloLens sends Holographic Processing Unit (HPU)-related events.
+
+You can turn on or turn off System Center telemetry collection. The default is on and the data gathered at this level represents what is collected by default when System Center telemetry is turned on. However, setting the operating system telemetry level to Basic will turn off System Center telemetry, even if the System Center telemetry switch is turned on.
+
+If the Connected User Experience and Telemetry component detects a problem on Windows 10 that requires collecting more detailed instrumentation, the Connected User Experience and Telemetry component will only collect info about the events associated with the specific issue. Also, if the operating system or an app crashes or hangs, Microsoft will collect the memory contents of the faulting process only at the time of the crash or hang.
+
+### Full level
+
+The Full level collect data necessary to identify and to help fix problems, following the approval process described below. This level also includes info from the Basic, Enhanced, and Security levels.
+
+Additionally, at this level, devices opted in to the Windows Insider Program will send events that can show Microsoft how pre-release binaries and features are performing. All devices in the Windows Insider Program are automatically set to this level.
+
+If a device experiences problems that are difficult to identify or repeat using Microsoft’s internal testing, additional info becomes necessary. This info can include any user content that might have triggered the problem and is gathered from a small sample of devices that have both opted into the Full telemetry level and have exhibited the problem.
+
+However, before more info is gathered, Microsoft’s privacy governance team, including privacy and other subject matter experts, must approve the diagnostics request made by a Microsoft engineer. If the request is approved, Microsoft engineers can use the following capabilities to get the information:
+
+-   Ability to run a limited, pre-approved list of Microsoft certified diagnostic tools, such as msinfo32.exe, powercfg.exe, and dxdiag.exe.
+
+-   Ability to get registry keys.
+
+-   Ability to gather user content, such as documents, if they might have been the trigger for the issue.
+
+### Manage your telemetry settings
+
+We do not recommend that you turn off telemetry in your organization, but we recognize that in some scenarios this may be required. Use the steps in this section to do so for Windows, Windows Server, and System Center.
+
+**Important**  
+These telemetry levels only apply to Windows, Windows Server, and System Center components and apps that use the Connected User Experience and Telemetry component. Non-Windows components, such as Microsoft Office or other 3rd-party apps, may communicate with their cloud services outside of these telemetry levels. App publishers must let people know about how they use their telemetry, ways to opt in or opt out, and they must separately document their privacy policies.
+
+ 
+
+The lowest telemetry setting level supported through management policies is Security. The lowest telemetry setting supported through the Settings UI is Basic. The default telemetry setting for Windows Server 2016 Technical Preview is Enhanced.
+
+### Configure the operating system telemetry level
+
+You can configure your operating system telemetry settings using the management tools you’re already using, such as Group Policy, MDM, or Windows Provisioning. You can also manually change your settings using Registry Editor. Setting your telemetry levels through a management policy overrides any device-level settings.
+
+Use the appropriate value in the table below when you configure the management policy.
+
+| Value | Level    | Data collected                                                                                                            |
+|-------|----------|---------------------------------------------------------------------------------------------------------------------------|
+| **0** | Security | Security data only.                                                                                                       |
+| **1** | Basic    | Security data, and basic system and quality data.                                                                         |
+| **2** | Enhanced | Security data, basic system and quality data, and enhanced insights and advanced reliability data.                        |
+| **3** | Full     | Security data, basic system and quality data, enhanced insights and advanced reliability data, and full diagnostics data. |
+
+ 
+
+### Use Group Policy to set the telemetry level
+
+Use a Group Policy object to set your organization’s telemetry level.
+
+1.  From the Group Policy Management Console, go to **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Data Collection and Preview Builds**.
+
+2.  Double-click **Allow Telemetry**.
+
+3.  In the **Options** box, select the level that you want to configure, and then click **OK**.
+
+### Use MDM to set the telemetry level
+
+Use the [Policy Configuration Service Provider (CSP)](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) to apply the System/AllowTelemetry MDM policy.
+
+### Use Registry Editor to set the telemetry level
+
+Use Registry Editor to manually set the registry level on each device in your organization, or write a script to edit the registry. If a management policy already exists, such as Group Policy or MDM, it will override this registry setting.
+
+1.  Open Registry Editor, and go to **HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection**.
+
+2.  Right-click **DataCollection**, click New, and then click **DWORD (32-bit) Value**.
+
+3.  Type **AllowTelemetry**, and then press ENTER.
+
+4.  Double-click **AllowTelemetry**, set the desired value, and then click **OK.**
+
+5.  Click **File** &gt; **Export**, and then save the file as a .reg file, such as **C:\\AllowTelemetry.reg**. You can run this file from a script on each device in your organization.
+
+### Configure System Center 2016 telemetry
+
+For System Center 2016 Technical Preview, you can turn off System Center telemetry by following these steps:
+
+-   Turn off telemetry by using the System Center UI Console settings workspace.
+
+-   For information about turning off telemetry for Service Management Automation and Service Provider Foundation, see [How to disable telemetry for Service Management Automation and Service Provider Foundation](https://support.microsoft.com/kb/3096505).
+
+### Additional telemetry controls
+
+There are a few more settings that you can turn off that may send telemetry information:
+
+-   To turn off Windows Update telemetry, you have two choices. Either turn off Windows Update, or set your devices to be managed by an on premises update server, such as [Windows Server Update Services (WSUS)](http://technet.microsoft.com/library/hh852345.aspx) or [System Center Configuration Manager](http://www.microsoft.com/server-cloud/products/system-center-2012-r2-configuration-manager/).
+
+-   Turn off **Windows Defender Cloud-based Protection** and **Automatic sample submission** in **Settings** &gt; **Update & securit**y &gt; **Windows Defender**.
+
+-   Manage the Malicious Software Removal Tool in your organization. For more info, see Microsoft KB article [891716.](http://support.microsoft.com/kb/891716)
+
+-   Turn off **Linguistic Data Collection** in **Settings** &gt; **Privacy**. At telemetry levels Enhanced and Full, Microsoft uses Linguistic Data Collection info to improve language model features such as autocomplete, spellcheck, suggestions, input pattern recognition, and dictionary.
+
+    **Note**  
+    Microsoft doesn't intentionally gather sensitive information, such as credit card numbers, usernames and passwords, email addresses, or other similarly sensitive information for Linguistic Data Collection. We guard against such events by using technologies to identify and remove sensitive information before linguistic data is sent from the user's device. If we determine that sensitive information has been inadvertently received, we delete the information.
+
+     
+
+## Examples of how Microsoft uses the telemetry data
+
+
+### Drive higher apps and driver quality in the ecosystem
+
+Telemetry plays an important role in quickly identifying and fixing critical reliability and security issues in our customers’ deployments and configurations. Insights into the telemetry data we collect help us to quickly identify crashes or hangs associated with a certain application or driver on a given configuration, like a particular storage type (for example, SCSI) or a memory size. For System Center, job usages and statuses can also help us enhance the job workload and the communication between System Center and its managed products. Microsoft’s ability to get this data from customers and drive improvements into the ecosystem helps raise the bar for the quality of System Center, Windows Server applications, Windows apps, and drivers. Real-time data about Windows installations reduces downtime and the cost associated with troubleshooting unreliable drivers or unstable applications
+
+### Reduce your total cost of ownership and downtime
+
+Telemetry provides a view of which features and services customers use most. For example, the telemetry info provides us with a heat map of the most commonly deployed Windows Server roles, most used Windows features, and which ones are used the least. This helps us make informed decisions on where we should invest our engineering resources to build a leaner operating system. For System Center, understanding the customer environment for management and monitoring will help drive the support compatibilities matrix, such as host and guest OS. This can help you use existing hardware to meet your business needs and reduce your total cost of ownership, as well as reducing downtime associated with security updates.
+
+### <a href="" id="build-features-that-address-our-customers--needs"></a>Build features that address our customers’ needs
+
+Telemetry also helps us better understand how customers deploy components, use features, and use services to achieve their business goals. Getting insights from that information helps us prioritize our engineering investments in areas that can directly affect our customers’ experiences and workloads. Some examples include customer usage patterns of containers, storage, and networking configurations associated with Windows Server roles like Clustering and Web. Another example could be to find out when is CPU hyper-threading turned off and the resulting impact. We use the insights to drive improvements and intelligence into some of our management and monitoring solutions, to help customers diagnose quality issues, and save money by making fewer help calls to Microsoft.
+
+ 
+
+ 
+
+
+
+
+
diff --git a/windows/manage/customize-and-export-start-layout.md b/windows/manage/customize-and-export-start-layout.md
index 6c0d31e4cc..f123a25279 100644
--- a/windows/manage/customize-and-export-start-layout.md
+++ b/windows/manage/customize-and-export-start-layout.md
@@ -22,10 +22,10 @@ author: jdeckerMS
 
 **In this article**
 
--   [Customize the Start screen on your test computer](#BKMKCustomizeStartScreen)
--   [Export the Start layout](#BMK_ExportStartScreenLayout)
--   [Configure a partial Start layout](#configure_a_partial_start_layout)
--   [Related topics](#related_topics)
+-   [Customize the Start screen on your test computer](#bkmkcustomizestartscreen)
+-   [Export the Start layout](#bmk-exportstartscreenlayout)
+-   [Configure a partial Start layout](#configure-a-partial-start-layout)
+-   [Related topics](#related-topics)
 
 The easiest method for creating a customized Start layout to apply to other Windows 10 devices is to set up the Start screen on a test computer and then export the layout.
 
@@ -33,9 +33,9 @@ After you export the layout, decide whether you want to apply a *full* Start lay
 
 When a full Start layout is applied, the users cannot pin, unpin, or uninstall apps from Start. Users can view and open all apps in the **All Apps** view, but they cannot pin any apps to Start.
 
-When [a partial Start layout](#configure_a_partial_start_layout) is applied, the contents of the specified tile groups cannot be changed, but users can move those groups, and can also create and customize their own groups.
+When [a partial Start layout](#configure-a-partial-start-layout) is applied, the contents of the specified tile groups cannot be changed, but users can move those groups, and can also create and customize their own groups.
 
-**Note**  Partial Start layout is only supported on Windows 10, Version 1511 and later.
+**Note**  Partial Start layout is only supported on Windows 10, version 1511 and later.
 
  
 
@@ -47,7 +47,7 @@ You can deploy the resulting .xml file to devices using one of the following met
 
 -   [Mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management--mdm-.md)
 
-## Customize the Start screen on your test computer
+## <a href="" id="bkmkcustomizestartscreen"></a>Customize the Start screen on your test computer
 
 
 To prepare a Start layout for export, you simply customize the Start layout on a test computer.
@@ -63,7 +63,7 @@ To prepare a Start layout for export, you simply customize the Start layout on a
 
 2.  Create a new user account that you will use to customize the Start layout.
 
-
+<a href="" id="bmk-customize-start"></a>
 **To customize Start**
 
 1.  Sign in to your test computer with the user account that you created.
@@ -82,7 +82,7 @@ To prepare a Start layout for export, you simply customize the Start layout on a
 
     -   **Create your own app groups**. Drag the apps to an empty area. To name a group, click above the group of tiles and then type the name in the **Name group** field that appears above the group.
 
-## Export the Start layout
+## <a href="" id="bmk-exportstartscreenlayout"></a>Export the Start layout
 
 
 When you have the Start layout that you want your users to see, use the [Export-StartLayout](http://go.microsoft.com/fwlink/p/?LinkId=620879) cmdlet in Windows PowerShell to export the Start layout to an .xml file.
@@ -114,9 +114,9 @@ If the Start layout is applied by Group Policy or MDM, and the policy is removed
 
 **To configure a partial Start screen layout**
 
-1.  [Customize the Start layout](#BMK_customize_start).
+1.  [Customize the Start layout](#bmk-customize-start).
 
-2.  [Export the Start layout](#BMK_ExportStartScreenLayout).
+2.  [Export the Start layout](#bmk-exportstartscreenlayout).
 3.  Open the layout .xml file. There is a `<DefaultLayoutOverride>` element. Add `LayoutCustomizationRestrictionType="OnlySpecifiedGroups"` to the **DefaultLayoutOverride** element as follows:
 
     ``` syntax
diff --git a/windows/manage/customize-windows-10-start-screens-by-using-group-policy.md b/windows/manage/customize-windows-10-start-screens-by-using-group-policy.md
index 2336a4b7fa..e3e3a08640 100644
--- a/windows/manage/customize-windows-10-start-screens-by-using-group-policy.md
+++ b/windows/manage/customize-windows-10-start-screens-by-using-group-policy.md
@@ -22,12 +22,12 @@ author: jdeckerMS
 
 **In this article**
 
--   [Operating system requirements](#operating_system_requirements)
--   [How Start layout control works](#BKMK_HowStartScreenControlWorks)
--   [Use Group Policy to apply a customized Start layout in a domain](#BKMK_DomainGPODeployment)
--   [Use Group Policy to apply a customized Start layout on the local computer](#BKMK_LocalGPImport)
--   [Update a customized Start layout](#BKMK_UpdateStartScreenLayout)
--   [Related topics](#related_topics)
+-   [Operating system requirements](#operating-system-requirements)
+-   [How Start layout control works](#bkmk-howstartscreencontrolworks)
+-   [Use Group Policy to apply a customized Start layout in a domain](#bkmk-domaingpodeployment)
+-   [Use Group Policy to apply a customized Start layout on the local computer](#bkmk-localgpimport)
+-   [Update a customized Start layout](#bkmk-updatestartscreenlayout)
+-   [Related topics](#related-topics)
 
 In Windows 10 Enterprise and Windows 10 Education, you can use a Group Policy Object (GPO) to deploy a customized Start layout to users in a domain. No reimaging is required, and the Start layout can be updated simply by overwriting the .xml file that contains the layout. This enables you to customize Start layouts for different departments or organizations, with minimal management overhead.
 
@@ -47,7 +47,7 @@ Start layout control using Group Policy is supported in Windows 10 Enterprise a
 
 The GPO can be configured from any computer on which the necessary ADMX and ADML files (StartMenu.admx and StartMenu.adml) for Windows 10 are installed. In Group Policy, ADMX files are used to define Registry-based policy settings in the Administrative Templates category. To find out how to create a central store for Administrative Templates files, see [article 929841](http://go.microsoft.com/fwlink/p/?LinkId=691687) in the Microsoft Knowledge Base.
 
-## How Start layout control works
+## <a href="" id="bkmk-howstartscreencontrolworks"></a>How Start layout control works
 
 
 Two features enable Start layout control:
@@ -66,7 +66,7 @@ To learn how customize Start to include your line-of-business apps when you depl
 
  
 
-## Use Group Policy to apply a customized Start layout in a domain
+## <a href="" id="bkmk-domaingpodeployment"></a>Use Group Policy to apply a customized Start layout in a domain
 
 
 To apply the Start layout to users in a domain, use the Group Policy Management Console (GPMC) to configure a domain-based Group Policy Object (GPO) that sets **Start Layout** policy settings in the **Start Menu and Taskbar** administrative template for users in a domain.
@@ -79,13 +79,13 @@ The .xml file with the Start layout must be located on shared network storage th
 
 For information about deploying GPOs in a domain, see [Working with Group Policy Objects](http://go.microsoft.com/fwlink/p/?LinkId=620889).
 
-## Use Group Policy to apply a customized Start layout on the local computer
+## <a href="" id="bkmk-localgpimport"></a>Use Group Policy to apply a customized Start layout on the local computer
 
 
 You can use the Local Group Policy Editor to provide a customized Start layout for any user who signs in on the local computer. To display the customized Start layout for any user who signs in, configure **Start Layout** policy settings for the **Start Menu and Taskbar** administrative template. You can use the **Start Menu and Taskbar** administrative template in **User Configuration** or **Computer Configuration**.
 
 **Note**  
-This procedure applies the policy settings on the local computer only. For information about deploying the Start layout to users in a domain, see [Use Group Policy to deploy a customized Start layout in a domain](#BKMK_DomainGPODeployment), later in this topic.
+This procedure applies the policy settings on the local computer only. For information about deploying the Start layout to users in a domain, see [Use Group Policy to deploy a customized Start layout in a domain](#bkmk-domaingpodeployment), later in this topic.
 
 This procedure creates a Local Group Policy that applies to all users on the computer. To configure Local Group Policy that applies to a specific user or group on the computer, see [Step-by-Step Guide to Managing Multiple Local Group Policy Objects](http://go.microsoft.com/fwlink/p/?LinkId=620881). The guide was written for Windows Vista and the procedures still apply to Windows 10.
 
@@ -122,7 +122,7 @@ This procedure adds the customized Start layout to the user configuration, which
 
      
 
-## Update a customized Start layout
+## <a href="" id="bkmk-updatestartscreenlayout"></a>Update a customized Start layout
 
 
 After you use Group Policy to apply a customized Start layout on a computer or in a domain, you can update the layout simply by replacing the .xml file that is specified in the Start Layout policy settings with a file with a newer timestamp.
diff --git a/windows/manage/customize-windows-10-start-screens-by-using-mobile-device-management--mdm-.md b/windows/manage/customize-windows-10-start-screens-by-using-mobile-device-management--mdm-.md
index 97359258fa..e5aebb264f 100644
--- a/windows/manage/customize-windows-10-start-screens-by-using-mobile-device-management--mdm-.md
+++ b/windows/manage/customize-windows-10-start-screens-by-using-mobile-device-management--mdm-.md
@@ -29,7 +29,7 @@ When a full Start layout is applied with this method, the users cannot pin, unpi
 
  
 
-## How Start layout control works
+## <a href="" id="bkmk-howstartscreencontrolworks"></a>How Start layout control works
 
 
 Two features enable Start layout control:
@@ -43,7 +43,7 @@ Two features enable Start layout control:
 
 -   In MDM, you set the path to the .xml file that defines the Start layout using an OMA-URI setting, which is based on the [Policy configuration service provider (CSP)](http://go.microsoft.com/fwlink/p/?LinkID=623244).
 
-## Create a policy for your customized Start layout
+## <a href="" id="bkmk-domaingpodeployment"></a>Create a policy for your customized Start layout
 
 
 This example uses Microsoft Intune to configure an MDM policy that applies a customized Start layout. See the documentation for your MDM solution for help in applying the policy.
diff --git a/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md b/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md
index 46f2c730a2..2c9549e3c4 100644
--- a/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md
+++ b/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md
@@ -22,15 +22,15 @@ author: jdeckerMS
 
 **In this article**
 
--   [How Start layout control works](#BKMK_HowStartScreenControlWorks)
--   [Create a provisioning package that contains a customized Start layout](#BKMK_DomainGPODeployment)
--   [Related topics](#related_topics)
+-   [How Start layout control works](#bkmk-howstartscreencontrolworks)
+-   [Create a provisioning package that contains a customized Start layout](#bkmk-domaingpodeployment)
+-   [Related topics](#related-topics)
 
 In Windows 10 Enterprise and Windows 10 Education, you can use a provisioning package that you create with Windows Imaging and Configuration Designer (ICD) tool to deploy a customized Start layout to users. No reimaging is required, and the Start layout can be updated simply by overwriting the .xml file that contains the layout. The provisioning package can be applied to a running device. This enables you to customize Start layouts for different departments or organizations, with minimal management overhead.
 
 **Before you begin**: [Customize and export Start layout](customize-and-export-start-layout.md)
 
-## How Start layout control works
+## <a href="" id="bkmk-howstartscreencontrolworks"></a>How Start layout control works
 
 
 Two features enable Start layout control:
@@ -44,7 +44,7 @@ Two features enable Start layout control:
 
 -   In ICD, you use the **Start/StartLayout** setting to set the path to the .xml file that defines the Start layout.
 
-## Create a provisioning package that contains a customized Start layout
+## <a href="" id="bkmk-domaingpodeployment"></a>Create a provisioning package that contains a customized Start layout
 
 
 Use the [Imaging and Configuration Designer (ICD) tool](http://go.microsoft.com/fwlink/p/?LinkID=525483) included in the Windows Assessment and Deployment Kit (ADK) for Windows 10 to create a provisioning package that applies a customized Start layout. [Install the ADK.](http://go.microsoft.com/fwlink/p/?LinkId=526740)
diff --git a/windows/manage/distribute-apps-with-a-management-tool.md b/windows/manage/distribute-apps-with-a-management-tool.md
index 24510e5252..8483992273 100644
--- a/windows/manage/distribute-apps-with-a-management-tool.md
+++ b/windows/manage/distribute-apps-with-a-management-tool.md
@@ -43,7 +43,7 @@ MDM tool requirements:
 ## Distribute offline-licensed apps
 
 
-If your vendor doesn’t support the ability to synchronize applications from the management tool services or cannot connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Windows Store for Business.](apps-in-the-windows-store-for-business.md#licensing_model)
+If your vendor doesn’t support the ability to synchronize applications from the management tool services or cannot connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Windows Store for Business.](apps-in-the-windows-store-for-business.md#licensing-model)
 
 This diagram shows how you can use a management tool to distribute offline-licensed app to employees in your organization. Once synchronized from Store for Business, management tools can use the Windows Management framework to distribute applications to devices.
 
diff --git a/windows/manage/distribute-offline-apps.md b/windows/manage/distribute-offline-apps.md
index 270d9f1f23..2dc4f5ab1f 100644
--- a/windows/manage/distribute-offline-apps.md
+++ b/windows/manage/distribute-offline-apps.md
@@ -53,7 +53,7 @@ There are several items to download or create for offline-licensed apps. You'll
 
 -   **App frameworks** -- App frameworks are required for distributing offline apps, but you might not need to download one. If you already have the required framework, you don't need to download another copy. The Store for Business will select the app framework needed for the app platform and architecture that you selected.
 
-
+<a href="" id="download-offline-licensed-app"></a>
 **To download an offline-licensed app**
 
 1.  Sign in to the Store for Business
diff --git a/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md b/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md
index 4f483df086..716f6a3f4a 100644
--- a/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md
+++ b/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md
@@ -18,11 +18,11 @@ author: jdeckerMS
 
 **In this article**
 
--   [What is a CSP?](#what_is_a_csp_)
--   [Why should you learn about CSPs?](#why_should_you_learn_about_csps_)
--   [How do you use the CSP documentation?](#BKMK_CSP_Doc)
--   [CSP examples](#csp_examples)
--   [Related topics](#related_topics)
+-   [What is a CSP?](#what-is-a-csp-)
+-   [Why should you learn about CSPs?](#why-should-you-learn-about-csps-)
+-   [How do you use the CSP documentation?](#bkmk-csp-doc)
+-   [CSP examples](#csp-examples)
+-   [Related topics](#related-topics)
 
 Configuration service providers (CSPs) expose device configuration settings in Windows 10. This topic is written for people who have no experience with CSPs.
 
@@ -51,7 +51,7 @@ CSPs are behind many of the management tasks and policies for Windows 10 in Mic
 
 Generally, enterprises rely on Group Policy or MDM to configure and manage devices. For devices running Windows, MDM services use CSPs to configure your devices.
 
-In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management, or you want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#BKMK_CSP_doc) can help you understand the settings that can be configured or queried.
+In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management, or you want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#bkmk-csp-doc) can help you understand the settings that can be configured or queried.
 
 In addition, some of the topics in the [Windows 10 and Windows 10 Mobile](../index.md) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](manage-cortana-in-your-enterprise.md) which links to the [Policy CSP](http://go.microsoft.com/fwlink/p/?LinkID=623244). In the CSP topics, you can learn about all of the available configuration settings.
 
@@ -75,7 +75,7 @@ When a CSP is available but is not explicitly included in your MDM solution, you
 
 Lockdown XML can be used to configure devices running Windows 10 Mobile. You can manually author a [Lockdown XML file](lockdown-xml.md) to make use of the configuration settings available through the [EnterpriseAssignedAccess configuration service provider (CSP)](http://go.microsoft.com/fwlink/p/?LinkID=618601).
 
-## How do you use the CSP documentation?
+## <a href="" id="bkmk-csp-doc"></a>How do you use the CSP documentation?
 
 
 All CSPs in Windows 10 are documented in the [Configuration service provider reference](http://go.microsoft.com/fwlink/p/?LinkId=717390).
diff --git a/windows/manage/images/aadj3.jpg b/windows/manage/images/aadj3.jpg
index 46520c667c162534c6290ef6733ce8a741b2d50a..80e1f5762f846225f1169024d6e530a11156768d 100644
GIT binary patch
delta 37102
zcma&NcUV)~wmuw01O!Bo-r^Q%(xpj}s0fG%2ud#zkuF3;dRaE4gAf4$Y0^|mloooV
z3rH`K-lVq#1OjQl<=$uCv(LHrd!Fx)`4Co}Ys@*``Hpvt*)(x1a`M<`9$K2da$Z_?
z8k!lT)bYBLl*yTjr3Na5?mcqnxIT>|Qj<=U^AB<b74lFvewvF4d0E#wQ$ZhJ9E|j*
z^QOrx-=O25p$SIP&^H}(q##@AWw<Sc_#*@~Jj0pugd`8{P#EF>G%%YFAQ>6NX)wr(
z43&TZ6{5ob0hoP~L~z%Jg#LsQq-7(XQX$BgVHi&BraRE&rg0s!>y;Kxq3@({61>5S
z=D~|}BVjA^m8>Mz#8*_v^I^gpDx{~)4N8EDgbEH^fmR!V{Vv8|1dq0^K?#B)Dio;s
zeEiX+SS>1q_9v>9D>591UepC%Qz27`uBR~1bPAL0{4=mOY#)Ky;5Rdb5L6UBX;L|#
z3VAjNgoU0DU?Go^KJ4%lOAc?-Z+-;dIzh;0J-lQ9zKS-F3OR`&X|A_vQ9RF>P$6Ge
zVa*u!QBhd)Op@&DnLl6g(3-*&FrSUtd1RIK`(rr5DNI1fd=vOiTJUkR!C7<g$T#4#
z6ToNB`hNy`zPe=*pkjnO;Emz)&9I-Czy3F$58<F8+RWf=jJR13QMH8>=JVkDUBTNH
z{97o|OW@O<?SOrj04-4|4O*fFA5P}(vBnMmzRm$?^3r&qOG@c+paPH+7r_gqeqYEn
zgR_K22x(?K*@P`%Blxxu$x1IQ5+!(uLKj1dmNDanl#|bh_QCX+xShU*gZR=4{*M}!
z0kTG^p3CPY9X?!|#V(QazbE@KNj)6s<Yg`{q`QG?Xgq7JjX$$*(Z4vVQIoc7Sdr}e
zntbrxS#_^(H=9L2Yy3OVUW0<IuMHh`z%w|H<cU_n7@T2H-x0Bb;$@x-G-WmN3<X<*
zU!gWCy=S1=VS<J;*vUn$(WTPto?B*S=z)aZ9)M35CNiI=<NWU*mVX{0NkC5k{rPh!
z5*IlBt^J{l{?fqG9UPXz^am9(??OwEI&4_=Q)vJK;kdkDUMl2T$}0@cl9dWMqx;`C
z)8j06g9f*dk*CC%(B46V!P9%>RdB}2Fg-yAGKquj3}8M?Vf0sYMMLp=1O)jG@cklG
zi_!xDPV58tJt(mm;|~saY}QT^^ciq)h6))vl@EWJ0^JcnQtGnECoz7o+1PhfNYmZM
z6Tl=m!EUJ~L4a#-jI|*g|7w6R6~dtk4!N8E3ra%?u%8s_g<UylV~Zz<7G8{it&d}=
z5LeSIf)cFd2#A8smQsYuhl@Rwn9TZ>xa20A%i3?S&2HWU{pq3c|Cjatwx_tF%Ku;6
zSl2YHY9azDzd(z`ojS(|T4<oAVVyXLjAwa_9A^;&n<(%DGb%fZ@x#o9&Fmz=p8|X9
zAE=PkI0}XvaE(Zu*iXd&^7_;v5Gsr@HRU-;_x&xze3P4Wx`kpQi({oUC_%~cGyU|x
zRJA#7)BLN^@5+O7M1%@?joAcU!67~p_G{S>9&1Yc?ExY@BUFgH5m7)xmkKEa)N4tu
z*~g+*LWP2rv5iuMsy;2;bV@+6Tgo8A92#x#UGLKJXQAa|4crTU8<9nn-b`pU2zY50
z3s~tzw0YGtwC>4n_M0>hA5T26%V4<dLfh_wx<}4{Ii~}WIK5A9gSTqkx_`DYi?KeM
z{U8RLqU*nRFLBmU$HEK79Sj59=YYt-_AF;6tMReE#k}is5@Eb^sqr>@4tv?B%%a4>
zzKLhkdm;isyDLXQe3uS#y@Q5avg!Vsrr;s*_h2j3QBfm%!3*FJ%<Ky_qYmKtG!*~F
zPT8GvwAf^^WT`$(NV(&?{37n+smoukKvSQX7X=3pVDABvdRaYEH|-EpM$!tJBj(rD
z#NAP7iqYq}4u4IW@{U23XyKr<`_Xuv>D5YU{o7xX$M<_#s&GZmk+;5_Neo;JADYRB
z1cY#ILRnx=WR;Hb`ZSyIq_)`MqY5jJqy<i*Qj6l3-1gHS9L@=sC!QLpV4de&rb0M_
z`5I~Q`AWT6r{+Arv|X;#Xm(1JxNpgZrn6bJfY!>VK^E74o!q4uXf;zI`%INo$hglT
z5uS}?4(&pQu)zS>qWCzL9Er_3x_ALXc|VmJ&+)Nqr-C&>G6kQ~F3U(#uaBFs!;6OJ
z+T5xeRG%P}OkoSII314<e6rewNM=MYeoVUApD*MVD>Aj>^Ts@rbsRJI5w@f04^E5|
z`&0<YR+gmX*8)F+YCx%w7eN3;27MIw2ZAx=`%;`M@G|Ib{B-=4UGW(^fC^zT2Qegk
zh5_{E`57uCx_}C4F(WBaAvwDst`k(yAiAs^#R5M8Z!zK>Mk)j*e30A!>>IIS&`-P=
zdYq)wA1Z9A=as##=J^G|e~6Gy8nij5tnmEq>r?7xIMsOKNS}BY`(k4GuDZl<%t8+v
zz0VZ8u{H-E9f#BJNf6VITniINT1hbjTiYbIa*9blPGJ>X09M0IP|cF@ho|(Y5ZgXV
z7`zUH)9E|Bnew%-ppXhF5WM*mmZK*A{^`koHCQ4v3c3>uJ57aPD+?)uC9(v?I?5f^
zxfvq&9&}OAiDXQLym2K&QyMm5`$?`qQ~u1(Ti_HG@&f}puQ;$md(<hmn0KwEl4+;J
zJ5-5KGY7od)q+N7T+Ll6vpII(di~qx_iP`@`WOnwokG>_WC`?`o3lxUgl=Z8o?oEg
zl^)LJEZoQp3$PM|i>I(`f)=cW6Wq36VSZ`)gTVdQ@H`38Wh2FJIiKs1i+4*P4y;@{
z3cZ`|4)jqWbDtXdsE~g094koxTru!ZhKOdtO3>ZQzXz8dq%0&`sB!833*uXS#b)U>
z-EG~RIBnr~^EETagN<<8tu6(~mZPPVQYmIGv$DFl+3QAU<*#`Wuve@3mNHbYj^FGn
zS6dwpyRmz9%J2Fc<1~d^{lACcPY6ODsIekvOu2w~3WGfrBEd<Zr$X$~;wf*p*YV!_
zSs)&!6P|&<B$`8o<X<%3g#L+VlK;drmH)sqh5x}bcks6G2rA@HKvVh)(EbFv|2UyY
zGZZXG05J22=hNrZ&|yj?T33hD6u8G9F3NXS?D2A{#D^*p%I7mChy0`ABTA7nCo5uo
z<X_jAp3GYwFxBn93$SQ%`6Cx(qwNQRW#6yyEqxSaMY^&fB=kQ8B&tls$@OM``+07Q
z_pG_>6+y0Nc=c8xp3l~{>Sm4QXoE$ED3ebr3xMD9v%{0Q^E2FTc4~OK(UM|28#lhB
z-NO`ag{oE2hct<yPt8r;iK>L!qop0r!Oi*F@;6rLu6z70GBPs0!j*Y!8qbz%uby|?
z$J3{&B(M$GK7Y5VKHC>jX+%ebAgsqGDx<Zfzk4bDVhr#;uKlvS#jRH?jblu7)gd+^
zI29;s=|Z~Di)i~D!8aBcSp05P)|L-$dh+dXWU4C;d&Ff6KVmi<&2-L;mRT7+H}Fis
z=vYTXVFc`td{=X;twMJP2gK#Yy^Tn^hK714J?Df7)9a?4PWP`sm=nFO@cuIQ_()>J
zD`%Cu)&`ER9+bIFBgVEKDp~8VpIMYSL{9-)l1<PgUUvNkY*%d3jN9q<R(Lr&D$68o
zs^piy{VVY$N`Jb|mvH^m2QnYdH3WoJ6!&m+ah`YTsbAoYx{@ux!dXOxFjRp)%m~|O
z-M7mj*X(0H1J2|O%E*2!Q6o!|pVUKz$b5I!a8T-B1C9k76t1UvW>(dPY^0&nf&HL#
z7PG;l)<gY9kAvG?INe2^>xtVwJGqX2<1ghwwo^Jm;ZTXh%t=zd5oNNLLXbqQ&8+dN
ztg$TTnZ?5y&)v}O#Y0TZ%+f+Hc{I2$F;-#LD6*2p+hk}QYgC5R+i4u|20o2j{D=o}
zvTV)Ogi+&1Q=)X-^h3Aa^w$6vM8JSE=hLdW6<48;LkQw>#@?HFy0(T^C)IlidS<$2
zO=czxXJekrTmFK8NCu&OVHfQ{yc?`D`0#9HCB87CWOLKO;(n~Gpqb+BV;^`|Ajj(0
zq97|IN4!ES^mHO8R>{3b&%^d-gpufG3}I5YW*p?FDmSsHiYqe?wa8OEY*HVxPZhvo
zgv8N<qisH$#vW$&kItRRcz+dr>N4f}GC9Fwd^<um*tn=C<by3zpC<qiFgk`21ZL+|
zEnzMoRCqYS35hTeatsVYTd9!KN9GGClE5u_;thWV%GWX~WM!O8+f4ZAJUm>dzXMan
z>zKUK7Og{lClPiZbR4yl)_>_!803j+{;UfpY8F_$+qitKMl0V3u>BaDra5;l9`mG$
z^-hv;=GXzM&zAcd(1@2QWQj|6_6Z4i)Fk|h;d`Qj&{LY8(74ccDg<W;BB3KIoi1Kw
zzN0lme=cNX{$XXs&=x5=wpbzZ6r&St(zqj#+}(Qehs9!9b8~Q#n4{3$$@E%ZJ$I)H
z59q5$(i+#x8RngZ0=?=|6e>(AOD6``-#e>=2s2C0)L;T|*6q`5BlVKbj(KaDXD!=v
zoLwUZMwB<x@2%*acgD=YvkC(EGkOlOSfEljtdWQGn4BZ+Fhr5?UvD)}o7Hy@YOw0~
z9;eD%l^aleb;o<9u^#*FC^<_xA;io5QGsg71DCuzBbIu{L+{sJ5@Tg>eBClyU&!gZ
z$dy?#5%L6>`03>pdd^gV7n|$SY}lz|ZY45d;0L=0F04~EARl)ExVEH#`RvQU`b(b!
zu{KN;7lx4}bW}WwPJ1(GbJfw+(T%&ep(fMx70;V5C+qTj=-!4IC*FWyTVOcPZ+#mB
z^D{&qek$a;Hr$N_5a0p$J6~N9xzjBL>*J<-Kq)HU=uxalbqzYn@p|gr=L4EU{IfqL
z6IG94(g<rBHA{a;*CbC>)R3jWK7Rad1>I2ldKIKIm9obOnnWu?ULzfjGq(6c!j$&>
ztJ?CGM;e`_(jI2YQrE(0$}?-`OV%+JuofzWi2ygmDj5k7U<Ly|E;0LRVWZ_9EF~L2
zfN`UQWpnLfzoQ<n;~r-#p|BZxrrsl94#Q?c0KO_`p2daci}YkBYUug-H~<1wgVuGG
z1D|!#sTzZKOX{<quHD#GIS+tD#Hr^_3+(h04EuU?P6*1g!Q02#X-EG=mS&;1vuuiI
zAKzgF*R;XT#rEDEg@?Bn%@@IC5dapy><eO0>lDV3t3(t3Q`-yY2<$L+m(6+l!6Eaw
zKR#Gzsc|uX72j1!-of_Fc`d#kYbr|9-4w&^wrVmD*XtD$h)w8e!GS3-_`QoB-OMll
z;t<2=WG=z0o<bARt6SnfLz3@^7RHID&sEmo=E|#a=LovS8Kq9=dT&@}0-|wHG49i<
z_WZdT=g(f6ddI@b8+-!4+&X1#j2Eq(n>jw=9_{Q{xO(K9I=@bQaDs7q&U50nK4;ST
z*dGk@TwB?^S_)G6roN=m1Ls59but`55G!)SRKQ!vCoiAS-xeTfc52*?7L6HNHybD|
zExt?ZY1#3P(FaoCT^$$&Txml@qU~sggQe{q3MSUfrzM9M2TNKHUX5OQV9iul>FgM%
zRgr!>{NxRG&lZpIX}u5}_x#I1v$ArPXC&K?{_99FL192QqVd%9v=OdR-Fmn>{A=3V
zy4tkOiQc*h*OcU^F~|6>?dA%+mg8BzbfV@qkVNs-W_=3h(eS|Q!?8J7lJHyztx-S1
zY3O{q5nk%(&ERCmV&ZXx!?8ncn~cQ+N3ZgC@n-aC^P#6ns`WU!zG%K3eM=a+k{D|?
z)9K`qa6>TRLeWoVm2Zzv=o%XMeuCXh!WC^hJ~rLzFxKYOMh>&f05dq9xp=~btgo1V
zkw6TCC+w%H7}*bY#2LB`Mw|k$#S6eON?I1>tq(}BU%LE`Gyc^mH$ug!kS;}%Hpp!D
zvxqk<FtdZ(hqqwizy^F6c;l0S*QFTe&&wVifGW|rX)Z|FQh+Xd5{NVRDY>LvAe(hv
zoYZRmbA}|~uAsYs3J<bOA+s+O66Z0NYL`QAfgNa{+0h_frb1BqS!8DONq+>V6eR|p
z^|P;!bn8uS!d>@T(!gQivR?dN>>+j<io4b~Mr?xeYfAaQC${<S2euuA&%QE%8P&FQ
z>?X6wv>a5;vOXkYn**IPe1H<W4tHmS(n#xf&U0Z*b;utyov8l4A4m#gr4Nq3<u>UK
zp=hB&f9{t3)v~C;pVrf-Cn>m{0O(g5%}O#&N7CmvJ7aSTntFXV##BUq4Tuyq_D(?i
zNZk5oG@5zBg<Q0!&3&WHrqBhMPG}N$);<Eq+8hL9AcVL0Dys?A07XVp+-Cbvb<px3
zOwNm|KflojG-H%Vhp^?`P@jFoW>O(Zf-r(d>l0yZ@lgLnk2{X<RMcV%GnjAnR9ZfG
zT-bGdH*9aI@e1B3+zFQzQOTmbKn{u7rWJ4y(c{g1CikT<`C3>|m#b}!cA?XB+PdTC
z>Iu#ZH8Jb`751WufU%#so_j%B)~76-r$!7F!W#OA=lvPH!V8dX6kNkx(Uc|`Bj<V=
zk*<ZSv8DdettsI~gAZ9c#^#dk&wTGwoUrZ+6ONsl6s|hKDHxSQB7+f<7wl(d@Kq}0
z^E=p)xcM|xpiy8wQ=%T%+c0NYu|m?HB_7mORt-N$l#~W;^4|9st4h8xGJg3RG5JcI
z@xnFZS63+k_!AdY_xwBDQJv6%P$7fvbMF@$QbqdO>kwfS7W8oFg*7`mLXelw<54_4
zUM{ig&hsv=`6d4Qy?5osg=bF{R0NyjcfU>_tN)C~YPinX@-5t9Q+j89RKd0FdtORd
zKKzl5su>d+P_KIDe4^R_-UJFer5cD_!aS6fa00<*wTcZ?YLA6Q%Cu$Fvv)HWX{fya
zTJzYRW<j}&hvTp#Wp~yE{v~NY4A<9YC25c|HSKOk6W*M>dr{+2n_P&F?(KBz?n<+|
zh_iHWrTm2#c?lzx(_|1(?`*#DK^GKeufi+iTgU*sopKQeh9M$WEF}j|Z|fJ6b4{wW
zD`PHHB&uv*{K$JRu9rg?=Y9<_t~)n{ewu@~$<)MI`P;1lW!lBc=!c4jqRR*FnpB7s
zrfWw0AudF+N5h_Y$-mnKuZi|~5Udb@@b=DiPcGO$@*!&PXD!N(6~tWmdTsvl{H(en
z0{DC=i+<O~P3fgV*fg~Liu~Wt7~ztW7DB8|;&w(rr{%DnXq(%Q`fgRy-1|@vk>~R*
zQDQSuR6Eje;k5T<D3aLZHbR6idlpv0NeG-%>Ov8edCI@8MR{6eMA)*pBGu;x`w^Z;
z-YkxNV(Nz3*$-zoHD8regh?i&8mbFd$&xK<r=kni#;eNnX4aCIZ;uEyj~Nt?8owPI
zWPE#q+Yx>IlKit5b&^Z9RLI8iLV6pXJKVHh_=Ah4{HTXggBDUi7z*gx68wTblKgR)
zDB<KEu17M_pIpn^+v=AS*W4L}FUUX7w(6`-KF(fEFUFBLxZOb6gb8Y1g(@iQKO~^$
zQL#cS9^S1&y!{#~&X2w)OBSvVxh39oNWPJ`OFM2If%|rHQ?^>Zck<qmsTZ6^QwSa`
zMKCW|34B>qZfDv3cnjFy=;39z(Z4YJ`Obk2ZHLX?x^2n-2y?#$I)DKN+LH8crj?b*
ztHer{NW{3pW?u<IamK&JuGJ5JiCy5z>q><js$wFb`xo7yM|VU*2SEg6ra~6aVIY|G
zAu!?|5+p+aEyaH-e}DoEXJT~7L>ZmgzvLfJg&6wz5Qg9&EB$@=<bNC<xFYn7cyX<&
z5lYT&6q<qCTL1VlMnD>5F3krV_qxhArSpBO=jo?xcD+jwr%$1MSz|C<qXsLvj+{jf
z2O|)=@cr<K{g9Lmu&ePsyMClhyB=Ty?G>{eRf0=zQr6VO!}mS*7TcmanZ6}zpGGF}
zf4(aGSqXzf&-&&p)Kt0`@kf_ju2@$HDNyX^^w4gNisln~7J2XDMTILu={S|P*FRWf
z5U1Uyp~Ff>rwF6lW}`mR`nC~ME;ncHOMhJ55H%h46f9Y~UxzS`E#`@4PtXJq&ouP%
zT5!&KwTbH>slrR*3d-|s-0rwZ2$kne8u~ylG>`Xv7YeBdI~^X}K7RlC{=%8IMOsA1
zdRDpbM?`_E+6y<XSg%j5PW9Z<izUV1yUWf^Zuy=n8H(BMA5IJ3z<jc_`O%)JtC47x
zcko&2sf}f_U;L7dgXdzq_d6gBvMm#A#GJ_xR06$=qhx(@vxD|mG$`0c+eXb;HZ(pr
zQ1QwCE-h!R9^_l~CcpFfOf<i*dpNs%R`{sWHY>qlf4+9O*heyiyZH!+%UqhdJ$OIP
zqWEDVsjSB{DxUv>4((ZnwJWslr&!<ul)g|=f~|)S%IdH?f0bgb>j!kHnlq@-#@tib
zT+edbDSPZfyK3#>t%n;eoD)=Dr+^C1sYzMVc{``rTz9<>E;}KpTT#<9y>%+wCuA$T
zVm(xjZU)Hfl(Cj`?M~<#k5pvbX=a+M_Mkv#+>(9Mg7oIxF>HB4(4l>s^;6r34<RLd
zu56y0Gxm)sOT#i(O@Kd4s}4c+X@4CR-6&W~E-dj8A7^ss2LuJ}jQDjqmd$G_i9y}_
z;m^w5c!U|1^V4?uVzUCQ3#+h-SuAd$Y(t)yIab^zsPHvwFS(2>SERj)7aRZetz?t5
zUhehiKGEjG=n#-sh~#iTOO!`kZghM9RPzmGW)PVBgVII?AW^VQIPT@|sGwPuT#<!~
zBj*wkn^_K&exgn=MwqMsOnC3dPadWN1FoJvJz}l3S<w{}aDo;|`_T+8?l4ffyhJoB
zw`1SnqIFQb=!T7TYG|iqNd;_Gc3E5aM(Ch<A3P0=A?p@AQSS5cF%-Gq!xih+aeEZy
zSz@)vIM1dZ!r!}5u6E(9*(0sfY!ESi^X#84|5nrfR@F|DPt<_Qk1-BKe(nM6XM_f0
zSF~qHX+RjT!3nB26)Uv*`&FQ@=4A(9rwWl@FLE<#0<-VTF?$EDNO@Hb07A*lyCeyZ
z18`olq<7&jU>i)blvvb{PS*c@u)ki03Q5?5=^jGU{Xv!Q9GD=86rd-aQ8AS)BFO05
z>OJxQh2gnY+t^>UPjE7I8P$P(ZM>B^18WFzCTh7(Gm`VD5H}#Q78;}B=#xE85Cd+O
z4=WNU0*sS;7+P0yp7BRYH1GI@NbZ{N+v7JeueO4<bEntL0&V#AGaX(n?fQ+)RmUdZ
z=-xd3bmHa%+Lp8<_qlk|nLK}^{rjVu%I@$ph`fQ&HmM%2Bz|4d><`3i0cFc)Yo9XO
zjT{wnIzDlAXsoj;DwxV;(%GyU8dwuS<(fJFtXFtzn#sCW;rdb9rgS6m=6F$|$DK<s
zHZV-WoN7G3hV+y;$JVh~huhV{rL<lav+CbNY>FUrB)Ik98|XRcSlzxjuA@zsX0@mU
z?#|*ay|`5mR9G>Tp8F<_dZTmd?gJWlX5%INehHr2)<espK5=Kg+af9b8K3NwHto~g
z&z!$BkTe%KfIj+2@oxHHCI5~zvo{_==ZWfTB{@e6Akke1IxGC^C@srijHwIHF*>U)
z@+EA|AT$s}^xByn4<T@9J|9vc18mrFP0d94g(+sY7nJkT2(S9jnzw7ehuTpgSIc{v
zG@OM-NUI&7BHao^|I+;xPXm05W~D%fw-SxyPix7H(pM{<0JYB2`Yba%1^MBEFikx2
z`vqY@H00S9M|zn5ehOZz6<Zsu!p*K!T2S)fV}8gRprE*jH}O_N^}X`AQ{2u<$azfk
z^ab2@iz$Y9cgNjCJ19s1?w}o!r@(QeaZV&E>5@RE;S~;=t+mGz?oIZ1R8$2oO4?)Z
zL;_05y&$0U`E{wM+Wxu6+gn(WF>${41kyHuU|_)@s0DNCm$ZKGEB=D($U7FN6%*sn
zmow0Qq(je!on^mxNs(rSxO)&#Xx<lC*bY7IGJP7ajh%pfp1ApHf2Wn74zbC|wKR9_
z^<DDFjm~z)T?N~$Fb(^8{rEGkJ9f5;$tvR`)9*&95JyvsoEr}kppW>=YapGM{%CNa
zH5#UU0P5>*Ry!fqt#;?C2}K`WeN|Wr#!??Rs9ENgzpMzuCLf2UzIE<*sPu!fC=pQ{
zB=vqD{S{JrkFL@4CI9`TG2!;&7Wx84job8Bk?K-OG(yM$DSjXYH3vt+a9(IqJd71s
z9|VV3i}UDv18|a*3KHO0%+CNq02mUbz>auOwO~fz=1CZ=Gb@vj0lMIY%%WXQ@a*#d
zx6+dQlDO<zrS|ms35iO^*AT34S<*2ThXI<%&dpu(NlYat>ID_z(l@@{I?aN2jxJRU
zQE8z7eCUy1#G;^xv4=L$=~-oSFFGTEci6?{jiv=6g5JNyq`a{KJ+!emrKYdt^_ZvS
zcy@SfmWvp#Neu+I)R;qHr9zG`rdtqrOM_j8HN|h#Ue3tx?j$FjiInA1c)`~#i%X`t
zD!B^(;uUIrlczGK)%20?Vzge>qG(m%dafA|(%0^9Emx!=HX?pi-?~#d(O7S*v|<F7
z(B{8jjRRUxQRdv^z8_27GwI5!gKj8YHkt5fYql9LQ;j*T!mwo9A~dp$sp@!EA*e=d
zZj|ZYLv1o@gcPz^?euq4mWW81z6yGNH_I4q85}}R(l~>wqcHB~lk9PZ>7tloI1}KW
z9!a_a29(F9C9bkWOdQxJRmFs%`e1@2ol#9uw}feTZV#XH@)7p8a~z(_53uQ;%<VV-
z(!7_fHu8BV=_8ug+X@sU%(k{eScM~2x=&>A;bWKH<hoZN0~IGW^W%pBf(k1|Z@Cpp
zWNf2C-iL*zDr}gY4>O*`E+I(#07!(+@6NN5U(SK<d##a7K+0$sgTK+v#N!ps+h^af
z&jptdC{Rr2!X?!5Hn{%&1mGi~Hz?t_ZOV1U5a^O`=Y?<2l3qxx=&I(^KSGIPHN1WD
z-MB}OF1PynD$8lhWFR;{`;1t|f2TcdWT$DvhRuI~YK><X&3Rv%50n58I*RRPw8W0s
zq2+m(cD{CH2CVrj;ln3|ru5!nV=aOW@k(0>%afBz8NcKw(%oTYtb{bgS%t?J8;nls
z$fp&dNM?AQ=vm41RnJoHyNTAF((kRWTa5exlX~#xzP{Il*t`2rFIUTpX24;q(;9fQ
z6s3jypRuAJgZYdqE&$hS1K%d49B-eIWY_(!9*Fgr$8h;a-yj&|uNinbpDNtx477(F
zMsP+m_?0qc%AMRDih}%#J*2>I`uH;i+hDVYg0)q~^ZIkjqjq*iori`ie@0om$z9NS
zM04rqQY|aJ|9Tr=(sWjU*OLd8wIjl1?)EO98t+`U=&a*!#O(nciZtuP=1GJUIR1DR
z_xZtJAdHr8Iz2J3w$@IlI{c&dv+#Bx)*e^hYMv=U2+3dLdl_oG*Q)x~V{G@BuHjf4
z<jLQu^Z$#PV`g7rb`lUzVSCGe6La97yd2pq#|3~S{O{EJpA26C{(q2dcsUejqSRYN
zv<806&BMs5Q`m*ekS9V69#(=rP6MWCJC`PwZflwf)2l8tO6ux0;&ofr&v<zvq-JX+
zPAv&MPo%$1vl!}6F0UBYgy5w!!-aAX0n56AzW}fJiz1WXOzyt+O2B%;_*O}Jc))11
zu(3XV)9io`DUp1PR`;}y6O9qk5`u5H9&Ol=VPZ6iziheFZL3IX)K$8f#8KlQNUyyB
zKttZoIfa#`IR#<$qx~06HrCpnY9N@oA&=GWmlcq6NEW#Ek`UH+pV$hyRzy>;I-T5(
z0X{Rg&K{J;-y%%pt}eMO#H}Xlr^;$z!)zn{%;h0QJQw5^KrX5uZt2OJ;9JCgrPs@1
z$wEVkr>Q?h!LM=L!z27!z8<=d-&YOANpi*0$3B5>kWJRqKRi}0zt(u4CPv&dC)BuO
zw0cb(C9v{8^y%*erRv{5{{Bm5Yyf%HZCuvBcvX=3iuOv!M$R0Jczm1+*;IoJl8b>w
z0dAzUDlafI-bXQR3ZX*a$yvP@_GAeP&J>f_65vM$h|Ia?vRT*UVpIk(qL|r6C>_Zj
zFS-8=7lI8ZDWKewaV|T$=c|-2+MH8Kf5)EvG^A)RBaSOazBqiz6me@G<sGiDy2$fm
z!L>~<ZzR2Ht)myOti?QY0_Tm4@=(tYiC?M*Lc8E+BB_wXkOf&1hY?tUf}NhJ6l?9d
z(+c2jp-zx4;1JJ9KIG5+R#%IxtHK^dd!9S|+3nFZCEh0(8(OUN9*slIigSULK|a6*
zqQFFJT56b;lKTL>F6E+Loyy>myTg1LhI#I3p$Ug1EaY+3U<0b8a&UR^A(Uf}l?TjJ
zH;H&Qa{Isd+NgoxwHQyA)c4AnlzUS={oo>E;wkr8=z;qzjNk~3?4Y=A$6#>AFi;_Z
z4+fOSrf<nE>g``=IxycU>LlIzm`pUX*S5-gm*z31(ooTF+3`y5J15M;a+=N9K*Tp0
zi!}=t1J@gNg2y~-IJ6uURT6v^c)yk=I6OX0m~X7|7sPg6tv&%s$lN;!{v!3sG{Ms7
zwvM*c?TGNMPnfGWjbL4k^y)n#ZylUt-UZl9ZB$l8LUSGj*gW3gkn;-eI*ARmF)C}f
zwC*<Ok}GsM3{A@LnX~5KX0uvLY^hyq=aruCn=*Z!t0JiI#?IX?YS+jj2592HQEIA>
zf-EFxjdz^29cZ5jbkyY(;h?e8=YjjKEO@k@NfJmH%u60uZQj=QC=?dH^ie$f6ryeB
z6j;c@mt?(M>wdrPJX$ZRMXvXTqkzCK&D^LJjiimDrf&;5;H4)H_3L~`rq-i4ue)&S
zKo;VL*Tf<3qr@Sfj?knRNRCi0K-P;2`J)rIUIS*Riw?pm4C`Q)*p$Fc*(&@qACI9g
z{kIg02bu)Iij(J`f|;lgzdL_c2wj2p`*0Xvq5D^Zc0yaX4|Na`nDsCen6GF3&wRZz
z$p8#1oCxuhYAetmE&%-?Rnf;R%25QVkS~BS#kik-FA2?g=mRE!C<N_!RAlBw9CM}+
zZmY6X*WFd^`zY6A8-~bGS`T_?Z0P&WuOCu5DLX|W?my;8YXN4;JU_Jc+K*H`M&jus
zc5XQRkhu3rukGe|en^`0t}PY9oP&o^BL6*?fFOV3yi<Mw&?K%14{PMb!QxWd%#-n!
zYi7$@)yAh;8_j3X^xib_A5kNy@^<qjQ_{yTKiW~05@0)x_;8`MD>de$KAU#v)=fPL
zb>*tYbSTpsf`dS#lJK?igZcT1o2%+}<6EKTq*H{#54zwKti-c6_i_7kcVKV{Ruh1c
zdtq}eXA3z`Aw1&M#IuUMK6^L>tk)1H8FrA6GrYj;dw?Q}$=h{cqi|9ojjmiHoS|!!
zyJhibE;tSqsd1QZpZ__8EJFmjX73s?FTB0>PSOmhi;8lUtf*?N&B_4v7X%p6QX%ZY
z3OLqyVLaE1VwcCZZl^2sLtOTOrQ5=gB<2&qN%9$&<h%E}iW{1E3&MVcni{X0yhwnv
zWjUYu{-wO#P@~j$z}@|Pe8b#ErmE9P9&x=+ouf+ksY%3`!y(|CRY$~#gR?&CBf+f0
za#RXY82@A(Nc~BLJVCT?#D#A~jlQo(jteW}%OyEX2FOF`EwV(3hk$b~i-1S(l?$gX
zxQQR*E)Q$*j8dM$UQjL6M+ii5=9(GzbAJ2n5q$*oSF_NI@!hqFs~%l%5_$5)6F;u;
zoT^#<RTAwkzA+njY2j|%S<Wkh5FXC^Q4qwNI<$xFboF~BQyUriO+%!+mLLGdX~iGj
zDEtaN+8qXdbpY@vFx34oMa&I08xGw`fQ?Zhl={7YRdh-JM+Jl`I5p3Kg$`Mppke=~
z0wQLFC=Z_a13ZD+1fA;NC;mz(8*3x|IarV(91MRqcZm54I3-DGh?k(Oc;<K9y}mn$
zxwZ{5wV~f|buS%GF1*4GmWV+Qb@mR(p`goLDjLSj_GBI2)GP<n7e33Bn5g=?eH7?a
z9y0)Tv2Zu4L6^b|_Wn)oI&5Fe4p{m2f%fP%ay#TKk{ZH*WDVv2FQ1R5Fzo*6^Jgea
z`Tz3yf23b_fF>be@xsh8Dr9mP^Q-0KZTerl|Fp-BF8&e~(q0~{M}^o(gGD$l|6PQ$
z4x2Y8<;u2Z?KKa9;@2N$;Uqrr!zDl>N{&8?--&w)EAIMx2?hT$BRx5|K`RLWAoF=H
z0A>W5u7`q7fz1SSHwEfPBy%zdPCu6@XMrD`AAr?cNkkBfj%$D)9YyJ*LiQH_VoYEy
zk<~vQ3rociBv?sdfP4JED(=97J7?5bJV6{Bg)o?V);|vaS?h*OR%b;%Rb@wJsh^O`
zK8CqgDblx*G6((FVousa_4jB|3>2DS`;3)fDDZ?PhiC!jqLjBW>sv^-%Yrmc$cW2=
z^8dg`I*v0@1`ETtj|~{GOI+5L+3PdD!lW&VU)RB}gFpVP9HdP^_OXiraXw>z<1&)M
zZ~z+2i~vG_&7Le-Zq1aS@*l{ZLSZ0+SC|w2XB3~pvTOhO^@*@ZEkDv3g};a4e~m&p
zMFi-&NcwvirT^DBg0)oNf3F_@(P9Qb?01Sm;?+38LL)k0muT=iEc$}HO@$1mO70g?
z7y`hKogss@M(cgXe`?2}7bxIF*zpEV!!{la!+sUqBo~7tEd-kGI>wm_IokQtKf$FX
z=^v(peqSbWJOXJ--+nFlf|gd`$h!{J?nX`n?~RLbgI8k7ag0L3;43nwLN9_nl9Nu0
zC#9Lcgl(|><z2lPtxDNL#dvzKKJ47@Qq+FB?QsmnxIE-H2}2rc^D=-kH$V5x-XRj9
z%?q?)T=hNt-H$v9UX3S$DC+1T7CyGAKzSj2@taKKN~4XdiWsjHy^VPVSgS0x3g@T~
zIg4%xdoZ|F>6kpOAN?(=eaMnwZl|hDnRCg#;5fw6_{JrrFL@wOc79cn#iqq?V>Ru9
zo1R%sW_4WxJPZ#~UUoFR^3A^Snd3#I0x-n+>v|Qwi~EUNli?M~cTg*4wz?u7?BnI*
zsB=#>PQZl-6IS>;u7S{qg2usx@J(S$wd?lzK>7D2NZqkH+jFYzfWMCSU|c2s&b)Gh
zPyQ;(zlfYuSn%FQ!h@Y7$}g6oq9eJ*Q~%wpN_WgM=dUMb_^;{4oaO`O9C`?WZXi6?
zg7)>vWe%D}Ol3i2sXu1l0AH1rJCRy{HDr$X*5kglZXLWrQHuNEM%N(dp<j!Oue6)1
zqM`xU5dHlE0(TLinW#SutCX$macV-;8_Z%(xT!s|IAdsk{LvWTOh~ij?wJ%#xc7BD
zdg<yr%<3`E=|Bh4u8Gh7k(pO4P}nQsE_7!X+ZNc-21LO*$7kC1?UYB9HbuK;r~KVu
z5T%aio17*0c1opXmp?<@l1;wbNyvzZH@#_L(tWX>#iuA8)G|}0-50HdU|bKC!LgL4
z<TC|H%ic=c@~^D^*%+i>6~U4s-`;ln!Kd*ajXRhw4I;cK%6TW7+1OA6_%w~$W^|W4
z6ghxGDBr;J6vkycwvnMK-fC1+m=KbUSKNu-G-~;x3jhv6?~uAKO9w6ECT(ZzXwO{w
z!h-&8vBguS4;_Gi0XpF9!2#&uJr)ODd}e&%#E;d_&6&cuw)STl=+LV~2Pu`)Z4$;R
z-5GU^w+f7t(x>RH)RfNLH7%CVO+~Lzws+6JkGc>AMj*&Sby48oHQ51}*?7>El7MHh
zEjRd){csV^X@R1Z2w=UzdQbChT@pJj#iRr$MyXl*eHvU082;hEw1*;uB(P5M8(xh3
z2wV%tO@k;bpeFdHh2TeNBkLaO-VObY3L1Z-0;mVR&<FmDu%+5b6K`6(x4?%y6qScl
zC}$*HH8lHNvwrdNCSQGGq`kACS97WJp4xmvK@{ZB`6eNMVU@07LsB%wr%0-5(8lh%
znR41UUDl+^gwH4iTe-8xx}vT&mBfn88%1j<<q@KI#^*<Obzkj+HRqp$j1&N(n_qps
z=;aNC%46D3^91xV-=f}&pyO`W<(i#*Ok*>9)PFB_%A&n4<&sDM2hHq7!a@5uHY#1e
zpQNp{pCSNr<?9?2W|1UkI?K`h;6Ay^)~i5lR>*wggNn*xtB5X<H3({hZ?argI`dKA
z<#pbjdKc{ijVk`fHp?`PHqMs-RPK9p-0|^<PmNL4d5P1iDW{^o3OqHxl+7Ibcx@g^
zXM2kZsj209xOM-&vgV-S5cb6&MvY`o^db3@GaH3m8^!UWFXpVdg^msIjV`frt3)Ug
zOoCn~uGJ>G>0U=iT~W?q3C^x)QNV$KuTRgUb7^6>_%0N7ndrL0-;n~~iSfOTAnHXC
z`sU{dL51r=5(K~527Qal&lqHjGTOcp!_#!Zu;cDfsg#f2dxOjM#T=2PU;hXn-}z)c
z(x^nT7*#BBpW_{_jCF1S6Ei*thRc01mFm)N{!WA0yNY;$P07xsJRQB`-gW`6{Ldxo
zPUhrQhi@p`0VOobQ9x~=GO>!xStV*bG1%90u%}5&0C_!~0^u3)YVb`$>Kt%l4bJMB
zHxR6CpYIYFI~p(WdNsjjW^&>NI(a{Bv8}bdP2eWQw#(J~%+vnsP<bMH14Dc`M(Lm7
z*sd3I{p9a#GNPg48Ul?d`8Dd4u8VnbJILPS;$iI1&c%Wyq`DR(Z_{IO$*kUYPpn9k
z#d{xW(%lV87M)SkH!dOVwekQ0&8!g%Nr#YPpHIlOtL=YM7ipp(T~avioSNDk(f<Hq
z7>b__6iTAsWWrHq=Aa!}{QhR`uBB2WmD1_e+xp5Hoet0aVlBV4&vTrK`$g0CyD0Fl
z=1Q<tJiu<Gm?f?WN*5SE+3(_WjE2cy@t=xWP^3xK4#KpdfEO6nJ)^NY3YW?=^R~2y
zzCyy`Eod{V#a5LQ8{G(vbqymvQRTzqYOlSP#0)8H{}VsaahTVHeuFaA)8mnCwLln2
zJKuk2-2#gm?B(xax6rOi=f4*)D6G>~mC@Gd$bWTp^r?n&)F|FF9Qvx>^poosTdfeG
zEI&ZH%%+V}IxC!Xs<9^~-oaAw&(52#_!cNrIyG5A)n6M$8AA2(kx!2RKL<!qkZwl*
zNjG8ctcN;nAln=VK(Yz@Z?cKmF9qSjeFmgso4?tn*8jmaQGx(rVh$!?M>0W=)+;P_
zBJv2n2j8AMY1&{H=XZ2eXx`B;KI8eeZP#X}i!WMeuf$>JPo?CoYC_X(kasH*uP`^>
zlIJ*^*z@__W-ompq>pgb53gl1>=RjkRcTnwu^~4@+Vi2u;M$hfK!HW?h~wG0yH9ln
z14Qe$Z{dMWK~W&z4a;R``%=w9g_d}6tW>68My)<NoJru>b*Y5cU0U{WkKGV-p%abb
z9#)5y2&RhUgYm=+waKpgsnS;J2A^JZlYc%d^bO8DCNvp63ZTWJvs%mo+d5h-|0qu!
zK**eSV;;K3l4tIC?GUcO@N;5f`S@+R?krBy!_nZI;|7^PR)E7jG~36K(&A0OhC2Ow
zDi4pN-U_>K#N6ZL>Eq1G_K%-meo+q;tePhpctN9-B!ligcXx^5v;ACUp6NfPW7r;b
z#gt;=bj#@@W^)te-gvhDRY!BV^{Ve<JMI10#e!P-08v?qo3AZjbk-ON+y6ROB}_&u
zMSokWM&l&v0c&;d5J_Es>u)c*6UNUF8)dk=T6BNZQqJ<hIel1TlVPV*>(xat`^;(B
z6h3|iC;4&ddZ~;0k{$t8_xcjMzdVvNc&x@9k8vr=5ZmPDlNy-3F&>`cE|T%-t@+05
zhQ<SCEzWm6JSR_pli?lBi?LuEa?u_t494ygD^d@000Nxd_r0AZZ55^FW~-A9NO=$5
zYE*QXJ-Qs56$h)F&cVG}bIHLOmK1RgI*gtZC#qc6ilh~=w^G#zyJw_VK41W`*DDHs
zQZs~*$w_osKvzw;a<-?tVY#Jxd^I|aZ_xBh7d<pP>HT6DYh3I<GjI3>$E6<6x~ibH
zP{g~r0c@4*i91*<JKrF6>dd6vXY>=SUQ#yBEbP$;Ai5HW<^;=6Zh@@Nw-iHeP8C*E
zp1Fl)lIkuDDGH$BdC1={aePZ7FzT0w*nY`QD5xs8V$-C5`i8R98>n0OA(<0(MZ0St
zOuJGpX1AX0p7`1>PJ3py9gQC{ClrApRI@Vza41}1y|-gKF)^mIy0qj&+sjg8z4+|Q
za|U1NEn90l@_TTx<-jCXq4`_}MQiRFD4%ey5nW+;vBhtBZ2Zmf(~EEA1*?i-o<R{B
zhE;(bFFh60eRh)PrdKM`ycNcCcCk*JdNqfJ0c`Sn6Z!8$vFO0~uVnWQb35+pp^Xh~
z;JJl$rzEfE&l)s3Wr<%m`4jfS%S=t3^G`2<d-{~{<_qC5znHrHf2kL(TfZEZ&Z(&_
ze?B!b>tQEX_USceYVHtZ{A5P2cg%7HE@Y;?l`xUhR%GBAET%Bo<9{N9vH1|oB%q^x
zud_-7?RbypOG3*dIwykB{%S4WFT7&n8$gm2N*vD{eSOG%@QSO<wKy4{m-X||;V|ar
zOq)3E*>?;+D1tbXzf<?!>PB2fM~d_D-7EIht}5RWY`-O=c7n^%V_<0^?``k)E2^+K
zHS{LS0^$ToXW$oE_HKFQ@VUl{0g;O5!?w8<eiA1Ulk|x<o2L=%5|1t$z}jlXIsnvZ
zLPrO8vU{;*r*ei!L8@4aXTrF?Kw!t4(H~;I`ac{eJw?d$LSfmVBaP?rvaOq}ItYf2
z{MDmZRr~ByleP*#?u(B)rJA>CQ>9LasUA1XEoD49@l?}(*rzXURKZ3oZ*`}1MP{*l
zw?w-BqeXYHX`$+5;wG1)vF0_~XY+C&Nc#1J!=QNvl8S@7S3qv(sa%%n51*~u_TRV%
zwO2j5`$8c4qE%s+T=O+U2Gyf7B*s}9SOJ&xD|m1r1;e<12YUZ0(dAMY>A-l(;@?-?
zr6C{x_v*w!LrVM|!@YUnj|4?FVDm!5e-}J{g0TaOyh7)}bS)QHFNyj)UI)Oa=+9j<
zzXLs#2w{DWmB$@8O@e*!_sAv6BowS&tiPkqP*5ic9eeXs7k}dCb4X9%NC3RUC|0eb
zd4|g$FdBTKTG<`z`anDW`%aDyPmB8IeL01_Y-ad#^bDsGz-gm5uP0OTL_NsKg>EFH
z!cXN6+cz)h$xmYw6|q3~^MIZJlASa;HxDai`f$OT$HPgXzSa?w8aQvMbLG@=gT;tc
z?xo|nj(3sul0*;xA_{xY)k;~Wveg50)oP)2eSri!SKQ2F)Yk6#x+SNxnVhV1-iGAr
zdV63l+SZ)HS)4G@1F25pzl~59kqgP?4=%NK(t$O!L2T;qDM0)B6r3n)G~~nJVbR`Q
zWH)A26fv=p+9e^mB(q)|<FF{`UtEQUwX=q2%2mG76Rn4zwzIOZw(R!c9@`wrCGRzt
z#Wo=w<nQbt&yg?i!Vo3yws?X4TIZKPtA;!lGsWtXwU%yjiBH3%Z!QE#%@#3}URCCh
z(LO~)vqbDypv=yIrKY}Pym#Gy<biV>e2P>)538Y!_n$zwTld9`+9@W~ODe*CY<{%9
zk~%b3?f9ZoCjoc!onqKX+~XV_y2ol_@i3R@EH&2(RblCXN1w+V^2;{kH=gBAopsnL
zCce4nSf=pwR1j-4tTMA4H`G>Ug$m!;l5+Z7Sz8rQ3Z!wFC5ia$o*FzBFMCgz@HXVa
zOq<d8#BGAJyTkcV#*s?dO_sB615!rMk8SNbz+`Cu*r`oO5DnskELV{4EF>*PPf8jf
z1dHk3$E_Px?ru%iw=A1p;=dC4)QrC_)8NUdrYa$!D44D~u}`lyzGK`ODUbkf;_$L7
z59^j0ssJERFWQ`I7Xz`G>p;~(Y`q?C!eqE2i+0jgB{{eASzfh%SekQLP}n8Ydk#?9
zvpfEKoRj|a`yU#IDO~I01^GEsAw^B{+Co+Oo8*<Vy?0JtEMnWeNG}{$K@*M3ZG}OV
zSfhjl;at|MN1o5S{}^^am&e@=R*X^*ogGL#{t%F3_!(6=@8PijybNFeTLN@Q*G-&W
zdK_*T*7ugrSU?*sVIv;#;#KE)A<1jl{f%nd&}se|hDpmG-$Ah%d%njl#=f;o^gF}1
zxAx^Eu^E0lR&vQ!@Eu%VYo=6s3)1z-Fx~?p@+H7BuRhW7PHdgd2;H#rnjsw|VEbjG
z406EmHqAQnoRJufHS(s>d74Hf!bptqBbd~USBsC>LS`DBrO`lQjGpkSw6Gb_zxqYk
zLWjIpcNw+q5c9vy4~uiZiNv|{A)Rgq11p-mYyB=WY!&<yA2rh5FJEKK_a-rvNr>T&
z)xyS6Ah(RixNb+JEg>JF)9lLUJ#>zGeU3BcB(CY|@Gd8v-Cef}`1i(M&dJa|O%7aN
zY^X8;u7^*qXoTV__j8%83f_;k<=5CZ5RT&%`uXNovRQLs569BYfPp7_L&1)?Q3S(E
zIe!SWMTn=a8o41p<>Ymqap^{r&LMB~nYfV`vn76WQ)w<m=Y7EvgTYNZrjIgz93nC;
zy0>8xREQZBa`xNuxq2Nib;}yV7Z?43$GYW!OEPy$$n;ao;*`!;!S5u8<3Hn!=yct7
zkN(=BdaN;x90riIi-YAr^m3iy)sUUF6|%-DO`Y3vrHuF?gj7No?>i>h3J%NQk*^=A
zqEcP5Ss#EqX}g=$!dv_J-K;_ivhw|XiLJ5$1!J}ohbXQz$JCb$a-sKPdD?XiE8*>-
z(zrB#!!>oLAWIpU3gRW{)*C8c=g*2tCoRaX=w0@<yQBM;@i>qE_{bdEDZ~OYZUZ#P
zxO<PtXNEC92Y>J9z88%E1zs+|4a}HS{$|{N>bw63<p$NUH*PaXge4#F`or|Js*S?A
za#={ys)_Lxj)|L<ez9rOGf$kwZ#hV`U-~tlM?9|XdnmuT8v8;}o>X1Lahs0j{do4F
zhX>X@g(uSAVffeD<A8(0ru>QVR~DOdSB1ImeR)=$nMX{k(S{gT4|;fJJsI8KK?~H|
z#|y+YW_+@II9FrFt}XEF4Uof}Q&#xl2zs+TP5js=*W^`5tjC;12hBA|Zp@P-FN^Rw
zzwn9XK^JGeat~40@g;o+=+<IF-Y)N3KapO;K&-xw%dt1(+9fTWOI8!#un<Nj9oDz>
zxA47}S9=O4x;^_VPFG0D4J6SS4L{kqFvUT0&ERCO$wcv{^&?Z&NJFt}zXa8Nf8~d;
z_uh4MS2r^Ql%7R~I#ciqD2!EuHpEmdSZZv?0fyYZ6L;*Q1`@cd4=4|A{&X2D*&NID
z=(^>wc=_UGmK#!YY@0g{6GQyEgT<f`K|QeqSRR}Vo}fZTWT*F5vC|n`sfaT-%%(Xn
zX7paahtMn>EdejwswlGV+Z)9he1&JqO`f{4loxbqX>K7l#npzB{>5;}g*FZvGeMc@
z=}BF|dI_GDBA%0g`jaCw7)er^o_K<&PwB3t^bRk%Zq1JEOsXp{Nv|WZN(11NPeeM$
zVjR#DixKf#;o@qthA##SDSc?7g4R#1pP$Daekdob#wCHdjqE4<-27I(Bd@-`l|xMl
z(i>(Dm*iMh|F(uDkHQOfQtK13I0L))PbDkE>S7Ccke#OPz&|o{-w#L}-V_*^RzUq*
z@P2?A0}0tS2?)hz{kwj*`_H&k@L*$(2wR^4DQi0mv?)~3LMNw4AKhE+k-VSqEG5~D
z!eM$Gxgwd0$G$AppkMHC(5iL$Sv!Dm`jU#=DsSD0(FLmRVn?$+`^9Op6RevWp#w|!
z0&pj;fIreM%%=u<m3SBNAn}i=QPujzA8|8^FXMbatiC%$bjZ>Y;1=YP(DPb(YvBG+
zqj0mj>M8~8ePKUITREThCG|UAs`OIaF-}i4xT5xr2qv1m(I(aCbc<NeKb}2sx&K<x
zr5&Gh={1mf<?1_!%j@kcf2!9-<Dv;*70=j@j#e!4JcH2{i>I&*;}QftxkkgZpehBL
z@lpD_hg-T9;*Hz|Ie(4$r<c#{r;yV@3ygJGH4cEAdev}X6=UV5q)E!HVJSsIfmwOt
zxvrn(PZ^l={r6BJs4p0|Xj}bx*^Rz=BmQ9EF3vD|79N@CUqDmP<6Iz`;*H8%*GPF~
z!OcHnA$gb=vJjIoGJgbXif5f9oa{aF(4vSAYBTjba5BAjKJoT<*p#+ThaGSdvco57
z-WI4r5~heWei`qo8mbjF)Vpmsl;suG^=H!JScCbT*v9CzCLttbp6uOf1%E*j104L*
z+-9b8zhTk0@=0$U>})>8et&%Ixk4x8&@`k6$KMt>T0>+YDGdfQ%>pchi97uy*CH^K
z(H6=n)CEM|aLc<=^m%3?=3i^cU0jHlJsz_|gEy>kKb2H8ZPnx>_)B?L!+27MK|hT7
z$|KfG!U<VceW;wqOTqjE03hA~NQQ&KvY#e?tkfbR_*ghw=Ss}Z_70sz%wK0%i_zRa
zGg`h(V4cmlV;jeRIZ)r)XG&@*pug<e;6`lI%1wMVP{A<E2f?LDmJw3s+%F%SFvuLA
zHqcyKEzm2r^HR9};qLkL@PnPn|JT}khBdWyZKFX{6e%`(iBeSrRGLVMiZl@c3n(oL
zB1pi1(n}VKfOH`u3PMysM4CtyA)zB8AiYVK-V#a(X`YF0_x9QE^IqpW=lXtlVUo4h
zTx+g5#~kAx_qeCeOY!?MkswubrVxX;fd<j(FPtCho^-~9I*u`q?y1C)**20jmsn8b
zY+zS!A))TozmSX`@HqvA{FOJ$Yy_;+mUW%9H3nq<UoCS0;?4N+9C=U-$&*4f3O($$
zE_?OKlJwJW1}fOyTlP6`4*am*JjlhOJ_>z2G*M<tB<Pan$IJRsk6FrQvgt)cj`Ok|
zs`c5;y^oyjf^WLSSY7ucq}o~})vx(JL(xuB&heUd;O*4(^dy{Xj$SMXT7Oq@U-vYp
zc_&_x0%<AF-}MVedvCI|Xb>z2wzIR}d?;hg5sP#DL@b^gOQGBaVe5lv$&S0cOOR~;
z!+BOUHD~y|!fyZd1(ZK#kHeuSGGu=8bkX!JbOYnt*+{|M;hbtxPU+Cai1Ox}c;xun
z^A%>n*y5e^WwCDNF)#aSPXo@0?9B@L+df=6r0?}vEtp?~y>95qiI^+zm~DcrGds}Y
zmZ#q`E!(&CzKkqO!v@#O6oxd_$=E`dDAFV4cTMt3OWQ^g#*D&_U-J-tr86_7LA->)
z7o-dmLTqWL86j()Cf;&E%>y5mg}G|pz;M^kK7Z$^xrFst`X-Tg-dqX&Ozr~-d5YNd
z{mEK<qe#u2hY_a)p6B&Pz>eK5*YUYA`nI0bUbXl-dvxaE*M{RoRxuwH&U#!w3Pmh1
zMmc;EZsrn=^hxsJO0pKlrU|1|AusU*enrJQKg67UH|aqa2CFpwaT8*gEodc4N9~~-
zBO86_d|;E!{mTc=B>LQzQf!#<2s4S|jyIEYmPc7Q<B8as555@|&1(WA*0HWY;;Pb?
z(gc0^!_JY_7FkX^IHUJj_0)~NfhI*TKte{;PsZ+MyWv}Jmn^jSlhBHYgE4xyk2}@w
ztNb3P*)f0~whkSI^E(RGr3uGJ`U`4*SHm6B$ZHTCE?41+3HIIOXsA0ZAFN~%3c7GW
zq~ehQFL`NPZb|i~bx@$eezu}9GiFt+_3C`4>EP#SpCe%WPM{6kh888RwPDmLW>zG_
zoJe%m>Ap1b;-SvC*o(!OJE@yA$5xs19x+QYkK6G(r%o6}01jdHT$hM`K3@B_MDs!l
zUPW0$MQ~<p*i1^i*UEQCU*BMV;&nzguBdP^?IYK#Fqu6supjIdpcxRqYJnu4DP}X&
zEo<;oAqK<##WknlFS&<uBvCJ>n8}{Mk&pP9t^oOnO#>|}uTIr(!gGMr6X@=w_-ZJ+
z)HyhC)C#4WhdmwadB1J^Rb;9PAN!R6pGR*MrndMk0+kC_k{UB4cMmk|`vVr~?_p61
zm1H?@>rOwACh4n&gFkf*;*h**@?7Xv-%R~9+k6^H<_bj{lqCh$`0#u!>?r7U8sxjd
zMNs;7;PWM-mJE+(&5C-rEKQ0z$P{6`%${FKGHCefXH~#@bCH%<J@CS|yZicjh;s#R
zZVQ?h^A&%BG#KcbHfw#jyU<X17M<h_-St?~mFwdAaKXjpGj|93*o%_bF83!=4&NgK
z#WVUo>+TEe38O~Hv((SrNqdOuyQ`d9DkEv{-`TqSG)g(XE6)7j(p71`&LMZ_q-Qk$
z)>|y&P!)a~BZe^ix>!?GnJG#MS1f*_u8qzLl2v4V0l0Cq%%1fSm)=jb%+p<SYIK8C
zi=kU<rfXfEdXm9j61#N|B}Zf(-$xCjFDf;V_}THzrR^ye2wf`NKW>uW&rNlz+$X(s
z9o|5|KC>2vQb=&7N$4n=I(7??5#Fx-D@|Y4-U$-*OCTD77fgiHG>q71d5f2ozKgoQ
zD>iO&ExM$CI{Hd$O(e5Iy3i-c6}Jb&=Vdl}c>*gPnl-oZy8TAt+*VKa%W0vn9?7du
zDDMk{jg?8#P+su5(&r~`<NTm}lv!e0L3<##=0uO)UQ2oBAnvDX^Vvukri;Lhk@jjH
zs;0t2vlf-YGi|+j(wl^%cfuB{VXna!7q%(3u=@#6(8SNo?kjEG2JNOT=V*KF<Q{90
zy|A}kpNqUH8R%g*3PEhw6sD-vG-i8Y)P#Ir7aDB2fm^%#s_vy8TQDT1WKv>(@8mA8
zYH}?R5lEM1r1rh~(rsF7Cg`?RCA3g{v%JD#yAahY{cPzxy48pxLZG{W?^Pw4+_}))
zr&&9Xcmp2n8gJjz%c4$x*yyL15~Alqi9;sk?PFzysOY?E$+Wn#?zu+c+pz~DcP8JH
zdIUScmfeWxwWuia6mx)9j++`u>9Ksne80c1nzXb22h8v5W-8mf$nX%)t?uq8C#srI
z>54MyuebA@d=_VO?d($4mFpqGohU?KN`+_qqgv7OJ^n9V)k<Uch3R-`U*;~}5*l;7
zg=D5O!re1wNQCaIUw>JhX|0bQ{bbrQVQgB}Yb;j3b3Uk9gX?HpF(ik$5zRVyGOr=M
zsqlK3#F>&CdI<=5r#CM~ZZJBaBa`EMSu(EE&QK5+11%GV%&)#A_UTHch*eAVyYAbv
z)niHTn#(b7o@VL!lwoDksrHGE)Z(BQ%e$wCABpRiUUtyyk9*{8RQY`@tP`Hk7wpy&
zoX{QY_Vi}Ev-`--(l`l7R_1Bdp`?0z2dk1W@;&mNPE^s|TL?#_LbLbHX9-vB7?X<v
z`LXM9&Hjck9mok0;%Z1++@*^y6d6~rXyh;6K5=__JMvNVq4Qjt(;4H8*L0Z-`Yt?)
z9Q4LwHbLas!Ab1{QOd4B=3(y0i=*F@VNJ*6d*v%qv`g|5b@^hjvDbOF;{%D})ff??
zI`-XlUg$VC8)gWzr7P@pp<gn8GODM5cB$;KO23`g7&P!m(~dC%8{j&Xb6>t+Ya~(k
z4j@~_O^-Oy+g)mo>|A#)ToZN;9wYIjjY7R4l^8kFW}mc)Xn22$%gCsvwX2|RF>B;U
z+f&hG?Q6Im^vK6sLv~o51Qeu{qy9n8>fU2eR3tF@L?m?jq)<G(P&&YwF7T2PO4qk3
zl@FEJIo<8|bODrZAD@lga<PE%4kI$ygcin#MSm&rxMX_&k`2%0@M~|@J>EZGscbSQ
zA?EUi2?7qu@b*<%WrJ`er~RCs{q=}Agr?@&f%N3jlupP_o^@tPck<R@+f#x3&*CH)
zP)p1*7bRje;J^&Ln5`;OPVK5R=`~i^vm0&~6s|0aj31xwo<M%NyttRyVa-b<1g(_2
z=17&ax!a6x7Z0NMDmMsw>wO*%p5~K|;PQU!F_aflouuBEof|TeuUyRO7R)OXZ+F>=
zdVkj)jUcx{F$#PHw|6Q5gY!&ZC~C8T9Go|)Ufh%~F1%||5MC9a;CGdFj-p$^l)|^I
z8Z>6Ag>M^;Ybc26tO>Jp?%RIcSbr?S>~89e3(Cj6d^{^$sk{RvaY0`9!ZA+QWDTGx
zAx{!FL1mi{&KLwoiXGFvL&{?p@D)wFlA%#q>tTK#i+**hi|mn?rA*GtG7(#Wv`qpI
zY#Ik76nGW)JXqSKl}N12Iz#Zkvo~`4xhY}@da5oNEI_#;;Jb64s}vl~=sBkS4`$1I
zu&M#5_4An@F#8rN5zt-gA;4@=O_QzX&kZFEzZnvsUnMry<N1n-iw_H(MTIg2Zp0m4
z5R{C206pCt;C(zd9x;;5l;&PfE(2NCdy7n^)n5Cpqj@D>qX$19G)N)%!uLOOb><M=
zKQhVNH<R5rIZc>17<1MgnXKU6i%QU_?{zm+Zb~nXcR<Tl@{iox?7J(_+KMI)h*esO
zh$w>nSNfSQDqA@J<}<QI-NtC@jrxTTKVZpD&|OB`x3OWuE=-%XCdoR|HQg~;t~)mi
zy{9pG`=Y>DoIn4b`!b=X2YQ8feG)J9*Wn8oefK^s6qURd5pT#FMavbRaJ6(+35|5z
zzGU7kZ=XYTYWW6ZP}`zFiMa-J14%h}`{l3#3P4<Neb-Ef%!ebLE;mZ^MPS&nHyRj-
zGP&r&HaI9m(!q_%ZtcI+mMdGxskwgUk>$xzy>X<m?)V&P`CGqa&G4Z+X670R0JE!H
z0+q;znvYOs{8p?p-PVvq^_GctCc7FSx^nj|GwZo`LDS6(1OXHo#bj3k-@-S(h5!Dx
zQR5mQNNmzebGTs&ncCT@ZWab05(?Y2tX{XQ5Zk*Ry4vK!SGm}0RF8wZC1x&epF+Lu
z>;1g{SrelW-z~n+=IUNtg(<w2@IX_7!ZVhb%R$N4Pt@){+@>m35ZBtv({V!hrTB#D
z=4&fr0jfyV{G=wFWxK;)WqJt$=7V+)y>XAnub$rqY1X~WOu!_%X3gyEGq0Ac?QDPe
zDop9{($V8EmJaO6Jt%AGjxt>_<(F@ej-32eN?+y=noOze32RwSM0gWUtRNx?`E1de
zu%6xlul(v_bB)54VE(jQ;?GQtkF}~sCN@6iI)@GxCe?a(!t^DwWfpGUL|?e$c;YW4
z4JuH~-Gy|JGI}>;eRX~IJyPsu^cSR7!A3@TbsEkN*&!ang~|}_nO?|hm4qT3YX5^T
z?{#-37_0EV+I{R<Y8}_7HRWw%F(*aumX{l4OhhY1lT^~p6D9@?uJ)<&q{J#8`drPC
z>T*i7&^kaO*7RAinu5wXY(f;EndP?18rm`qcT_^Z0yg*ce&j2k7J35wKHy7oZ!o&1
zHg(Tm2K1E<JeYyAMw2`~5M3Z2q(^kSpt<v)(zZ3m>?yMoT8f}8Qkhs5cYBBoRRZ$n
zxD0#~H2Wmw7vFL7!ap2m@Vhtx{LBLAYEORhA<qYBj)6H`<Vrg`jUdZa0--FG%S+>!
zuU^q3xDY>EpJMa6z?7MIlNX_OAM>Mb@vul7xOu@f_WX$(38@$sFKNV*G{qKVbsj+^
z9%!u>A#|9F_c;1ye^}uH;S)u;J<vY9=4@%g+4E#@>k6dzVGKD2L6ghN^9<v0nW1Y6
z1*uom5jXc_`{6mUDCZ{MO(SP><{s%)%s%(b-M8T#KD+3MwjY%T5f2(&Q$*e8{9gZ?
z(0x@vwmVnf#27ttiDAkY`L6TG`<gDuvdCG|x2Vm?i16L7PW*xEk=nx=(oJrO9`E%(
zqSizuX|l{(<^jfQC8d%eA${UE`J%B)$qI#eo%^lT>!~|aKCr=<PyF^!q+ilEQ~aGr
z2DYjN<rPcmc#j{`SBzXsiau%dDuC^pOj>J!FOvI~ac@t5wLR+g{o^n0ZFa3mF$s8^
z62SH%v*ud&MDOBG8-+vhxQ{#qW)rmh70c*-De-lrE+bE>y!iS7N;r74RU{RLD}Y`8
z8!-vI$InN~0K_K%bqDyfFm9S9((Nca3B0QozPa=IS$^f3ljq%b9e%1GFKT1IP_inb
z%QMY0jw|2>REg2;D_z9WS@zcVN!r;;?)e6ZEQb;^&*=Ps#b>0fUynN{D<lIis5+Jp
za{(#0<&>d@45K%w_;yQ2(@+P$H&2ew2Y5H~cfVS=`nfnq=Fng!jcppUzg1oqUD%}c
zrL@rCQtSY){QID5`VrivS9OM7W;HNH{fwo?u-=YREXmjxj&iClyoh%O@-;~+wS0rh
z-SWV)of6ZI;lW=x5|b1jpjRQSftm_;a~QcCQ~W+aATP4M3-8i_fz!`p*-%G-R_$?=
z!VcdpJj<pj0E`-S$9kaTSc<V}C?ytaK=>8HVm$V42Q;D0dI(Y;H+GMc62yw8AI{x2
z{{!~IX^5(5R$oZdA4P`va7Ri6TiKpzbJyR0A+LNq^{(Qz<$x=~+-WzX1Mu5rK*1ms
z3=z!$ZE_dV8|(V2V#GF>>|C-+NTR{n5?vmUo@UtWZM!gS-zzsc=FCHlq+O#65_2MH
z3Y5>YKzb$+<;|50iXfmBN=lrN%>As)N0_+f^f^FX+uVvL75DmSk5LvB2P7YQxjlcn
zkP~8Tr(vVT7{Wun!?>JEQjuT|@0GCGC(RAk^B<*OX(D;5jz6>!4@q55G%L@FEiY6@
zk?k0d=$C1RC?rWXgoe<%N49cof4L;KdI`SNb`IJ$9TWQ^5JINmV45%oC_g&D_NyDb
zP*IIOJ(+xZ$@1*UEg*=hU}cBFe7+|aS7Z3|h?r1x`YjI+GOy_yvEaeMqr$ES=H4FX
zd96D_>7Mwow#)3xTi?Ms-o{mQCgSubFU%99(4xvm244*QD_DkfxX=))<sXFAHn+D0
zq8w<UW0>6=5(!{*Z%8E6BQ^bZg7huR94=4yo)~Ge&f#XKR7ps+CQm^LNwmoJQI4~-
zxWb7au(E!S=nEC5{!?8LDmPs707*F`Lks=JS`R(xtz#Q$tsN;Yu<y`5JCmM6VWV_$
z65O1q{4D$Gv}gO(eoEMvY3luSh+cN`>XnydN$s0g0YS#J*tl9TrrztmYNy4f%N+cy
zKVX|+%)KnrqN0q1oHD~qeOvTf3&z_f)<NmG8i|UV#;NbPmm=(={82zPkXUCFLgrmo
zTJaooYpa-N$1F(c+8we`{pK;bnTy*efPRf6@RiSq*-=6}aqVDB^NaoGpxd*NSvndr
z2rJTH_9*JW{9^9w(qL7Nm%^m7N!iu!%Zn%Z3xKKw&n)g;cZfTBFS7^EIp?P8G}8IH
zd!Dl({uZ9cb)Tx;!tv?BvZw<3(NSluO3ePe&VrAPk%$ZJH!Z>~o+6zd>7^g~?7LGN
z<{wVeMTzd96w-wKPIqYXL6xK7B7FLkK<CU^5+(M#rI9)|?Thlf)90<7Td#WR^gq9!
zn%9S#P{nY2Q>Ad;_HT7v$+KR!1(gHpY<8c!&Z??fErVelEMzKTy78J6(nyILv<tOE
zIbNit|3*<!v4Ph@j*Bktz)6*c`#KYoSWDAL(hhUta>o0PoNRgtwB`Lg`Xm3H5zM_%
zggLB@v{vPt8$#YRF*-BoaPyf>;f)rmao@QJ{HKcjYfAN9QR$;X^VU^eT{APNhfZ3u
zrD}H9IXsm$(-WG1VZHcL22S03m=FQy#&A*2FV~9hBSwdov5pFbis!c%bd?GYe@I}{
zjg0HIt2p{t61pek;j<H?ooh%z(o8A+!}Wo31xB1Ryi_NZ-Rk$JWyNVXwsgp>-`!Py
zY%gozNs-)n4dOz}7~gyYDW*)p)gJY#eoXef13c@fx#ml;?JUAhR-e7*P~lkeosPqY
zCt|78uKGEJYLw6W6zG+K@{p`i$8P<pl2vha(Kzs~Ag$z41GUC*Z+S5<=^IW0Cd?(A
zvExKKiO;$#sJ^cdH5*;HyB+-qr<n9ix_d#Iv2=jdz81+2jqGe))khcdkKx-EE;JjM
z@M?WIDKCh3IqO&X?g%?AY*fbAgmNz%)pxE-#XP9CHfy=OBj!W%x>cYW?#@XGnkgrY
zhk7sv&@vlv6nSO^nb3TKKAYR>3>=I-l}IvM(N9F!mi!hV!1kb$Vl@|V+tmKWZOi-u
zITF@&f_}gNA`D^ohwTvyKx6<??%#T)|K<N1gk6V!2)n+7;TXbFTyy}aQ>fpd!vm4!
z`zrtWdkUO*8TZct=^$L-0Wru<%c}gGuFH0xoOUIj`h>U#>sa}f)`2(3*T}Eyu!SM8
zFRXbqQ%HN5CP6@0eEh${IRC1)`1dVi?X<+8B8Yefx2_jG2g(kt1vlhEGf4{nMJ_a*
zzDtF90Z!8Zbim*ZZ%T~{W8QxQq`B@p@R}6HUA@D#t!3YLjBdhn4)$M8CHDlxWIqc0
z{UMO@j1mQl_y%47X!jgo_uDcN1k@r;7*f{;g2<pe!}jMe=Y%-C3@(w<zI0IyBkNu&
zWfv63rXKu|5-cGv5yFTw*4GHg3Zu3&w^!1v{1A+1ZiHRMQ3WFMmd>Z8+vfK(8}#L#
z2z~m(ccHLy(&n_qF1MTF>NoM;l=e{zh>vdCUARN3-Lx51Z(*C>BO94tgM-A5oh;M+
zaA`L_^(&kB-_<TWvqSHqt0PrL7w19kN_A<C%-yt^gn=?o<6`}kZ`-w2>kxvlrK{H+
ziWW?*s>Q_xctreNN97~Ti|4&*0)AJz)a@k8yIu~9Ts+s|hmi1?<|aF-@F8x-Hfy}F
z5qU4OdG7i}q&QG+g?=kY^H49-HZwot1=>LL=*(RM0F%|m%*M#G5Rd-;E=7XWnbwtc
z`zry^Q(g6V<JVoP9GM?C1t63hvT=ev=F?31j_kRy(x@(>XX24^H}s{9`6CphKh+O-
zX=Doi8ng`FZp8Pm>VR)_%@++&YPasGqLNF>%=*FY01VeCX12Z90SCHDDW^e26d@b&
z{POe=@n#D>4Sp3QO;0TUfaz#k1Eoyhiz%Ri&&=#zueDABlp`nbjmavGwkH>{aszOb
z^!}>q`Bne4<<cQ&0IdFxz<kT`1CB+`2{6jsPtbRP0>ek&ajV~eoaJR2pqXyQf<v<D
zTmC)-#td-yOZ)8r_{-GCh(W*)1arwU8<ZdYWT^j1Q13)MgqFZ+yBF$~F=C{dA%4rl
z{nCeX1CHY#^r^o{zI#~=jLV`8^Abi42Q7~lL>C$evw%_{jT7vX1ufxJxtw-yS-&Cs
zb~97|E(K|-+HF`wuKbe9C(YZ>@5p5LHz`ViXEJ|$Bi8dgLuu2K@T|&Fkwb&j&Qz3d
z>TVrt<;bw)J<m*G(JuwE*|n_-3aHcXHcBY5gW~%jpa~;p{}-<C4)gL?&C}WcQS;;s
z`sO_7n}?VdAj$e0SI`Dm`MVhN3n*;*ds6*9r+_0uIY6L8KmCvmFZ-t-^7mQL@6)%q
z;n+1L9C2(IaR<zy)*Cx#@bL05YUig<yT!K(h(0${(T4fj*G2c`8j=Xr41;RTT}11|
zVJqnx!MCUr9j5UYzWJBBagV=Re=rxs5mm`1AWnN#cK(kFqTDlij8s6K^HbE^6Ff60
zyLY<%mM_G+Q&?N6#%y=efTx0%AhzSx{Is>_2Ax9JTnY9n0z4lke0FHbL33k-Ditq>
z5l+ag*w!GI>@lFz!I)hR3y@;G1su0xU}Qm_n?9NgIx0{Z8b3g7`AepI84k7%Fi8ZQ
zHzZgL4y`QytiF!U0`=QS)$>^IXby-3qCNxYvl(+Uux>xo8RkhCHUvFF7MuiHI-NTt
zPm!por}IF=x(ruP9ao$2m2GkU&o|J3s6ng)V-|*(jRX4CnK<GtPx@<kHGwQYgZO+R
zoy5&Ff&MntlYb)ayuT{r3a9lln`D$_q9}o+)9_6*ScaD%l<_&``~8m_LLQeQ_!N_3
zy60Ma3<=23C83Z5H%HC9&<woHGUHO{HwD&$w~sV!gaX6z-_jk4%xHVGyX+_<iprBP
zc*)e`vGVAV7xu66=rU%3SqbOmky3W6VHV5sWpkT;z@D4rCwzAYLPJ7dBMJRVde>=}
zPJ7+qUfdZ1?TbS6pc@DCbm!$qT0QdeN|rj_Jh6*RI9{zI!FK$+vpV%+FjraJ7~dLO
z*RAy1c5BIxj9Lt*Euk=`f)`XNqtY*zI>4dns`tuX!by&eRVXZDpAS1oqz2=N{=rGE
zcQYK}y+`{$+cdT99lC#V-x$2=yqe9!@zseBDZJgW{60}v-kNyaL3&S1e7~?l?Uv@Q
zljk0oTEfcs2%=h<dkO--Se@2q-nhK8YQ8LAj8w;^lH;#%#>G8#o*&<T)PP4H^##BD
zb%(3YoTQ6B?KI`)V3lf)(w2}r;<mQ$$I0`?{ob}8yk?u6ytGD>L&kikW!?J66Gr);
z+!6;8lBUy-d`u3DIMicveQa2+VR!ppgffF7F)I;!F^ViaJl*Dghf46BQh6blTECYS
zFYl<4x`sJvaK}veTDRKU>G!wH<7%^l%nfb{N*%hBno(J~@`By%r<$78<lH>53m$<G
zq^pd4Oe>{{X8Q}P7&?83Js!H=<Ki0B&@gPw#-{E0118`n|8iOxFVs<{#yMV&9rNYm
z`dynxZsB6qQL)?nq@fcsUl9(3``vIBO^K!#-wer-??QP`AAQ2ndX_*GNQqMz0*VW`
zuWZ>EU@SORa1W_ZGDNdEu(DZttwDE6B$nICeVGFGm4p@UL=YYbmaUNw0SjFRQs|Zd
z)c6|d&x!n6#{Fp6Rp64e^>aI^!EC9u1;3lF5!psN$F@U?1+(A1dl^sYg3tt9g}GUY
zm3)<W3$gU;YUMJ9#THGcw_SOk_5RRqwN0+p*(8f$<&a@Cr(^dM&$ad@+x=Ib=#N~h
zuqsmz`c4ny7FnN0nq3T83cF(*$3JM{K=`z58&Olxm)PEflLv*<hbd}IKPga(7Mu!3
z(^ZJ*N#CeVxyNZ8uFX?oD`SlAsb4r9b^YN)u^O$H#1`fD$qg;!*ySSEBa4;{J96IT
z?RPHBeE=wt%o=I?DKZ<*BJC`GE9Eu#>aNlvZJQBLXAs0wNyi6hz>NjJ57EvN;_set
zJf08}_1S0{aVAA-IB_ln(*eYjmLfojC}AD~>n7p9teY3WDtXMEn+m`zu(3!wRGEla
zdhBn{teI_L2=KT(hAv?Dx$nasao>hL=`M_Y8^#6U=)2L(3zbB1W(g?ivgw#50&nX3
zbu^W-A(y%iLQknW#BkP61S={HtRAxG0}#;0Qu+HIQ=hpX`YiwVl4<$xBK-e#$=py>
zg&u<?)9#2wH;`2i5k%HV1Z!LnkP7DI5F0dA+4udn2vJAd%{GqK5sqbco^Y4ke)m-G
z+L`7<XWPtllcu2j*KsM7wlPz0iG<y?+1biLVZG176}T_xXRlE7U)1vA1gA;sK9)8z
z*MGp&A8&<mSN1RGJm+oVZ0Rb>h|E@jnht6Xy?pFa@G6@>CAJI0PO-Q0g%{m&`O@cP
zuosx>Mny9-RwmULI^hPfl_B<GkM-pAzB*ERTkULIkJoB{oxe<`y65YA3Ak)igE;;E
z&ghwywQ;0tBMREK0^f;T?>6;KY+Smkl@y`OUnx$j<PY#=y<CXCrzy~NSault(B7q8
z^r&&q(MIuDeJAR3T=Pe{;DBSd>IKY|$FZjUrrex{i#%(>tM%0yqLaFUP_N%d_YxI7
z8=FYs)L1LMDR0EHEKX_i9b#utXMdu%ghj}Ju-zw%>yHup=I(^u?Y?LIfKSHocER+R
zjJA@1lK-mI74r+XO0w0X4*P8-3YIns(747!8f66T7%KuTKSY^wu4ZT2E4l*KIDkiZ
z7k~Qg(Z_jlsUPg5y87RzgrxDg^Q>_JeHa@jY;Ft>gedr_0O|fy0rECs7*xS;6ud7o
z%YZ24(V^~9`FRzP=}_CqbXaNq%5>yX#6H#2_nQ4ob#Q_&&&98>FgE?+H?h!Lz{t}^
zjM2yye^lq5U_1w_Xc$z#Hh=F|Q9Sf>!+;1k7Drj-(Ft)0mnI2Em#fBcZ0$-M7ZrDB
z%5$V1(R^TbeHi^v8N=5;7QEDKFdjVC9Cf5}?;Vx99p5>w(FDI5@q1xp;0kkjS&O^w
z=JB~`+J7oPnv`~ryyGOlGEfOwHBjr7dx`S8oyH+}<KCGN56`=c*el&_R*q17zU8_1
z`bw3z28tMSu?GGpx(#wDW4axy<(j_!ylN;lmowxMJZ0Y|7W#HN%0QQro-)n6iq&pe
zNDIEw5t%P@yFyw(=v4h)mPt1=yHTX@^a*^7J10J#?EM-Y_fF#?hmmDK7Gn5v-B%Xt
z7@CTobr-=tI=s{<Tya3tpbjdG((y7^2oJw$s_)`j-}rGtWLt~lvJcf_BxJtur5Ai8
zI4Nb&%ZR3Rp`DKK9GO})*vF`CO-dURkiL6{We$IB;RvWR*T)Pb^H4qzm6t0q!W0M|
zGKcAiwpltG3)$;VthW@rz27{)G#<5S6YP6;qtdEr49(V0;cL!qS;&^i(eAKxZtWIY
z{0#f~D!R;fImnaz<_Kasqz&&x3eHF8Qa)blkaf1rE5w&Q85ME}-aR1FxY=at1rR)B
zi2>ozmgSd2&<()Y^^cmRA-*i(+rJlM2{{9lI{*BH6)OdDAt^Y9I8$F8?&>UY!tT47
zX|d5Z+BtpU3-#Y2^o)&+g5T?pxxF|bU27EL$5F~1F_$BkX!yQUsy+Q^T?0z}$=z)M
z{OdiRZDk1iEfS^_7yJ1}4p~nhGa?qo9kzRN>xod1mdE(GT4DsOK`hv$&epnmFUtr}
z`8_xb=l6r;@^UN~PnPt=Oty0<XIPChZ$n<qZP;(0jI=DFlN0#2B<cAy;$+QELj^yT
z%jM3Z^@gV2m*Wx!drmihyRrUMtHtQx(LoR)rj5=*a6kR-!c2qXE3+CGn5b}+UdN%n
zs^)X9u;W!ZonvhQ8V2NpU`53Lvm)+sc9tBk(&9iLet+cBnG0WPR$yGO@g9t@^X~pA
z6=q32D9sh5Vn;l~UJ_MmoVl-*gaPaKu_xz7<Tj3(i0!QE_F>F~;q6M;Q?*vJ>o~R~
zsQfJU^aCu^9$4nl?=hb~;XQNo>}QK)B{WL5|45js#DTOPu_t{mZeZuwBs$y|2ahsd
ztM714o!RN-S><W29`9pVm(biM5$SS6-`32d4x{Zp9WhKZ3+QUizL2Io$p=SLw)(w2
z*7}Wt8;t>b#$a=yZaS#M7cv{NJ^*}TZ6bnkFI$;Fj`Q0=()$6cZRjS<G9d<M<|1Kl
z1m;unhUcvWqQ%_rW&MnWbP8?)^GuiGx^f!RLBQq&35$Us@gk@s{$JNR?}_{`LG~<=
zzQ-Uy{r=&gwuMN~b`k6dKnR7jM!UA5VI{wzVKvS-H$9vPfA|B&=avM&cvT|5%wzXv
z=PZ}h)ttFvwu=Ix!J<hYQrpb>=6fx}I(d$(Hr~ix6PAu=Hc7RRA#>VCCcnZ62#}~?
zFSgwsQ1w<nz=_2{8zyg)Il=e`?4fFsXY^nTE8}LBH>18v&A&;=zsbKJxJd#;5Dfc+
zo!;0Tk(6sKAwOWt^KZbe02e_Jx)XI`5nhIz)!Eas08F2sc=5N^;&0spL&QoP_Yc@)
zKRBl1b;@6j(;N|$y&X`EVDrcNMefy<?a<^JRH?bEf5D-D0kyFB@2mfA8V;I9jB?sr
zjje@HTOTab2*bE-^J|LEYf5XL^dlQpz3b!-h<Fg(Rxk$zggKgh(abGMaMITN91^Vu
z%H}sh07*My)X-g>p}R=We?5QnUk%TKZSV{>o(iqXTpX-sI8>1#pdv9Mf}e=QPvAi&
z;rG=;z}4md)$&87jUI&m-4~K!=t(4SUH|IqUtRs5O@TYzi3UAb9?r1;)mA0KCVHI%
zg#_pdV_Wyv&b(pn-jFH+=WRKOw)uq=RN4-y_1^bv;@R$SV$RCYLc<T3e*z=%0mX<f
zew<i+8I_<?o`^ETd|LNwJer2wIdhuqL61hfDraT#3??#q5sUe{beVD$+Iwi|CLY4l
z#0c?&E;NT^NZW_)?;oNmW<KaOVDs=zb`}S-=LUzojkAStN$|bvlxKfUmZM-Y@IVc(
zyx`1=F5nd6cTifKiU_=PLqSH*szDt5lngtqyB1n<u-=$18{kUrD1B7c)-j#lvW&O@
zUK%Ht&wgB?G(ANc48U9(5<Be1WAF^jp{0n(4L@=NfBBz&<n=s;-XCi*%*60hv)XFy
ziC+-U!H@OAtJ90;H?TCUakLTyV&eNo(B~@{RuI^7>VnlA1h!lLBd|qMB)REn;ll_J
z*FwMI+RlH)weWTAwJ^eL(tizWS(zrjqq)?{TN^~O{|IZNm!y6PzPxzO{<lYZ;B|au
zy?_Q=_U~I(VK>K`oZx|&JE2>Ib=9E_G3uG0V$_4c&EP|fi$VD<3@@NhZA-|lk?%t@
z&wGxtF(OJsn2#Hf#Y04Gu%*BO+#JBCt}(!jKIaMimEYLT#@}E5${A>E?Wey|UxVCG
z6KTZtv@p-}odRG}G)R&OLJVN*?t}SV-#s7nThwRF6Zr(VIO+7~%7K8`C;_4%L45QB
z#CKOMy1}xl0{7Z2D&iAk6Cg&?a@62408hE}dqX%DZ5|2b_m*3a)=S(!`XMYsO*i8O
z*Yb!_g-~v&&*6l}@wi^{4)HVZA9D2C^*>*NV6@Mws*=H5Zqm&u+TO%uW~VfEp0~I%
zVh{fpJMw(<rOEt*n|E&$Pk<_;!}j<c1M(bi^lhaI(|eo9&)mA>x&*=^7S#NYaQSB@
zllUIqRyTN45UYs4VzckTr{<z5qirANwz7>_JFD7gzFU-RxZT)teoa?b(LXu-qGnj^
zDAa{IsN5tRqmq(wahhKFX0}bW>aUI9z+l=KP+58Ks%LIY@nz%~M1Nw$1NE3r{($K!
z`Hze)t}B3DD4`xfU@~u+RsMhpfjH$oDB7zkMo?8V7v*_5F!f9T?EP9ehO-tK%;JrO
zqcVgk?7y?656gs1qBEdw#s)oG<$r+jfZmE;*V)(%^ZJgB+`s+*$o<DULKk>y{Z3J!
zH(tdx=62)RYgo>w*IJ+0RSRFQ<CgFdoCl>p3M4`$<6^D#A*^wT$^9<nxU+B37YlSg
z3oqY?MiRw~KOgE!BxV}7t!79@8zb|ZobR$O9R8x-aKo)1yEH#|OxLP#>XI>A#1w&r
zZuN4T1d_L)?evqb$&l06f~-8Yws2H_xcwp9&|n0L<Oiuvs}uQ$mKJL4y=;#5czl`^
zHp?(MDQY${6o?TEtTR7fnBf(>G-IVfBxW^>Lr;!9y{6*=h-J#$r|$KYUkE$ET1oe&
zY0yu1x%X!_@r~~7bMoYNeZM7u^>%E_<^Y+f^SsK!KVZJB5uFG&`VLB{bP#6$RB3UT
zK(>-zzftSer2fwj`zzEt1=hKMGHtrVJB=X!?b<M}bMXA`D4~&%V7CuthW1h)M+VMW
z>Ynjw6xSxZ8_DwB^mcjr{Rd3cJkL*;_;E~WFx`bjN%LU5syynfP%Cu0`^L8|0_$h1
zPJ)$rpL=fVffw93u!|2y!Z86W6D`WJjy)S)rzbzE8?ac0_I}-n@{%3PzbP-Ia6n=O
z{diS0_~Y3FtWAEt#Bftma5?#n`wm|>lihEGI-egpa=1tR-ObG&>)PgR7(Pcq-O!iV
zE008=9kqS?BU4Cs^}0y4=xzHeub4cKYsM^Zty?I}&hV2ZVKe>XYvXt2OOy2KZ++v^
zeC|FQCDQ?JOtOu+gAzMgBWRtL;q_`})LGdMl2c8(aJf!+SMr19sGeG%&b`KLA@p;U
z9b+xKD8Wm#Q>5>G>USH|v~R!T{<fXtj5Fo~B*bm4I{JpLMv*3opZ!33o%Gi0<?FV^
z!$D7;G=Hg3sCYTP1NS&|$C9clITr)O!u{I_H^C&h>c<Zpd-u_Bi%1LIj+B!8GFNe3
z;cd!qOR>w!+Z)t*C*Dx%M?&ht!xKSG`5EV;<7dSB%t9@NVkQm<j6AryUK-W8610~^
zbJznYjsiWTY_0PN{g)`=UX79;_xsw%N_kFRZ^jrOW2u*o=q`33$6lG{eb=-<*1_hC
zr?g}bY<o*Ns1Cx`_=tn8SG0kn0P;MfjXY1t&pZzs82~-lq@UZu$-VrwEgW!@c0tSw
z;xsi-QGozU)5Z<}7{IUjTNMKs)UUuYpFxZ*|1_usAkTCM7*wdIn|WURw?S3Hq(U3V
zO#U*uHh&+~F-Z>oikMA-rncg-z^Z;n|4&=`R$goA2#~?a+4m~!Knbv_+7&WI6tl5%
z`6?gf@>?0F+n`(3f@e<Ot~BE~MZFg`>X3!HfGvnMgYpj^D0#iQd~@hZ++zAS54a$6
zU!UJuQV2OH>0@8@d+nZ{mL~Q0T*+-L6f?Ls&y>mQjLOq$;sW{&%b-CSgILfO-$v!o
zMypqB;0vi%h==rU%Fqv(B(@ew<^gQE)+VI4S25F&wSqw2TC~AfAtLJ**AFKj`~kt<
z6?QYD9BJ*fge3>je=OdY|Fn2ReOMetN)z<?PlM){LSus}Pil%om8zP@EWKt&lE#Cg
zAIcq;Xiqlys9hRSHEzI}U57Dg^1n*E0DV5X%1zt0q1v$=Ni}<%l+@&Dia19Yl|?}P
zJD9;pfR+#67xbiSXVR`iUmHdcV5>jmGgWe0OCeH$8Kc>ZXt$pp$fb+K(QK{H=T(n#
z?`V(+VGkXlTzyJq2@7G0bu!)&rfi70U@yVkSSHNNqRJH7tdzT3{^9MzbSt!r^W>G4
zd=Kj7XUJ7jK=l)e42%bN4(baXvL7+pI&FR!>%cr*-nrNr?_5x-Ws$kbTdgrUF!_0F
z^AA{RU@T~UijA(F{m<R${_9?^l2bH0?joky@}pOJsVKlkab)%&SB`lBL~iqu)_;BO
zo-p-)(^4qhLWNGvjWLul31F_66N>m49LamYP~}jB{^O(4dK}JCVP02(`N$V2+8N^B
zoY19<*wY+lyLWI#WslGrQjcE>taknM#UBRiT;zo+TM5N%0Z+PVcgFNv@!!(sYuAEe
zzkNv&I3%ER^3(Jz@&=|+lndWZfb5NWOUKR=p}@;Ihn>Ei-xPZL%GC1i8~g8K8#Gr*
zU|-0Oa{2PLEkUzcSEk8_OD|7_I!nl<dcT|0OnO6(WybPJK(9XmijORM<4qcEyvble
z#HcLtkB{`vErkN)lxII+dYGTDGWYM^gEn6E|E<pa)t8{Uh{^SmQKW9~L8hKhdogoS
z=i`8LnTl`_TSmpOzvF8#h}n>s-ULZ{Q8AP-89aY`zw>)7m5^7u5!9VJ+J4T%i!8Hy
zm|w_w)6_y-h`X%T)!2FG1vzGeYj)qmnB8YI+N5{8?}IDGB)$HC>=VCQ&{-JGZC>v$
znw#O!Ct-RbCuI+>L4S;5^ETT?r_j-G*BP6XJ_D+rWehV>a}Gprg#;&gs(`xm4;XZx
z-%*t?JlE2{$-!KiBpu{Y8iye54|$pUWsYWob5zBxglvqEt3`3IJH}%0%V)RK4KYlp
z@*raT@J}4|XKq{eJOSo55<UgZzWM<>!C(T<5X`zOntyoFH%(~sf2WJV60&r0tQALr
zBo_h5_R~|&je=~@{iu56JMMZ5<U<_S;^8?zLwjf0=Xb0uWNU0xkCr&!Mm#X<Nmd7`
zJtT0JKJ)<%2l@c!v8+h7yX{INQ>=Ys8rl(Y%x(MA|2>33^_L~h^mz;Q4DII_PCo)w
z_Cm-arJ77Y4JT&B>Yco7wQ2X2<N%IKcc98XM3Kb#%VpXl+IGkHP3`<{_KA=$|Df#9
z5SP0C==Q>fY`^QTOANgB7^+0tIhjqAYICR@Q5BeUn8c%6=(Z!sEqzmKD(2{j+(Ksq
zwb(%`k>TC3-i`6c7ko_SB^eUJ8}EV&?B5?R<37K`#>;_zznuI0sAU<=4*R|+d&WMp
zD>D&c2>s{C{@(|>#&hU(OFNPhZbq&Gm<qNEqU;Zj{?CtuWBJg$j{lnpsEykmKApeH
zb`HSZ*#xI~NB5|fE5!MZSdq7nD0fr^qF=xOksVluRzxx1y=>>3-BN8UUg&(XXF2h0
ze`sF!?QwxRU$YMQyZFGIZ0I`F%Ur6i(&Ua=kjO(99(z;r!FKb|EZ4X1tLo(3=g{!@
zx_f=#h~umvgh@<)o7i%|{H&$Qw`Q-==v(sB`|s#doq$92|94LRf0@$I|C@pQHK$)~
z%;|JSq55@*Y$Xr&ka_7ES*HeZ){3*txEvQ<<;nwd+7i<{DAI8wze5Sf*=u#$h1fLG
zlj2UjuYlyEA0_H!yVKMhIc+m~DW1k1g-WsCz76<4fedZ7oZA~&zU#gBK9RxBCOXt5
zJKj#0dEEf&G6W~0uMuZFzY?ClSJ1mEK1A11+<$jow;+Dy(FbvcvVSKq>nP0siJ8~h
z7(L2<7NdzR!jzT^U4>iC@SV95<t31v)!Q2}jd`ra5+r09;g`?jx#9Et6&rR^IAQ%_
z3~dYps^pJH)Au6C-XJXbnR_>w`I54>^heOcJrT%c-wy~Z5Lim0G{u246gPl5O;;l^
zCackWeY581cyi;ha~PWiYaLY{>KYjTTLAJCjq7LI;F*JMmYSCc0-ny<L`v9W$3q3U
z!>`&6ZzuG=vb=<iD6;<mRaXGnZHD|07|Rwok%$n1AOnCIowDY8A1#MZVfcXca!L&8
zdmMWI4)+N^Hh?9A)YSJcJQjvGZ3DKvn83Nx{QOQ9#-(6s%Btd$S0VGSTQ8irf2ep4
zH~a&}J_E`}lp?iEW8pjwq^yL?0JtvOa^A0@la+H3zF8jcU3*9K2(jgU-)Aays9x|%
zMy7tLU6>WmDDBLH*gNCR$9zZQsjGnF@%0Rz4DY>S^d0Hi`@i4xcq=sC4&2Lp0(D#b
zU^Pu<J3V|sqn#<rHkP|M4N<lo_yG&KN13Hjk<3l(M1owjT=eQJa5P_p`p+T$dPKy?
zFy;i48UF(oa6g*j1&<;SK-@RHFL%e%)Y8=dxcZtA<D;gSWBy@}cfH^Apqc|$vWjDk
zPTe!dOER)B@?HuC#rQ5o)q+H|^rex6Wqq&Rrgbi90Sy%`JX8Q#Z2n60ucxaCjX1C3
z9?&J-CHk6*&^IsBE;TW-PI7rnes!O=gwusn`$!Z%;)I5UL0bXMz5B)zzW$&SF2A9Y
zf7s^F9)kEcx@aAA0yitEdu@e4-@NzF{_;Y`>&6@X{a(4}vZR;fOV*73c+Ql6x=W^t
zUaDS-=+0VX-j`f^$NXFciP56n{_Mm*d#g;o5lU(NXVm<4b?S~&jABhmuXGa&4dt$G
z<5HI^+MLl(zjLLtzFSS}COEf*TJv_8w_GSL%qxx9)M{iqUc&aWa?T$mG#nl1E;Dow
zFO$%6p@29rk#-lw6ErYT-y8M%jb$Th&uYuj59-_l0Y+kZcooN8wZjl%`&4m45<YL#
zP%>8nUmAuyuEp^hF4faO*JeLEP_dksfSm0DxZtVX0GYfof{5|2*9V=oi8S<gXO(&W
zH6y&t;&nd%e0r#H(e~HVM<RBkmc24-RQlq&h6-l*xbMof-uuv#S3yl+aFfv2=+7qa
zL35mdF;kGa9IX6_hk9ys1P7|U|Mu0FC}FYBzfCL*X0PYtkLq9DiRnNrMSv>&Dqf(?
zPanm^Q8j2Lz{f5GKDPOWj~$iAlE^8kZ+Q2lARa4<6JptpJ%JNsp<plL#8|LcFWgb6
z?|j#C*1gMRMV!F`7o$xsPrcv-X2WatA|-NEwb0PqE@9M|=ki_&<9#Exk-F?*$Jvkb
z+yfESg*ip(!St`2`ye``1rR2__3p(r`tEq<g^xryv&0ecGwaI=yxvC-5R19XxgZXq
zNXpaGJON(k@*A&9gZ=}s(~U-q^Cg4aeU1kZeIls9(=aiVWu}SuZ<sD~*(X5YUE8I{
z-HI$3BZR$3FNArBN&9Vy!m?tun6G0q+;23tX`nPGZkCqB>eAYd-mF;ge&YZ@AXr2C
z-ijAne+Gl+P2y6o1LkP@eFC7O2>WRm7|kJgy#fs^*tne@S(m1Au)y9<vci%B%N^*q
z8E=_lm{zi&RdH0=)l9Dh4L+!cIUxV^+CXHFCWU8G(fBuTwrNh0^0a2A|8Bt~+sijU
zds4*jbf@P2nV12`i!zEw5AUoM+%{4isk7-7*Is`a08K%#v>peea-$b)wah%sD*^@@
zjzBIw8tNTlR#HQl&*W!`yz;BFt2{K2G~a9s{H@@PJqXEMfJ@Z?YP1NK{@mbB5kWNJ
zrmO?sYt9wa$v$6{A;mD~H&_#uTG3SdpYUMx!;S6Gy^#?suv)7Q$VrikN`QTMIoq8q
z*qObUWgpwM)LC77Nch+;!%laB!pQTZOE(9UIwB80;CzuUoUHjeqZQDwSg;$rgDC%8
za_+DT8?#ves~tIbjN-X@=M?@xw_=I&jjPwg21#wl2P|Cn-wn{Z+n$Z~vuEVur7&Ly
z`P)|@A+JVr5~PevJ9k@F9H01Q$uh$-a7DuG*+1m4EyoXTP1J_DX&xgnGsg05$<rxI
ziv2eV3W`HFyYvIN;<E52BZ*asSX45g4jl9lJn7<i7PhAl6APl;bIX6vob_U4YO*Xq
z4AhD8AVmZ+L@+bPo8Tde6r}t+lEt`oPfgAvKs`rI2V!pj1|h5Y1nhvgSQtu~6DDdU
zS84do;hO^srC;v{%p<X+?dNM}#inr`yH)Tp5+=kcDL1Awc5-XAzQOMw<L(?-n%?;F
z;92!j!@9`203NfwGmb@uCjz8^r5&TfA?g&NnE(-n<7C11vXd1^>c|_g_=aE1tq?&l
z5#Z)>!s)YA81UmSaZ~yxE6~3Wc)>k%=nqyeA{Hl1A0iqMc%g1JKp{jX7E-mw?%^ns
zli`S8Zhh0t|9l+i|JL)s`KYzjFa{0W=rO<-(SqzD8XG{vZxC`T^ax$@9cGJ*^j*L_
z@X<ij@C%=jT!ldx`X5PwU-*m`G`2{t2I%!qz`HEB&YbZSTs9c0ADRyZ0C)65!e0Z}
zL|dupk5{vDQAP0VPrTmE?fC1~lRMtEU06`Otq6Mz{yhGPtbaFL@pkL8steegCTb-$
zrXx9al07rbUCBZ!2~hU1UX^5Ky*2A^xVI^Rae#!TKf~6fDnr({JimtP+ayc%s$aXV
zcYGvZjL6e%$plOS*lKw2hvH84%P5ZeJ7)+-PEB#%nj7zBRFPwrXf4fDR1|7OjVUrt
zlxGGe9|q|eZEY3$p4{OF^+ze;wJ{NHy8;d3$dF5Us&8%?eeK(UZ!#-<Op!*S5eTID
zprN=F@B#Y!6L63Ga`S0{eOjdm&0_g-q4+_<Da6P(!WL-ChJ<EN&5bCY@|8#sSYG`B
z!<a^y^)jl-?-rt4ni>~%#@BMcA}F3J;CFud#_vy}H;zXC^+{X!=cTJl5eSuEmp+-u
z+}=R6grG0Aqb;-*uxsE#bRc5os8=qN!LEw5Ut=o_al=5jkv`xAOaRE7eZX@-Un@5b
zK7b&ej}Fvj-sI+mhF<E*%rS?5-pKr~8zDd=-vA94xQf?F_KbCN#K-`g4Ka0%gk;c=
z#FULb@x9`yTVWAD7`e4^5ed*d?CsZZ=y$7rY#;omzTsEb`k~4bc;LT+R&lhIg9PG2
z?gMGi>fS$Fz2_-Um;{>?&}SEe!FY1_+YetBB^fbj@DW|QTK)((gKdLugsG>Pe5N5v
ztot-|E2g`WkbVGv+`L5567uVt3{52;*aCqia`PGm*osrpdoY*o;9C~>3ZmWDaBR~i
zihW6Cj%m-*jA09RkzZBlyW0Wq$z;b7MQ@4QMc+>2GFqz(%!nme-XtLC0yJ5=0EH(<
zYgEelqG?Hce{*pZg*k2MW}`Ni?JodY@nPi15gZ_jT*w?PWxCYAGdHBb+q{q#YVXx+
zI%7LBZ+Pmv%iHa&8V3G{yal_y_>p|1qNjbr4rCnohe<_0JJb&+8X$QJOK!2nprlzJ
z5lSZrDzo#^Jr~I@(c36z(VHoa+V~Hxi`dchY!)Nzqc_$pn%KoR;Se`HSltSA3W5sK
z&qbPhp|7^JLu+F{VA&_(Ea~R%{%d^nJ-#DnjGlD*nKSEzp|idlP~h&EjZ#+d(h1B$
zm>-){q-2d_%Hc0C)^g}1*h@QG&KJ}f@y)GC#Jtb)FeBw@B+>xXA4cJ;8p?~W1UhG>
zH7C9|<~TypHiJ&ag9mrr7QU~eTA${>@h<#<VjW%)s&rzqQtb8Ha<kopwiov1<XE#^
znQ$Fp=<O5W?^B>)Pr}=@|8y^!xaX-tmpTwmdc#}w5hKS)`}$7MOVfrCpFyGR>W<OL
zc_T#C5anR*ye!x~{+4IFxyTw+%e}V>Z<k-7P(>|o?K^*TXy3}j2mgy?PRgD!D;>kL
zZALt|T&)1h=j(olQR(LgSI958o6Vi#s0V>&^&kZxJEzbB&`>V3PzyodgC5R$+Mh-F
zj6i;~N2I|po~_82IO04U%qLM2j>#HLd;!*KMLg#uQ!7~k_<oQpsC8PO)W!ru)dfs2
z?!MlwgD6~xs%VNwdL@C%<<$s6uzHFy+hh_C6^t0J4vGqBvjyzR0>Bk^G+j-1c#*-T
zZU>?gP!r+^qp!XqoF<I);n<)lr7<{-h^R^gr*%?5G;=B!oCb!qc>qFVD)%dn;sK?D
zmqF$9YGl%()eHi09vKMS2SHLa6Bx<WH>}H}VT`Q^q9O7DV&hu|D2_J-UOviiKZuQn
zA`pwfJhH>+v{xGzs&8l;G^H}ez0oGPe?k=kT)BGV%HTo^VGO|M4MEYx!I>@K%zAJi
z8{B8Eo(*#3sc2vbqrqUpK&?pVUqca0U)vE~#@62>m4&$5f5zW`6;9uCcjOHELm`^?
z-O7<M>ZM39dcIT6>e3(lG>zcVI#`J8cR@8PsV>pgp2qJbr!Vf%HKbdxdskgk-C=uZ
z)^ad}#^EPI<VxesbO#&zZp{#RwtI(foXnn>PXjX=nfDkU0ew4sF>H`4x>A&{)qUGa
zXPoH5sEqff_jPw-q(xX@*tsn*=tjySgmYvAsbS3y6Z7XOQ?J6bIpDr@nz82EI{8)D
zjR4xvWZ%6tLQCOZW7x)bFZ>sm9RXAa<1T0Vzu7nx_<F2=T;(L}zn$`bd<N@uYpeFT
eBE{gbH?P71ul=?E%1*Ec%fJ8aU}gQ$`~Lu9b;$q#

delta 37004
zcmb@tcT`hb*FG9RL=mJ&QHmg-AXVv2A|hQtP(f)?kuF4}w`?r*CPd%}Qj{h&QUVG{
zqzec^TBJiL(gF!JkPz<nyyv{_`|fYtJMR5sjU+p3t-beLbItP1XGM?GH;vJMJk3Bi
zRdt4ela3CHls-~_0x^CFsa~i*gfQkJNk@$7oRC)-FK`JTprMcD5@|e#keBtXQ`Jm~
zrJBe9MsK>ts#QiVIyy}x9a9s%lNPd-NtW03EPs@Mre`Ee-dU;LTeM?wKrJwxpN%|z
zOoA>ODSr$N=+it^ZXQCuE=duGV;~3LphRmJ2i+k={LBYn+UND~A>{c0IT~1)Rbr#E
zA*oWt1+Z5u*ej6}_|fJjL>4;F3O->G>Ea<IBW4gv)H0%Kybpsu$)KIMhj#=oMuQjC
zjo?%*RGZM27hfcesS_3@bBb*S-j#R`IE2(qr9co9Dpa2OHU^rfs0H{idlxZ83XF?w
z?~{k|A%r3C5W-9~*x;v>?U~Q1?AmPPu#MdUZ(2*bDzxz=J)6d4NaLC!hvH%)spA*&
z4<XO`fpEn6(i=cHMiO=o^XDCY)>3&k+q8kXX*Bfrn_Oh0@=)4<7c@^MaIUX=&}Pgj
z32<UjaN@6|`{09z4S{cCMl7hM^0KwP1UeD__>F4amtffWjG6wFB`dTE^EIQM25&zA
z4r?bx9`N>nvoXy5e&So87~E`VCn9Ir_T|!RXFh=4+Ch2Z1HL8h$)$JDSRNe$V8466
z`^jLYE1~R~q3TPcKnIFlX?#lB{b+@l#pNB%M-(e8fVQG?Gwd{zSwH9pI+G|JxFFWS
zEbE4}!tb@-$=nr#0#DpGgN7H3jl)xwUFPB<EN?x}vzk1Fu$R3j$5NygpRVwWyZ5N~
z-y6YBg|vHT+a5yHAtMLIr5#lF^i5i08T761-Va!=5W2AY5OU;K!yyD!Z}y8jNQHW4
zZzf))Et`0&?BUeyfmL5AUt;*|vGSaIuY}}fpL~t$W145>K3E2jax6aff>M;hLrA#j
zG<Kh>K?!`@ZvZ)+tx1j%MeRcH9YUHOL8&GXfH7O;i|oQKYTcN|mG}a>XhFo$PMkZ0
z;9dU5U<mDm7CgwVXB{?~hMZv)19;ZpL1r0~m@iPWg%-;p<ehN~j4T~_2#L=9@5va*
zQtvTe%>IAv2mF7Suy{YaN$zO8@+|El6x=q&@Vy9~MPMX{ZF&+*)5<-B1X!&LQ8}t;
z7P&+@8XnkxFjzuNo~7v|12}K+O|8~`Q9U@SvdNNZU$K<vL&#F3MGo7dMT|ra{a=l3
z4!}o3i6&<301l0!^`m;#56+U`Uj`R-ki>KlY<&nJNLC#}jur+0W+Z(o_f*SpP)dBk
zJGarJ@7wwRu)NzzuPIo1EQhTp23$*I(#fat>Q=i&phoLAWp7;!a0fO0)ggqW2s9@V
zoe!Ap|7}(4GbZEzxlr=|uNF#Xd~(YZd2m9Uu{?&h4MjSg6!|}Y18U^9W4BQg>*RC(
z)I6(cp@X1h=)MC6)rK8?C{}Zj*AOb;R?#68wLWx5kN%nW1qe4qAC$tSL&)n`Dg&tB
zCg9H-{#$ehC(U)aAb&MF>UW^Y5SWvrSOY(2@n#2V6S&zsh;Hzro)R!RK<i-R0Oj7h
z24MJHAn)tgBC}c1>#<rgRee;I{7HAd{H^Dz9)tmJPE)m2rq5qdy5uQ}h}$8g3Kdxn
z%v?xS-R=(b7$W3&{AjLhO%AgWs2SlcyvAk?Ar(vgggQe<7N+naoNnpWNZItty~{es
zTgFu-k7IYWeNLYi`*g-URY1ROf*#ilnoiE`c&%O@G`cFg+aT)xEoOxlg|nZRJ65g=
zpt;PiGJ@^oZ>hqAJh&i)o^`#2-GU!iPizMFgF6Vk^yeF!#(Dbg<1sfHA>igb>XV%S
zE^i2QR-)nYuvFRI{BE0`KxR#k#6KLmrymIfKMaG)FQP2T+r(f%m+bEtcp*_~6L2I)
z?6&M0`+Ex%IKMcZdMOHXZm;gw8JP8pX_Y1dFFxhVfSYyJI|msw;Vr+%j1}XBHxI?d
zw!7I1F-DM0W~osvK19zbJP{qJ_!%t~%U`tZQavWsF16zx;p(6tckX8Ub$w?s!CV)i
zRw*n^lB^WMG;5=jsm0zr;Sdw-7x=PA%%ZhY)RXyh*GH(2gCbowZjt*JH9a!?5VFb(
zDs1)2<_<>tf)FVN`HTY!0P_-~xPxe1_P)F%gqC|6Ihqm(tG~Ku@fkQ1@{pL_Qu2*}
zUgvZPQflq~BKidrGcghL=;(ce-Qq&iTOl7!FfuomEyGneZ@bE_>y)hPsiCwEArWO{
z@J>3vUK~P*aQGpl?Z+X6^&V)~BBz)RA=8snhmhE^#@r~IW&q}`X6gJg_;%uC;?<rr
ze-1AGbMWp<DADWhu~xswV*fcdcUd)Y4)A6p+z_Wy6DKj>x9A4e`cHk<eGnjpSAId_
z>oSgKx;Nk(8!*)!__#cIhNI#wXI_}sXsvb^5cGNe%r)CeON6tXdJ^~Bz?`-EcU$JV
zjNyOj38*VbeGPFWL68N&5cRNoMxcQyC_ID|2pVCIl|$#$#1H(T``m~%P)qos^O7(I
zEzt4);S0*|<>LDoh{RuwW`K|Yx)iB8hY<VWY>H7eX1afU?*=pyScMG&uYEH}`ZV)G
zyxjh7^&w>R4(P0prU6|Ks2YcmhqPR3ZVnr;axq~(&#vXeJH(xG?{*9iRgO66;y_}G
zQuN?44!dC-8YuYr^~rqyr0nJxpI>TE+mtDPt;gW+^(c7XK%w!~&Y%w1ve>|<{en4!
z@aj{Q;4QFyAx)t}$ctcrCR?YK8%5LKRY;?l9Xo`~&mp#gSh;_7>=cnb-JlByVkGUP
z%prtaXGV5IMdZ?)|6B+B?={R_R+{VsyqVt2@NA3j=Jr)3nE-z<|Dtk`G+Hnm@6yfK
zR?;m$y}ESIx@%428HZ+A+wqQBn>|+B%|Zzc!+Sf<chp}MopsSDUkv3k*UmvcP~}CE
z)VKi9`aeGnbm=0%=nGc>{wmPer`jHXYcRJ!69#^EegKwkr2Nx_#r&rUWBu_TCJcP<
zf7q}?$j=!(^iLyZ@~08|)3W{hRfx|Ni<TT2$e6B;N+_E#alhH;dm*lECqwPVQ;#cp
zx+b$z@%GZ>B7en65!|-PL*wUVqINeP$=<nEq_%a(e2bf{#VkBajNFa?<^wyiSQqiR
z*!acV=yjVei{-3G@w*Oj3LoUvj@3sPaDVS((#Z)iB{7As^59H|P^E-{z`OX@#qs2c
zJzyGfttg<jZ8R;RLC3emoi~jyB0q%Y*!G=JXP5zbl%2ypXie)y$TikAg!|M7l$Xx)
z6pV)Ijh={&&5R<r9x)RRTzh56_oYF5A%5<<kJbG`s3}<iFJsl@Y+qYd>&_En^9SC2
zk#l3=SnP4<h@rP;iWe(Q`aAeV_7of=Q-BM7CrxA4t5GA}?R;x*+<l$%$8446E^7L@
zei#$HsyBT)vrH3vg~#qksctU4Qx;=luo*i7YSizECYTPlw@(IluZ(b>2o4VTo{SY`
zFODin{@xk}IU|M-llWm*UPu&g9Yxd^EUmZ~PIi_AVw^vJ9P*GWHG5sZFy+gFIszbW
zKQffvg-I$~g?`XEgFnb@xV`^&m;ldhVY#fYvh#9uK2F`X`<$;f_sVyfd?%NJn?<6^
z9=}e1w_t=!FP52+b<t*I!$ZhNpmLjyfJGm?pg>pGcTm;vk-5FQQw#7tKL@qhGv$%D
z$fxigP`d%2ZS=tUqoIbWs_~z0H9*?1c$eKKye`7(IaE?!EG-z7!Y|c0crJ>GTh|Xm
zeAi%d2sv)Gqd($v2vJzghEtq($_jU!M|SrR{$mYOm3s*In*ZLXO^k20!d&i+-#5{*
z8?4?z53J_(hoGu$r<Q9{l|_5(h^uw!x1XCSUwRblP@BP5RWQdG#>D+l*M7(+qm1cR
zT}5MUR_}h7{&V~!UP0iaL0*Yy$^DXxN7(hWPZulx>9rVM*hf21Zd3L99}A<=q{65&
z0wMSA!+1GCOU0Y?AI>a7=o{8zAd3x-B$ZYn_GE6Hl6#K{lJT^p^kUA*_t3br61Dxq
zZN3C^56cHnL{4SC*RDNzg?9bdLDJp*-6**b^OBy>4--h6(}93smL*0IGmUq>2Xz%<
z@^FHYlcAt>GciH5CN^M<sJ@^@iO~c9I|}^dfgSL}-UZlj%L*6dkHV7nI%1xBeRIME
z(42o^GA}@fRer(VXA`x}MzCLj)4tf#D_Ig%6~o(QY~K>vyNJg*xk4!g$AaD#$L(Oh
zAOaWbSa*SFwCZD@F^!Uy?ug?8m-HSb{jmi(>An@bqYN4hze7lic)$f{^c0WQc{kVz
zPt+;LvVv^?Ia`khZw;OpU#8&`G;nKK!VfR~=oSx;H#I_5CQ5pmOlXLqtE`o4pv=?i
zs?koDTe}3dX8dKHUGm-SYV!w16f(idHxRuvMu2>A7C7cM$z4_1uVlt9J$tjVy47Vl
z!>{L~k65z86cL53(v0t2psuW7M+=)lTcU>OtEpHzgm5+Z;-z|?oJW6|L^&+z3&f3?
zHw+8!scpgR-RC@vnmt5l_~Drw-qzoK7!(#)CLg1=`8~OFdZ7E_Oo__HHoMQdg(ZGd
zfSvN5fb9dDQKwt2=0=y0mF6kK(S8GV*q>%(6~~c7h!c$0QyReMTme>I`tIttWk=Uc
z9dF><uio)bf8B4}<lyY+!rR+emvtxN^z91f`aEC8Kf=wE4IsGYDWYcwHA5~Ivw9!8
zFCs~Cm|bt-UyngBB#h}dzA(X6XHe__2g6UF^pYn$%kuA;U$`S&ZT5nHdQK`?jUJO8
zu%Y>R=bX=iRjr2{T*H3Sc?%0s-jHNn?;;@fM`>15-y+S(B}D<eO}nGGHeI54*kcdJ
zc+O=xF7!|q|FZ=XFL$?!iicbhtZ%om+;F>t_gX?^So0|2a}jx^Y1A*e<hnCZF(`{J
zaq)mVbj6d5dbx43FC-1R<vx^)w`sAHGiTkgtmNdCmO}^|Aw+wcU}T(eMJynBZK0i}
z=8;$H@1A=<5iTE?S7Z~YO*fdd;AzmvN$asLjA%UP+9;0Wy-K-fhgewd?VL+x)e1FT
z=!MBnWGQX3%QR%nImTzsIRQW4b)h;}{JsEE`J3yNqd2V=UHD2PMoLC~a%s^QR6w*`
z*cwe9^-Po`8#5`4G%|Up8u8Badf!JUI{h~dwW*Ep6N%Chy{vX%K;$YHi4Y+=<>O7D
z9g`;-iE9aXjRT7*o0`<FwuDRP-`M6oTC+VWs&*DVE4rgfdPrsfZV>w?0^qCuXX#<b
z+^kr=FY`RTMi4U*&@z=3e%h>}7hrJJt6r5)OM!f178|`^^A2y~-jc<H#_@D@n+<Fc
z6xwh*-wIAdezIvF<ZN>^6!oK54X^)j^yc^Oi+2<&_olihlT9Z)U;ETe67s#!C3_)T
z@!Lx!sda=$87|wQfXz+}IW(s&r!#aGb#$Zy|N5SyWwv!qoZE8SRpt4&fnU>ZGCONT
zekcsFBxm>%4<Q!BviO8I@FIJ1)$KH++EbJKci$yFmR%dlOjSGC?{Q7wqOf5-Ypr|W
z`Q5K_G3-m${XOE(LSRJ!n=Q(tyis!K*f$;~FWS?N*{jY}KSBx%vH@n%2sZo49%7A#
z&Cj)S#Iql2{k`q#194umZvvf;eLa^ar+&GUfiA&2%ss`efv{1JnJB2&So(-6JgA$(
zrYP;!4At4#eLsYR0lZW=$ry&4Au+uSk;-x1XWZJiMJ~}UWLu=$e4tidjbFVFlPEzp
zG_IB_dnYa5X{Vkes|5#7AE(~MC69hnT4x_$9;O*9JdU{@eFrA|pi$?Qy!uo3$|Bei
zI7S-2;s~@aY7N%gjrFfhg+E7XCW-=II;fFihmi7LhmdQ(^EJ^Y9aL_!Y1jY=l?<HB
zhrLu0+7Lj}>a!1+G5%nvoFKH30(}OUn1Sh;dI|)%rf9AU;rgoqVo)w%o(~}cCUC)K
z2l>`8qN_i(K&S<?Bex9gQtu^$p_4>EiT5CQ6d*`~I)`*n;s8<uQJomFD&8`&19q~e
zN^W1U!)&(=QOQS52kmzPW-gEn-rC+@X#X^-p4cyGtE~%#c4lV>WL~IbF7t<_Llv+0
zI~+J5e0S5R?AbdZL})vh^+`069KU2$gw9X`9t~7eN;RDW@At1lgFPXj0S^%^aILlO
zS@o;&12*k!Z!}p*+^qk6B}^dw;N(FRW;%lxM%SRg)@BwnsX5rlb)Ab}qD)rz%M2@a
zolQK63OTg`>(dO3Y98nokG!KMens@rc*el>)N+c(V*vWZgys6?>4$1+@0bGZMlag<
zO{NE?PZ8}=Beh?Jjz6Y~;)Pg${#*=NDAW9CX9JAV@r}2?GkBG=c3kwzZ**#C69lQU
z;`eYPQ#Fo}&57{<e>J8m<Q{1^+G$AnUW<2;bzooX_pv*v`jR0zW~!jko&{|>*$;l4
zoOpA<6N>xUOT64Je>*8%_0-8C$5$;l&s#=>E*TBwEu4)^csn`K{f!xiwnVdu*!uy%
z%Fw+aJ-Zk~^puVRZ586&+QTW5!V3^qD7c2XN|UADN}K6vOmZ%C^(YUBZB2_b>z4+x
z9p?zwmu3o@10HZmt^^hTCka1K-}aM?++3%zHXlNgeMu*1%})*?i|=4TAwFbyc|h@I
zi<U64bl)u?qiJ{D-`%6gP|VW$H6Y(iH1m*7Dya@m+LeALklX$;m*oX@9WQp<dw<Ep
zcTa8w<6*Wqb@I{ttDEp(C~luHk!R>lD#y(L&k5UdF{5c=w6o)Ow&(_J>J72V*VC2Z
zpFT(YtV&@qI!0zFDr4gb2`0*gp`<;wv3vn$x}OGzFI2@GLab_QgDcKG0M5i|JfG?M
zX!m)ddRA4b+5IdVIn#SKUZ{he49rj`MbHDDTQ>200H<B7M!@;hGnN5x-Dgkdni<+X
zUSGPnnJD+`*B0B)W{Ni18DGX-*oTr+!a{UrGy>CA5>6MeefYL~%01Ap80U2aQpK2f
zBqSHgyAzmo(0B;>QjKiv2GWP?Dt0+yp3Y-DLai|q{)IO7JN{Rg3=T>g&o0wcN!gKy
zkQvE74|oIpb311OUuNa`>IZl7k}!cO2Hi*ep1c!!VQoR{hn<`zvS>*oLE~+9!qzr4
zS>^${{y|}<3bg*-?w%vfa!<$k#ge`AEZay&yLDnTx;{gWth+7)ta<vF_zh0MdND4I
z122tt?&Y#yV*e&ODa%l$M`25*1a^~v)fEzNtABcJOxe~U<k*tE>d>~tx{Qq(Nq3^!
z{;W%BTk*K`LeucRzHPKf)`-ZXyRX+SGl>J@yUS>+b-!e|v0c654PW$D9VWNx$G)q-
z2mDca;$sYXV)_eQu0vUiw~pi=PN13;>s8%zm0$jNetY!N!!m*MwRNvbwQp*VhO#<Q
z^~r^$0p9qN$eB>4>jS<XHrD-e+s57>+!7x=E*N%~`0lxM<U7NO%CYAHr@uB$q-@#+
z?>r?9ZGm2G5zaKVs3kvKrqrX4tPl|bjP1#R!NnmVL`+O>>X6R?@AV<Yky$6W+FV_F
zvq4wf{SQ2qp68z(DW~gf(-rUb2jN;WD{ewYZWuT6(!LJ0LStSUaDM}<vTDob4sjtm
zxMv9yv5{0Y=O^D&r3zOD+>*N-QVsGp8AffQh~JnAa-S~uj^E$E;)Q`Uo}C1!Qsi3&
zi`Fk|s_gG|K3&^c?K#6~Yb-ha@z$;_Lx=75id~AqZ;<HkCe+MEfP&D!3W<T%ZUV-*
zMvqXVX5@2G9aOGA@in)9;A@ysfMyEEGabaGN77z*!m2Su9q66`>Z{!T)*!Ie0bCX8
z>)|p7{x$J;ER_pMy9UMzwFe1jMM1NlIe}2btz!PXjQNkNH<>~y^2@_@Oavj~&i?-L
zWP3ZdHU06f%BgRnF~^3Nm7V<_Gv0wD8-8U_vf2rub%KcT<}^T<S_Q!#DA_<7TCFuz
zwTf{DC^r!B49widj^{*uoU`T~_{+xQ6{KBoS60DMveK3Y_ScgoUcUV>@%*^pvodg+
zDF$CQ!R`{fyW@7Qgu;6ngv$kCC2q1}x9|3Cu^7`OC8a~Qu+JK$Bfh$N2fVN((%uyZ
z__x;v)l?O^S+DA?T(hKbc$k?zkT1`DLVyDb++#s;9`{@CzK-5(IF2{D0PZ1^!8Cgi
zgNTNOD`iT~T4b0TY-e7;dw<xo<QYcX-z5B^+|XE19^m4wJ)I>d!H<C29c1|4Rs14;
z)8pEYa;3X*xaac?X!M&me%Ea>dz*&pyt0D$kT(y~(8f|3r~3_l1<F_i|KzzUE8Puf
zbZp9Au6;VI)@uUs_tz4SFk|>KnOF?szC%iKY>U?RZ_3-s+u)^>Q`#3Y>iQRW{*cN1
zQg35qG1mldi?3H|i9U^OS>E4`q+X_YO}JUAr!>aSghD&ayx|{QFY8NNDjOp1Io0aw
z$ES$Wy*lD6Ooxs<TAP4zMx6?gsjUNWWg+wZ;8vE&t)CYtdCC8*{nDA8Z7e$Qftn)S
zR(?%=et`RJVnPO(K^+4kJ$Y%IateAs(0PN3fm*l%T{!%gT}JE+-qCrznv8?<nt$Zp
zV;YGKB;<Zr-Zw3pVI+=&84%k#+E~NnN*)nC71htiwnUNjjr6Y_)EbUg1fpvF);~@e
zZ@Tdc7qJ(Qg`jmI!H!dHQzs`71H*N%J>YN$_-t-T=d26<?eeZN1|Ep$BPx679C>hI
zu*%-SylP#_muGY>Wv1*_v$_Y4dX6Ue2}U+(=;7BJM&A4}N3nmy{RNZh=PAnqb5G$L
zg>Svyco_dk$Vui`ZI91QfT<rC+c%?%3H`*7^bbmC?5I^NSsz-1q;X7D10DxetH7v`
z3pQ;ID1cKu5kDx|3h;dynO;yXX}3v!86cc^42UY{2fNGZ4g2N|Yz5Fd3yk4ja}%+#
z-f|=7eQP2Q&QlljT-ipA_Et9Sxafwd9>X#r=A`U)z7!xK->dBIGT#tksPUcVwTtlF
zz=>36-RsP~#~#uPADMOA5=h~?NvHc?4VHt0Zn$Z2gGho2iZ+14rXL&wi;ze&BI@9I
z8L*QHaYYPIZ6s)5_bJshFRLP;DFeFkI@Fogx`I78!yO1GIAf`&Vs-&qBLVvM&N7VX
zgr(*S-8+O-sBa!Z^mMNZ4SK(Qh!KQN<KcU1Y>Xfp^=IN-@ziRzkSYM;4C3deF%<gl
zLrAXsmKigMfaMe}$$g`awZZn-u~c(aHu44gVynBv+o^TQi=-vQ<#6B7cUA=A_u?O=
zalo^XH&+^gAYgxBCu%_R6vdD>1Ut0_Jx%Ui(MA)sQk*}y?$&JN%A|8d|IndV;k*?-
zx3+J!kiFV6I|i_hlVkP243=(vQX*(}u=XshSG9QYODCm`9;d5${f#M7Y3o;u5LsM>
zDgso}DoFL#<c#18u{#$XU8+Bfswpw*kDlsDQ)3*2K#g`#L!WY`a*YMIM~5=iH1v4l
z$2<yihhTc8`+-8qPkJ4#1LTT-6cnIem#-!pjg}O8+)@?d3@B{IoNPSrh9pafSYinn
z;<^qovh|9nb>B8XP$CVd@kXuPAE{p2wB@vy-V(m_*a`=&fv;A~u#MF2Tp(iFpma+m
zWiWRccbWOM2B6ydSh>hI3Dj%7leZty!LqVcNo&X_7x@4Ise2CTZ8LLwq5;O~I1hiz
zA5(Til(TG{KT=tZPejE9=DX_QD$S}Ii%0JsJO!g<U(DP{h}|K?0YoT&aNrhiCr1sY
zemyamPTl^W|Bh-wla)w25lY%%or0(K)8t(t2|FjK9FQ}zFrB54=ys9jJ&WBF!b98k
zMfdf?fI005a62#iUldN#kv)BOx=#p7tJ?^L;g2F^B}M6CkrtAofJkWc8dpY1M>Qtq
z?1e7_GoL;smH8^UpEr?O%{@?Zy!$=*QG5&I+b2)z)k?FusrDqRNCY2f+D8kK*2z+1
zKk*bkY29;wyw}}5E`7V`>)gguNDiAnlSrD<^hYwT&6)+5TC@Mc0GEy)(8Otr@LUyX
zFn{jwAfmHfU*pnA6TlC~uIY{n@ShnDFAD5y@%fhQ=1zY!*?cbb0mN6hhRU8tucv=B
z><T|3$lDZ^wGEBa68_O}4j+rE0Up$(uoC8@l$obSIc0j9!-b0|#YxDxQwvV@X3POC
zt!Zb)2j&{;T&3aYk}qmyw65ZcYp*&*w5C;@pVB2i(Fy8fGA)egq#*{;bNi^M23;?b
zjYa>eC%;LR{I_<WDt+hUt|w5^$Dj(AusI!WYY4u8=PPZ{lUsro`_K!U<^$88v##X(
z8IVdYH7z|i<D$bLzk~}RXQcc9t^d1h3PP*I?OV;^r~;so7R9z;_BTHrLi)hO3AKgl
zM3GfjX!_Za!1gaMusRt-nPLIv-sNsm-|Vf&2yF<LEMpWy*1?(^X~@pT*hWy>#~rLB
z*W7YDB}`XNaFjga+3}v?6mkq$K-Gbzax*5{k16zSbOS#g%RBC}507k6fR`-oTJCaG
z{`>^}^7U~!o;gcR4b`1J0(9(5o+L%&JBJ3t3rAM!d{QIubC)BIYqRld^_j}&Kc$=L
z3DqU?(~fs2R}rP`$O9ij%###@rHs>%6iIP#=Qtl#N`=ix(?7TB2QUxtt2J?#WBH?s
zm+GH3<&8Z>+FbGdQKI#0R#WDUWft3VK#*I|rlE4Ox#3!Q^^nG%fK`GoiixUDF7yg5
zSWaL2JZ+;9S^eVHkW9_E?fIS((Lb6Po+LPqUnbZGQXZ3euMWUNr0@hbYg!+&W7K5`
zCBqVI-D}Zy*ZI?VLtvYGyRc(@#JCB10+`MkwQ83;vQ+85-$tzY{3*MY?I1@6|C;@0
zJjU;gjmtM{Dv31J>fwNQDiU0%@WWZ?oQ~jT=1~<D<luTze1$Ps;Ig&qLdnd$)GbfW
z1@xG)Q`yAi{#huec`B<q_bmUQk@<YRp-QevW7qKDfdRO6fhU-`%n&d<`}h{RFJZNW
z?3`Z{3uE$zy#ezzUMdn51=~3VCJ4IBlwJJoj1cpgLrASN1ybF-F8rEvCZvo^6T)=P
zs-nOQp97f7K`mp%03EXTAw-1vY~rTI?UYA1yP95aiN5WBk-ib{-(h8KnHvhv9oKhu
za5!SI1PqgGnC$NSLH&C9$oA}flVFgg5!HYs;>IVrY>nHw5!6Q5k_X<Mqp0g7O0yLG
z$|`&T;|%R2Ocbd&Pd32K$k}-J9#QP)PwpCv4z<d|z#}1&;^bAQIme(Zt~dv!TQD*T
zAJ6;MN~M3oR<=m2HreKSO;knkHN@RciPqFvpvFwK4HE2!H_=eqq-D-dal3lktJ@p&
zyQMYdQLg0~7Zyd|dve2Lqe3jCrMAqECPjirRVTh2wa>%xJXr>$(+b$x{&;rxV`R|u
z=UE8qifRs<{-y%8@%1v1hx{3(T|kb3qYdBbICIa>mtqTx+&j5y2JhdFo2K{b?D0AK
z_#|m6MoHs~)&_pD)7`gN|Iu*sk2@g+Q58r(mC%`$1Q!O}2b2^^7K1;oC2N?!1iDe@
z(eI0>CpEF69veEo_w^^Y%Ufn(Q7FwjM2hjC(lKiNN|g7dv8sh537J(fkfndt=h%_<
zmqY=CG;QDzvf&M|LsuUSLbnQx4hlfT7cAv>>He++<FY^$1uQ^8Xc2#p{QXID!c6C7
zZ*U)!VOF1zglKQqR!HwLPSEK*_e`su8qmYHv;zCy^{DnB$P`h-t<SwgIi?hs)IKHu
zY@_J38di{Gtq%HkAVy2*Zbqzkpflr$f&ZmBu2<?|Y*L#Ygv^3>WB_k`h4ad_$<5vb
zjm6oskBmRR$}19{6)hh}C=HO2vq!VbY+?5LJ0-#KhOfKn=yIb(6(EHNrC|ZHGAs5w
zybLdjbh1kK9Lv)YFuB(GBFo}zX@{J}5IBfmRNG4Tp$BdN*q|jZxInR8=G~7>@iWh-
zPwL;WyggN|A1fB2<h~d(e=}aSR$H;_#3ic`$1o>xrY}B0&g~OIrV9E3{x>RZI|COQ
zBv*~=K1b09G?_;VP^^+|)jKuhWrrRboavPk=w=GfJ*}y^m+@t1!2R(Z=9CLlnjSxw
z8>~o$t!I_{F#J{9#vj(+eH-mz-itbV>0Mp;p1zRv?Be?d?;PaSST5wv*du?pOHx}G
zc4;O$&A`raH0a5E_Xx0eytzV^kuSl7=M)$uRxdIb?^J-ah9@upH;+QT6Xyk>d-{yK
z2MB9GwPX-8-IKj%qy-Ls==+Nn7ZV2kurQ6A!%}%WrZI6^=MjBcY;_=T8R1KKI>~z0
zU@o=2-T0;6ruXyP>}+U6l~8?5Tsvwv#b)42$;3><exR1R>Zq56tCAC;u41#n<du$U
zlP1?3KEreg=CD^LRGHQa;DNd905E`KJOxrkly)%$6OzU)k~sC0P!qr$!aofN0*_D2
z2oIHwUHhb4%Mr5SSTnu$+Bu;eV|jxacxE=EKk`bb4wDj^<$-s+(OkxdUX+_Kesf;j
zX&+|tIK<RyChii~^1wSg+J<IXHOhU(!{_s!4O5$)PCJxn$Pb{x8-<B-iTv%BJOy3-
z<1YRz=cQEMuw?8^Gk#+_7$q~&&gkPor<EQ&D@Wx5k;YcsR_=~VCnb8%BJ>Sc=n%EI
z5;#@t*oa%+;x0DqDHMM+xifHGdbZ`*f@F4W`MRm(#k}(V(fwsCxD3<Jg;=TD#Hk%`
z(j8QkqTMY(r!K>GO2BFu%TTu`p#u5JsW92NmdgFcsIKJV^09A)`s{Hb#U)!@m&e_w
z6~6c1OHeLQ_L}$huN)o~Lxd;Idv$+QB$|hGG2?<@<`~Dsr?sgWuOFEH*f@~VT4_#I
zp^2b}&PVzV#mU>WW!IIQ)ALk!mS`A8b1$6zeCD|_kYrn&W>4245{XW@TAv$Vv(=R#
zX(T~^T>3%iSZ;hRyXozx`bHr&Kfdz@NqMN9In!pS3-Qj9CHoeVe}*>(7t}~q8vFcF
zs=zWAVcvw*SylyusPn;+#HXr@ZblMxjTUPYX#XI5xH%uAd6?=fTKyjs0LezMpKy0J
z($-c80KLR>b<m>RL4YBCJqY!IY$a6FO5)y0!$XK2mKF|cfD!dQq0`0L^oNj%!9&Pa
zOVLfHEx~_FNtibDNg6cs43IG}^IO$RbZD%ypsKf!{b_9n`g{6dT5$@PKhp?;3gtW)
zkZ=I~n{e<C#(@vrf#YmCwGMQ1VOkskC3xpJDuZ}rgGQNq(&(sZl~VZIG<p$O*qC<5
zEbK%4uA8zhyrCF@COld5*DMrd@e#?J4dt&{?s(DqMnEBig{UNk&-bus>`~YQUp3+;
zIr|WDeYYJ(mH@v*qZ&0sNg5Ud&}n2HAlHmxAq#aF<4d{&O1GuF-;GN|F-=LWkG=RD
z)-i}%#=Z(iIKsM;JlIvnVU&f&DP@v+frF$)>rGgFa<Y+WPZ_G9qj_G7w?i)8ps)N8
z63ELley88>3woT2BJ-21ZYI)>JL2WS5wf7F12ZBuHCZ^ba385iih(m52f$j(;JT94
zi~%v7nb!z$2b$q}9ENBP{yYWiPaMgmEdx`Efy^blTnMhpY*5*UBzwadDI;o%bE_GX
zqb_Gq5tqN8GvZ#sOtk4Lri|La?96)C$tt@uK(yAG0EUhVa;)~SqM9uFnDzO_>R@jP
zjxeJL252}UTGL(H5x93J?USftU%gpZ$-2e4Z>R|DX7ob9(ya4YD-9PkIvMtEcU%M6
zA@#L|;kcT_lx10PeLO`PkXswr1^nlQ<oZ9jA-F4sm16mqW+$|=7XqOZ{G@u(ca-;N
z7nJZ$R8Pa>t~Rb}z=uG=7`fZ%OU~rRfBwd(-DaW-xwi8J_~h|JZ>(-!UvbG}HtAZm
zTbDZhXZpPNVV5**rlp`~^yeoGeQM^73|TB*8{Xb#VY1!Yw`@bd_Isi);8m>8&YW{H
zjD<NX1_FOwU+ZBv`RN_E`IAo_f2;bR{*WDTJ%sG3VWNa~<lTh!Z=FXB0!=5O^CH<0
zz<mX44kBHG2MDSE;cP#ETSEZox(@pBL&*N-->BK&w5{KWoY41QRIXUsH2{tI7iOkl
zwF-i9k+f?VbjQD4?L#(cUX=g6ZD8-fGRB5$BWQO2O5cqRPGG?F-GrEZ@Z95f`VKoN
z1?Ks2Q`>v)$R=?vj*azE49&bY^bi6|&F+=l7DBfBTm5IzW>StU3g+-u(`J<PwBM{B
zsvwvKyqe42206-$cPJnRcO+1VgoZx@*4$tqYw-iaKFj+U3CLfKVNaC&7MQ))DE51o
z{-y=}bC>>u7L-krqM4`R&Gu(NdH&wyNZSZOx}*Q)3y%T+i?H>8>Gx0w@P80?5h(1l
zAhQPeE$fZHWnK2~$mjQ||3#{}-?9d1*Rs*rzhun_!j=ku3fu4>!nRKSwPQ?7{D))_
zLAXVycZZM*Z)SujM@B)Sr8=bVPhtB{ZST5L@u-`i6;cM-XZzT{*k>Ey%CKD#LJs?j
z&@+i3XP_4VftAX?$e!!sRE~9;MHx|w_IdfYR7;4S|HcJfm!op*(kxI!@q-@Yze;7=
zKL1fF12`jq={H&bkEITpRwOLq99=pR8p{m^Ajd>$fa||0_Yly;1}ZmDbqF~K{EKY~
zL#peDXf87BbN<JIzXgS!AVhvc!@+h`0}>A*rvAR<9#|EOX#OMKcn7q{|BMxpTCqHT
zM?3%h2}VB(;4VTM5hD+t%Yf>O2*fS=fwZv;Nz;cA$`R{7rTm3r1^O9fIA&!7Ii@a1
z_Yk?KE(io*2vTqqD_~OHH)R1M-zdu?Qoa-beUF^(G5)y1+Z}&lZuWfGO3Y4-1jBr$
z6h196k7xH|X}aBTY2}!qS0KmTQTKBKT9(6l%?&+1U&BsFUSv92<C7R|FHIaq;w2p1
zV{LlQ@{b+JHxV?kgrdm};vc&odk2s6(7*D!5ClAIj7ptUyE?)5@zyKmUrfU<j(9G&
zD~*3{lKPgz21)CfR32`y7`2bYUqn@ZnxPmBn<kxhg{^L?g~@*XWMz=xl|9Mvb}P3m
z<PJGL&vq%ueNyre;^MmWA=Aj_dbmjD>@}Io^B>2Of2p!=%&N783UW6*xiF}EXX{QI
zr%i`EFf(fjnWO*Q26-yPNevDpu7BMbol7P4FuqL^G!-uGnOBtvDFxV*UTv^-oxaa`
zY*Qm~)T-6`WNoodkuBNKQ!&7if{5pCnDQLpl;F|Bq)_o%UBAxhr+(tpr?j674~9mC
z$hhLamCZEX%ZnIZ(8$03DVf_}CuNc&EJ>jg(C<n<s{OUh@$v25lO3r646}l}ZE|Nj
zcw$3y#slmXd`0ba`FnRO3R)98lO7$TbC!P8LeIr0q&z>X38UNy$oQ&tb`Y*)jAgMY
zn=?^PUb%lqy4gOErIyVr_=u^U(MPA$i93~_y{lFFCcuiOi|YHaK$(yh%*<SXY$6HM
z;XbL>@1sFD3qSUAY-((&TYb`XVBDa8qGT;8q&}y(B85eCoYEw<Aj^<mr%y1%mn6n%
zogq%NMa1#!i6pEtz)vh6dBf=*`#@&-yJ-BY%xJh*^GA7xZ~JFV8Aacwmt&wUA2Hqg
z4vX(&jv{+QC6MXPERLH%lMu)!1Q&`P7$3xd0gcsk&%f8dClkqHOw@dvX|n_GKmP{<
z9*+MAc#MDB!lb`#Veu}N55(LqMiSQ#V)qj_5<XCkkTXVtKn~lAd;@GJr4|=~DHwHu
z7s*jCSoQ~mP7Xj9<rSo#FJ{Hgw<Di=C4cp83)bbL+vrUp8F%!b2>xklBD-RF&m-?s
zLsY4U(yIg^DR<Ea_D*&8uQH}^y?9}xuHTB{32-+gaa~5Yl`SN)5@>Jk?_@de46X+T
z+z9^Z>~<uU4lqzfUbzgrZVVU5@r=KF@f)M}ixutXD!vYUYqrxVb2pj7jAz&R-R&=W
z$mx){aHF<Q4)WZ^4dN70JArS%^4_<V%F|cHt{>|SG9PY~r0Vs{`g~DZ=LV`3w+2n~
zW!_&)G9|s^`D5d!N2mAOqkCR&@r?;Fld7lOM2hz%@zH?H?3*W~63A0JTYQ+jZ+CrE
z!zphC+QQP~k@42n$Dw(dg(#+cgb%r8XN63lTnW(}2r<W-Fg2&jYBIi8D*Jv`7S8TU
z%-cP8e#lpBFd-Vw73Oh`Z%^Ab!g*SXmYP^^bQEZ>yongdI;h?<+r(`5`FYJ#5$@E)
z-aDXe17gVo_+6^h1oSS+ss+QiY~5BCPR%-vu4gSHw;#9gQ!mK$aws<8bS2E+&ol9(
zW6{E;SWK3YQ25@8ycO87-uzN`knZDE5}>^n;#f4|eyc?}h3QRU)Gt?iGbIsu1JU%&
z?+Q&^$y)QQ=Ubr<k`5s&`BE`;h}E~*_f!^LN{29ZhHv3;;>ccoS*Tf9BPU4uG(iX>
z`k<VM3jwgEy0n(DB1JgIU03U~xxTp_V(O2qRCbm7W#+#WeD?B^Ch2ox(w?T<woWT@
zFnvd?Q{)h1mOwSMO=JD|s9V;VL9`j`C`=r=dhP7F`lk|O*}YLx=Yj0;WJ)b_Y`RH@
zN!h%!|L&@$&-)n37^MAE5u~9G0yxN~9-qNPO>wR&Vz}IK)+f`vB=sE8)s!2X3aaLO
zEMdp7lbUQg{Ux+M3|kqEgBnPx4S(#Ej>onH5!O<UR5^T4RTU2y$`J58r>(kvRlx3_
ze%dlELUdrNmB+Zm(D!8OfJ9xeBddH{_8&Q#p6y=gke>Hn#_#~HX)1ERaCPhua)SSB
z3BE^JgN>tQW~@Z!DW3m@pJQ#7Z<cucDgKb>f(ELarwW1N|2#QCA0su6aRAGJlMEo4
zbpqN<6X|aV^euJAEjhC;L`#c|nZ$q8T;j-mIA)5Ul8?{XTDf|bU)POXtCQGbFFB<6
zv;18nkZ4w)IwJcJto%RW=!%3nwd+@u7XL|)mfF&|WrwLWdjY2H9KUm!mCbg{btTxI
zBESTeKtymLJ*tlpJK91sulOB|)%*^|*vJabG>gPiutR1bSPv0F$sLqn=J|FHA={My
zC8Pj;Gurc{IuOcavkqPiSJ^g-W$&rYl9u3?4dFM5X-azm4N37|o$2=O>&a{2Dy))2
z+{vV}5GC@9{3SlK$OW9(kc`+X200{)?lG~d$Ko2^&nCkZXzcbOHwU*_AHvy9d{4fC
zyZkb?$>8^?tADlSnyP@lXP|mVn4>z&5Cy0YXg;9m8x~n-#LCGw3rh1pJ9zUL$9oH&
zX|LN7o^bU&kHI&`b00g@lvJK$Jl46C%R)wL!$*yS35KSbo{pDqq?QR53~A5PHm(lT
zYnjopdFrk}$I{yR1DvpTKat(Vl%HD5%r~=Yr@LrZ$E<#UNi94O$OsOZj)8pk!efE>
zbZoSZVb#F8^kW{pk~(@QvwXMK_3=?cSjy%RkI<wz`rI@4sx3Co5L=>u;?{)ZhGDrV
zNiQGn_R7SA<ArezPuC`vU!wEp4+CaQ*Nx7&A(ewK+XVks-d8`#mhPdly~f`fe>7C%
z^yI|a<}X^DxD=>zaqh9!OUqWEW~~AU6u|M&7*%4OJ>mH->n8%)1D|SK1N_^X_wKq-
zcwwy!X87`4Qe_AJluG2IT3Qp*dSh1S0ZY4vZf$skp`!;%>c*Lkdw#M<kC*G{kah{&
z-gyV_XLZvxqWN!b5FS;bZ!sSv^VUwzL_Mr}lS_AXY6BT|DHs}?jgCMQ3-N$yMP6;>
zDqNa?=zTozUJ(9Pla~`@fxM1GGNt~p+{;u^Me5jT7}R2)FyYcVK7@W)cO$4(SIB8G
z%1hWGPD)?=Rq631<)Di>EN7J932A&D^Mmpx0)9JV9wMIxJgo8aZ^}E~NM3}fGon3W
znoOSrr7!ye0wIROTJ-u}GY7y0mk?ivD_=5)8uMA)1y+}Y-bjpXtZK{7)(W(DDGcrv
zCPF=6LT=#pR5CHsCfc<p7THwqq`r4eopF5QvyO%fi?Y55VieBoNHn*P&qoYRS~X)i
z0@63H*C$|`YNHF?Pi{O&Hkcdn7p6lv#xr-m(z^fibQ|Ph2ro`ceHqLUxP35SthefO
zK(~6<xIQ>oVnTDgHz%;ERx0G9@+Iw)ElbfQ?o-v4+4#tf)ZtkZzUw&2=z_1`cf}^?
z*h5>~g>5Xto(ohR6|EVHBw)RmqKC0}iSg}7&qj-JjR_v4sZ;Q6t)SKBA{FRGtjGne
zdY>(`(fxIEvS3-jGO*IT%NLp%_0jl5;CTm`@igU~4Qh+a#*p>=O=QQn)>ljr0j3Dh
z-#sA}JPU-Mjr0w5f07<vt)gQ2#HOx+wWOWrjs<;{V$gkl?OUIFz25FLvNe!@X7ekm
zqFu|dFBgK}pdbV9RAK5f4pHAq&nUOntd=tH$g6rnO0maj6M&VyEO93zP$=A?-{y9D
zzmN!x*gR~alsu`3q-IM4m!oaS`H)Aap7DTiAR_~uWyCFwck<Myjn(Na7Zw%P3wxYW
zpE-wUW~qJ@S!M4Rk|zVcF`XxMSRTA<@R**88r90qUrzO_ducVCE>`o(I=0#`Vg8&6
zC2Yg+u1ybK7m#HtDkRrlCvW40PLuH)J-)GO7Y6dG2gEiA{ThZ2iFY^B$BwLZ2D8-1
zw_<W;`?lCd>szzVlQZ8f_RO5#`U1T<JlSkhA6o$5dg3cF)X@d;KL4D(P&j(fw+VXn
zCewHIh<eg!yL*&Rrq-Pa#_<}2Z+>lx)ERh8^)HQNJJt8!i^abgf7HAq6z!iaBp0GB
z6tU{zDW@2CZty|<5YLH##{PJCz;G|~D~BW}<J)_Brwt67n4p$OBMmX|_{$04ixAP^
zEQm?{j^I|Zz)a)!5g5j`e;t9@0-A&|^HM_p`a2Ao6C?3HjQOtyO@>87H{!q(vbYl<
zL(%HLj=<>S&8WGet=ZenAO!DvXPvBAPrJo7GezOu7Md3XAi%wpIgDV)xmi|kyinve
z8*4S-*snODXBFf8fD7m7K#_lSj3zw(>gpMkHA<SiLMpsVw!vfBmiA2}l|O4$SBi8j
z1m4VLd62nNar(@D-%;@<n?p!UIwq!Ej3kz3Stt0VN|AoKYg8knC~8hMG5pSB!l>SS
zljcGLO^z2p{OEW0ldSP7i&L&TGifJ3_5F*NbgnQH{e_Lz8?l@80S>*_C%F%5HNhz8
zxKqw(TKI?$Wo*o6pltFMSM&*e_-Cu#z+}5k1$Hy$NMd~<VjOV^L+mLp0b}%j1HwX>
ztx^03l?={5w0^`lTFF$23Qgj}WG2Ynv%YJngEXLUsqUq6se|JX>T%hfR*#(<^IR#L
zyuQPFmp2j`ENud^XPH{Cr>$GWkoIy>ax&5~rSmnht2@g-X!|qw^rky2{wUfrOhTlv
zU}`7PsDOlEJB8+_Hm)@r*i#eT=Qhuu;DQUK=6f}yKDiTt(6R2LjqMM=bL+Pz^B8x&
zt5pI1pxm2)^OeStx+$2{5dB@~m^B1P?g=ENcef|2ggZr21kqA1r_@7KSUv_y^lKfz
z74fRBqW8AM*K(cfq;&#^_b(IWNHIs0EDyg`b&Xxc!7Ih!JQl>A?5A-oHF{6zun$NM
zJJrKrdA7#*4)GwfEpC{n))K2UaILF9uN<H~7`<vfzj_2X#g=bNE}_`C39%3!KT2#;
zugO1nm&a;-KAL#dZt}77{MScXRu=MNScj_ugoqMS??&4icR_8!F#QjG-@?(oT~GT5
zo5gQgbFP1tVx7QVs0$Vnpc)J{(%Tw3=S}F(5)?WU3{cZCs;GO-^J%W55VlXx`rZL&
zuDD~BFk?Xbq!`%)<TaT+TT{&FHlO?2Z+pJEM`7ej^IOS}mlM-o1!@Mxtc5U8Zcn)Z
zCwvLFEc(_Oho=8{pJ;P_hqlG;d@=mYov6Jx3`rf<kXEueUMMj=v5oB{DpqFeKt<c}
z)$--Bkq${MKHW3OCoY}z%BPP!)xAxU)T*Lrj|5B#fpo5lp4?8jx0+7jwO`*^B@#r&
zUYB!S*KT=~%*Ktt?GTVxP0z6**bd5NLv9hVty$6;E#Al{ru=ljka4EB=m^MZQ*pWs
z<S{cbIvP^OO#E2M%zC1FTC^<E&P<pt1c@;7Iiu0SVZs!#MP927eXrp%Y}X+kaFZXJ
z;I4-(cjrT%zZn8dk)2Dl-&6Ja;GTIK9%V|$E~H?IBH!||zcMc#LfkMsOEj&6!bXvm
zbd%;u*C1>(ntw%Yko`i0agpF@=d9Z=uw{XSe;zM|Sivcp<XbIT%H)ZeQ1N!_elpOE
z8;!f{mLBWOlR6)<JALXa_Nsf-`!KDzgQ@}#z(#ifXF^JAxz`~2{=3H(z!LCq4R7`_
z*Y{29EAcm?jQn#>(xw`gY|qi_k$#5nODo0>a*fdevU#5(=NkhZ<Qk}j2R76fqHkkJ
zd=d;8a?6Lsx@X}HP_Kt|TGJxvyCL--elmQ{j=TRhsdM@R!ItqaJ`l_V(L5<K3}~HJ
z!bB;q$7S&nW#eVYd}~Smir{<K*Cz5~o>s_rl_xCo26TQ?6~KM3zR6SxG&@db>fqt=
zXc?^mv;GE+P&{wLz~gcP6&GtF|GoLhY3L=rI0w-}>#|uWZ-6QE_=Nrgxcm9G;cREd
zPtixo0@shURW>*t92YNl@07>^{yf+W#>tlxM?{-2JIBE)BUl5Qg1rw)qo$j^fUa_Q
zfU)!<J(d8b$r8h0tb-bZfd|(ksb@f#>Z1NIuxbjPX8)07l|~!N-iWtZ->0EL-qMHv
z;w?b{3vT|g4ylMomX6b$Uw&6ha$POU0aBIC*jn8D@i<4-j<auX(OORSG~Ngfa=71d
z1CW($<D%2`alg*sQC3HII?Ex)5|ou`YNoZds95iQzgw_DLhRvpo=YmH2D81bByyPj
z)lJIA*3u^@Eoal>F3%?62GE8wZ&f6l4RT+}zdrX``S!Mu&XT2qF654h{Dd$^Spy(-
zdRpQtmsdizsT3DgmPiS(Hep#(_Q>neu<d;8a4=q}nB|~wa_(~{)_O^z2XZUJ0R72T
zv)d++Z<_9$OVcJ~DNC*6i`o_?&|{S6IZt>5pL|ZyenMur_4_c1&Ug2^>wPmzJednG
zU;JkOqR?~lHR}DnZ*gVLZe7@gkC)|6eLsXuYWnW3Sh?gd7c}!c-n;x3`SDf){befh
z>TP2{ub+_TGEznu$@S>E;V^$i{tBys^g9m1hQrtZzkYw=`!Gqs!TMxsYRkeDtq8G;
zGHu*itnLoD5$-W_>*DyF-qFqFP`4f~I*Sz}G`LQ7@FU}ld$X)x=T5rmS0_A(Oi;GV
ze{%aQoB3AJVh;1iCBGfwvDw;iQ9*78I(<(d+o%If*&K5YA@^afz=$7aWb|#%m2rM8
zn@Feewl7bE7V0D==%ao}lWJG}C?ORb2YvHQx=VdQx2HySz|%u6AyFZz{5OJ+_FuW&
zUuu4p%SOAx3tdXM`}p_^=7S%7K1&207r)16tb2!2^;o7`F_#68&myfp<S-K+c+MV0
zM%{S~IQ=eu#r6HB(lKpb0pluxLkNg?j;{RkusG%nc$k^S44!fonnM5j7jiHEk3qo{
zRRnf_mjETb&?mwoEjd28^%FMB`5nLH-FKW%!Gv>bi|sQng!s-#CDM_{?)I&vtI1Z|
zjFdV(qLh*V4N(q4iqbY}m47zzWg`y}9=R3R;94F4>o_ZhduQkQs1Gs3KOz?O5S;*5
z^AoM@IVYM~tnRF3L+buI$vX^nheuypQm>vA8JHO=Uz3UZ5gIkog}Wi>^*Ld1+*G@p
zarR6O8{_*gNE%mU#KXZgnT26do2dKu_)h1s@?CBKTujBpU$Hx%#s-n<{!Dcx*P`<b
zQ7g)Rmq|)<o%E;rc!b%0-7c|eI)r$dal4k~cl>fQ_U5-P=o_17VU9b?1`;N855QQ<
zX#%?AHN0L8kWCw)c#mMC!TbTG6RcVnQ%dKeDnCn4(=%MOzvABMz6u+CkFy}hQxwQZ
zpnZy4^VEAXFaA;1#W2^ZdrQ&z<10(**z+@~jP2W&%rsY_fLU?hfc8WptYue=zN#?;
zMB<~Xldf&vJCkzvxY%n2wq0}c3S4$`m}W%GAjv)+q+aeu!%O`t%c|F+k;%7DRsR})
zSh@ITK?8N0tWQy@O{59I0x-5D9v}^bqL2TaypUeI`(Z<gFmMsLa2l5;nd>bOmJ_#e
zRm%$I9deXpk1nS*Ls@;Y>B&MZ2<5>oC?A*x5tH;kxc->xbY%Q)4J5a#;8pY3zq5Rr
z?QRm)3=1(Yx7N*H;Z6N$ryt7NfaUV%c+NSa!!E$kdu+~m_=8p7lz<j15CX*<<RQde
zwRnd-R(<SLT3L_A;GYbausgfHQXz>P@zoOwKE85qlgdamEh_I|&H8e_tZpsUTXXT=
zIafcu|Esh&4}|Lf{>R6QqLL|PU#22tP1(26g5)JzQCTKbvS;7tCZTLoCWIJeOG2_%
zGIj~czVBqujAab7^nI#VukHJOe?GtE4^4CL^FHU^=Y2lU^PI;y=W)i?j`|KE2bgZ}
zh571p^ih8&l%xhbXSF%Iir~CFJB52>loFp`6ld43rEI#W8$PP$XatU?=U4HFH;N(9
z;{H=V!HiP;*%IJU=YBBOMq%9ceu%?LD5f}aPs#=j`VokL{1J$t@Mj=G1)c<ejmHis
zteY_}6mxzu(2Zy%!$gj4G>GkbGjev7@4?L#8_kTpX%Bsn%7fKaqEF4NEk>izT(flb
zin8R3VdkMF*XH&=s(4;CeYxQDsVTwkQm+1&IQ)A|!djH$YB_z`LlXVP>cEb;5}Cvc
z9qhaK+*mIz9Y#AHKlJEJh-nEFEr|G%G@S2h<P0qz(u?#HGJV+c>eX22B{gSbkEJVu
zoV2H&5F0sZ)$q~OyBM1ht@myMX?Awb>9i~x1H5{xYe9|W4&!=st)SeXXK~pS{o7IP
zXfuMDHM!T)^+khe_(_z^3gxpuWbU@{)@1V$7%CpMljFIWVXLNPVfKf)#6xvucyw;p
zGD6QT53V#COK>6v^fZG`IZrv>zl3T|vgVVMEqnatcHgx3>&^0dr}<GPs$%}Uf{)o%
zi<1`iL>*SPVIv_gPeHOc5_Oep3?FXGwTFZl9@d(A$EE7M*mql%J?*!k(1X*#h8tbU
zW%1)jBi-9UK#sG|L_^4Ua+B1uOuXv-sr?Z5-IL0;W!$jqGyYL)P4$-yVk)_u<z2Zh
z>V)amzgdj#kIKGzfcx|E$f3rZ7wgbne}e~sS8^N%?iTlQeHpCgIWt{S9@-LdDO|N|
zY=#!PmNoYs22+#Cn3o+omA&NXXY48Hc#u8kwD4f3n{1YWNwIO%ZHuJ09`*rO2c0+W
zL8-@@htH4ryhYR@F#hn`t}f1bd*O=0QpLS4g|8(Q)Pj9%`6AK*O^t(YrMj=_=hm#`
zi!0-oM|7kP1aq4lc{p^tKjKtKlXy_hyV0sVc%9YpF8S#5$}+rLa*-c>G%g0%#;RBQ
zyGRJJl9;-ZFjXj4hhFxQ2HZQ<;6w3JOVIQu%PIGk4|{gTpN2a(6wrdj3j9gkxvn=n
zKXBs*Hj_Js6)BDONWs8k`Q)r#?XsT3&c+m<IEPP7#|H7r#taCzt?w}J_h)%HKFy7?
zcnXL%K!ZIb8v)&-N-Y=R&)?E36&2JKdFLMzEqrmdEgwRcoL!w;3G|+}!K)h`!#l%`
zv^avl{PH9~>rnM!;7O1`{)SwL|7C{WRO-F{E0b=dfGm6tWYXCISAzR5R|4~U+}zox
z5#*Ef-Oj|p2Grh4jk$PU<_BJRf(`n+c}Di=#YZSS9I`lO!!UpPMOzxjY8h3&u?{#!
z1uH-lOz<*Yp2Xw2W1<i$7P^1$`Qy07Z-L&{4cvi8?G2v_4_W5FLO((eK<p)$d&nZ_
zzM9T6i@f~otfrfUa~}oJj^##=bH>6<#e*Kq`sJIG^l6o9s+6<lgL5hg*fjF{TRU4v
zHx$F)Yc>|-*RHY+-jPD3R!RbB!Dq5{=cHaw#gzhwB<G${m4UC&(o~G)D*^Y6vGK=<
z7aR@MZbx4&NdDg5#J5w&q~vkTDds|sb#5!h@UCf{{YRISlZ`DoVv8#07l;}j`x`p9
zI`XtM^n@q2-haz0Dnj0tEj;#?f*(gQ(Ldq|CIL8jG6WCQPBL#6JW|$kH$I8s%bq*R
zUf*F(fwkpMQ$gL&poMs}aEH`#F(o%(K{bQDT8({|P@I9bDgVA8Ewoqib@J27f}%Pp
z75Sny=-I}mm0NgY=gjl<`P79eNCdwhygKew5%8`QfV;Z@s?Ho;c>=Kk7#9zG|6=o)
zI%rc{^Z|Y$I-A~+JNnNY##Q)5I#eXlqM=6bd?&NGE+_Ho>S#;vZNHwH;WP3L{YFQ3
ztJ~_ZD^g&o-E->=)C*+Ganu7d|KC$Zii+MP>&Lpj<{3I>8ZQ!|S+V-0@2(hQ3?X5u
zU<~4&zdiRZXr(pJ$|b(@0;?J&+4_*t?GL2~HLfj}mIN|T%mdXyPO&NkpM}sOMHM~L
zdC^m*I5~GUO-4K`Lj#XN`JpcKLGnq$=y)70zc4dDAuBI6ktFuXQY?ItC^9suq-x~$
z{`J8?WwI_|rn*wZ(y^A<H#jW+^0EZ*LcdSpl;5qXCcFP-bgkNMSa<`XR56%}7<XL~
z>E^uouH;>LXPRt<eh&9xKPb^wQu$LupSsdZD;`>@8sE#otCg8vv`6x*9CvrZ<-!H6
zCI(G*r?+Ba-Bx#Fjc5<)d=6Ymfj;qhZX~7a#c#@zXo<Gb9a^%_4}1~sfH7;Xm)TRq
z$(*03^aaCrH%&FcR53#j&vK)WaDRs_C&3EGfyRcct`zSqD3J6Dg_3$N+%on1on1Wm
zq<CFb-1OzwwQR~SOQ8~jJIk(zBh>vxD5ta{3`9;Hj9QF%iE!C-;D{S;BHy(JQCOJ_
z6apsS+B4y%6|tlB5A$#>X?dY<(zId@5AJ#D&u^RQVuAihXRZjg#Tq0#)E+$d;P%Hy
za%ii5qf<3aloxdCwoi~4qj4=Mf`HE6`BuKNxaiDyag4sUR+xV2gywG6rKyKiW7k(C
zQVa(5s+=c6vYT^sUH6>&dbG3pkT%xy<(Efg5{FiBAx(`OFOWB7Sm$ti<qKHnj<;qF
zEYuwK5<hp<O!nR-RZP%}o%WB=P3RrGC;D46XgOz7J(}fOI+|scjgh{sPZL`5J?3xy
zCPFLJ5U7<|uFw*w?DBcs>MCh7B%1iX<tX~JT8@$uCF_+QMW1YDLKX^|T-sw;)+?ua
z!sK&=5x>*KDV`mD)|$3WY79v+Sas{eP(ug-Xg>l3xm3Qe4qdq`zlD`1ojD?q&wo3p
zYHQ+-8gOFa%VvVTp6BGDM8iarNKzWzGDr84`mK~kH?G4IA^$syXC6AHMUvXdH`|Bs
z)T92s=193ASym<ubLXH&e(Q3omOVM0bd7+DtT-i@<Coq@njHcm2nkQMA1y&ulP-N<
zYyr=MD2b2kGT_sHz5Q#_XsaVeS})<+4P=AgbhwSb;m+yCCA~2|*PXY}M<Djg`H>U4
zOe$WZBC6rStZXV%!58z8PKa=yB6GkmmA)!15XX@g#~pgfrcYeM@>RC_aSzi91BwJ$
zrs1k+_!>=5KlW>H?G*|;PakA^)SwOX;nT61@+=4Z8%*%J9p-b#<%W=*vM0rLDLA38
z0z{sAm|+*v1rf??Vfw~kQeQ-AIbWlB52uqFUZ%OTpauUVmwt@)qC#pM+B4@rX`%0y
zF<)QDuCr(JjdQHh%A>gEy&cj9-2AH-m+-(56|Uk}!dZz3YZ(}l?|`^3=Uc{IDw=1}
z`bgsFAV-e*gaw*Bx8DjH!Mz*QeekT9W%~EsEm601DsDl$VV{Y1OY-9gMshqwuiI7n
z)i+6@2s4om9W(Z0Ze_QG$4`mI$Xb4m%c;(@@7aidBiXZI^y<;M4+7^t$~X9KkbDXF
zx@fKZ632iXX<oVeO#;nOL!H=-MgKUPj16XvetQ-D$_Lrz{R0iJ2L~Do&qlU$Xv5O>
zYzMJGEXWc#^=WS%oWdgyryYyMJ0ZvJgV?4=i2hZ2g%_MAJK8$|Eorz>^r@NvE5ZVm
zz9UhB)J$i=0=xeJ4F@gMf@2^63kIEHo|b!cTZw}RDN;EQlRA-TZt_MAi7r6o%u7Gx
zWh)t*nNoZ9&1)>|AzYMWW#-qONd0q9wA*P@Sbl5b*r#K9>G%KyBGJto!F=D>ue$VI
zuJ_w5SBi=6pb^=Jz*x`w72`&-G|?{tp5Fn!=G)pz*G>u6UF%Jte;g%1hQoU%%lg-l
z`{gTxCmI;`?{O~a;-e?ZQu3jhWMDUXmMM`X>QKem80wXD3;TiW$aM;ZuWn`LZa{<Y
zG)kLkEMkHqLP3Ygon;ASbZ<;aQZmQp`rBpSCeQX;%kNe+>^K@aeV_EC;f}tVAo(w6
zwa}{Bje~K3rvuf0fDY}peBsMFK!zGuEF1>JCzQM_c%)x7Y6>rl!%>yWlp%(VvM{Pq
zHo5s!X*a<AoX;41FcRk4rxdGf*0p~#fS0<e*yN@hbm9DhPLVm1tYMBzyK&_+0%4FE
z+3k|LKxa;*_JcL715F*KSV4e%NahFmkQBNVs@BF&K|<R{Cx0FF(|NU>*spsqk2T^`
z%d6}|A$Rx63}mcUw8>VqOqHT-f;_B32>~P%;!NYP$ULRSpLf2r)cyWV56IcI<l{%~
zcr8%^M>x@A9R5IKhws;gS`EpLo9$lBaxuDjM?Jl@yx79U&TYm8bE~tYv6+8%f@VDI
zdgTWG;LFPlGc8NBQn-FY8So{-3tzk(Ny!>=RJo@R|GLS|%Y8!Zd9<Ed)CCyKOZW@Z
zK<|Tfnf)IzFC4fALbQ)Zd#Ikj=)bpa;)UPxd)4ICg45(CiVS&mY;SZ*Z={;4SNb68
zoOOh0ymH(PMyUf&`YYaQPBlPe>o$I~lrK!N=Q}FD-n_XkDw6&Ob(T0iZbD)S)<oi4
zXhy1g>rMUMz8N{|{piu6L#V%E4W{2<0^R^pq%0jqxCpIZ^Rfp%TA!4BR44LyZ-dyq
zs4RQgkT>eBca=csMar_P$-G~Bt1VT3t|zm+EVjoxM(fs8bi^Czb?q_!eL8ukG}(0}
zejiLpOwQ76)dAd5X0!2yAgU@9B;Nfn-c+bd1?}o~bbWX=L}CUe+khv7BMEp#fVl?s
zu4k`Cd_dA!!K;3pzJMf&T0yfPb6X$>{HAu$wz>Bmrj*<HN8mYt;eG|4=N#Cr(*75j
z!}hxuxP?6xdEiIf*F_6a2*AE~wV+R?8ca~Hl+KT^HuSC`=%c&A);DNPoVI;lXZt)O
z$WoBf+is8o3u*$Oiwg)7i|c?EEr5glyi4x%JKA$1qSk<o{AtsrB$`>LTRQy|d$W%n
ze~0*Q=L}miCWW7RHp!o*G7>I8QwD@a`kq7IVbFxc8Y?b(GPvf<-o<1$(+|Cy2!^EF
z*NMJ~HXLUkr!3jg?ItZbwonvwpa9|91Bw_qX;Oz!iE+-6=oe<c(x=5gm_*u96KC0f
z=uvR5(z4Yl$`P<0PKb03bk?EvkH?OTK5$;s9K4P#S7dTerzc{PDRtL!wkl-!tR1Y6
zLJ_atIt`rPaL!1@LC-a8_tz-Bu!-lzetoC^{)+H$2?fJWi^toH9z=JlBn_R8&hT~N
z8gzTv#xu}2|FA&Nmd0W<6mkdBL+_#<_(K0JP@|OaHAJAMZxAb_wvs5Eq)qwUm?qk;
z$@rS1<JN#yLHODWr$y(nqLR{6{Dzu$l}=0;Rb4WwV*GMx;&}IFR#4sLsL$E>Z`IBm
zo0W?+KB4g~9#2<+>l@JX6=W=QAHNbMgSEcM33=&E$WYVw)Qzq;{3owg;N}|hdZLvZ
zF=0%FYToVq4PPQsxUxn`QT}rFjkSn{-vivc$u2K`v-IA0`WFozqS<}XPV<_DR}$Kv
zyf}-yds?NPm|nW%?dPLgWnrenE*&p+dWG&}`P9NtgCUDn>S7>~OpRyxD1En_t4E)$
zJik0y$}l5oYZdv{PJE<1*S}y<Ad?(^wxXo6R~~+1zFW#z&+~HSCyro|;~H}}_|RcR
zqGUg!CM_MS=pe#SiM4W&R`#P|7WXw1MfHhV8_^}rOJ@uoo_lm%%k^=Tu$|2q`|(|E
zSGPo%ZjE1hRQBc$PhoUpPvz|{G=ge?t#>%iFp4EPoZRET&arBhP5{iNL0CCQX@+vF
zt)o1H1@@Wa0qko>Ch&KN0fB9Il!sUfsFFAqfMusSjc&=AHI`8HCtSn*;Zf6JmbPa*
zysjKJF8nZ^;URZz_0DB}c;-#aoyuK8^t0b#tRMj)A5K3~NjW-sdF=M1+5nLu|IyDh
z%-z;<4c`_(di4Cfr6lF(5Y_QH-WchG46)*9$KQl_EbZxBfb!vRXJ746s1kS3J^jY*
zOL6Y-j!F+22sau_+!#@y$lR|yq~n$~CwZneW2({1Qzhis0z2XxZI#}}MDvD6-!8cw
zTi0t*>J27szxw_aa{m6h+Wq|UTrC41mafMw<xC=rWEMjw3I<$(RCwTo?BC*tzgaL%
zfj{DUnf4tPA8Sk2`8^7XW8$SrlNkw&XJ}8=b_j-~(Q=-R&KRhzaK%m-!=!bFtzg`S
zFvect^-6w1E9Rc3p0lc6QQ7Ol;!_6|NW}Y-4|HxARpkkWWG|qSW~jRNTjsA&UYpBw
zSH7ab504Khd%9MPEU#JVteyeFf?K(gR)G97i75sT*&)Z$kwgjw_1C5)5IDDXY8%vj
zgRU23ifn{<o+V#Qnn19UO*<y*{QF~0zbz?_YFVJKIuEGpF<j{lxkAgYlq6@@4P<5R
zt$gNp7@soD6C>}(DHnD9&WqqUoog>8A_<tfAjhhKn<aLcqxyEP6A~x0=Xc|v6(Yk8
zoAACkj>H?e7MBNxYFSrwI3`$TE;;SGc>Efi%ECxCWX|vnAlbhoD&!rFuFP>I<;uZ*
zQ_c2a84^#&Rv|yhrYf)JyH3DscWEH{%v*ZfNBuhW7>kcl$`b`1=Qz!{4L;qcq&|Ou
z7+&X`mXD+5xRE@oOmHchr=JW%y?mFW{7upCCqJ0i^~es6qV&C3-FZ$cPx^f}Uuc>c
zxg&cEY*Z3G-(l7`w)v4`wAX09zFGJF+FbpD0X}=_&Oq@AP50&@x6TiKN9}!W>juK_
zQqS1t+M6ZtqBFBv$~eo8R|27U;nHK$p$Hg-kA&$_<03ke6v?440%f3(dQKH-EOF<c
zS??tA=*RL@KT*9W&IA3A_r7F(^DVked55lTac_$;RbX{ZUt^{1V$9@H4`E2onIWo9
z_({!9caJbrD)R?N>MdG9MG$eO_Vz6ONDrs8v?{K&$=TT@zJ1tY45MLq#}&&I-P$Hn
z{(*0Tvt+#2<VKFA`QjbOT)Kx+7%t5<%Z*)6+lxR1ioPR5*Q8yf^S*}J$4i+0{vDRN
zH{)aTV$^R44~x)S4(P*`-HTGrF8NvIVRa`4(@RbFHG0_2`@P!w8Sb@E(7)Q4x`$j%
zpo}fwTUIlgfU}T6Q0w9HSXFgZeaC0{dlJ(;efurFEf{%DLznlL**#;Py1LdD3V1SH
zqbpg-Cl<~UMxHrm)w&6Nl#cB{mTFp_#wW<~bspAKl4BU4caE|x(q+*@I3B)QMNaQ`
zlIRm%UxT-5Inw9Z4?W!9P(PF%(@_2vX}9-uO^3ZqL7o%3R!yNSS6p#RxX5{>i*`yl
zH4<ZdvU*NK1nQDI_D#5`0w@bBqIbQutK$&M$JTe|&qMo5mK>K54&4R$8eMw&m8Szc
zyszU><+zQHX?rmofuewj9I4ZNw6e=KhNAaYPg&~h6}T*{!eO)e*y_%zDv56r5Av4u
zCfG{y=T2T8cHrXTEc(1*tUaST?alfvs0oH$x-17Xlb+22ECV9Jf9M}d3#<8ftrE<p
zoWTyLPY{Ij*&FV_4CK;{aNDtQJ=kg=4z>bW8c;~4dAUF^9L*m4%;z8@2!8ul(!igI
zbl7e6;u}yOv_Y)+PyIpQ4+VqeZwkhb7Ew^ODSBJO_}L-_25DXdy2=^1-Jjosw3frK
zwf&e6(U}-cz`<=L1`@{a!%uT-i2V<MkHMxk7jFb|A?`mQJ}`RGf4yxGhX3!phiwg;
z9hyFZEE=WxZnLsf7Sy%<i<PAmM>soz90U0XzZ&5IRkS#uiDtPGe1i`>#i6mN6*iqI
zznnW&zt~&tfYeV%5NZFAg6Pi>(A|-f6cTW*f~bAej|@+hAG5rN(0I?wfY;K%HKT9H
z;lR~FJwNf&$w^8!r&rEF{g;@qeY=|q@{nW6U{3eeeuwoZoG0@6E}ZIEZ|FJ_B;A2n
zd>lJxT@h97C1D}xEqt_)OWWpTgX0VotszoIgzB9G42vw~A*ZhuUZpBQcl!p_bXSCg
z_tXW%osyW>hq-(H@d6GSS$&|e1S)o-rRjYT8&&ny=`t0ooV>wCuRWeg>Q#@C7PiDR
z_|aI-NSEmwLnltiJ~Ha<6+A+&&qep*3lr+2Z5xcuhaChNy5(ARYFBhz9s+Mvt(ynQ
zUUG5(+Ie{J$m<IY9P%sbe=?CBG(u&fUh6F8j;BbFyuVO&^L$+`-c^)$WfL#P3fStc
zT-Qe!#CzRm-n{40<h9$`_Ti`Zuf-TwO(Xh<dC~c}3EKIQ&#Et$tl!2eb$mS=dxPPA
z?TNsspx%&y!ap2M?am%_ea33!ITCXz-K}><A06o!f+*a$3oXL8z1}Z=Yg_`E4`N^N
z!0WxRP1o-8e|f#1(7Qn}5?DY0oi4!!haSM1*qJ~ZP_-~}S^~!aqKaeEw}YH6;F(<h
z3UUJRrPTnio0fnWpkEC@m=o_m!<_Epfc|$7>XrBpVNM1U2<me{gN#`J^g|<T`+J-d
zG%Wz)oF4!A^8PXjOuA%*I-PEoV|@}>orRW+8)4VS*bFY*eY<pWf*zThSONG1i{^53
zH5PcVG=Vahwpqd^-xNaef-*;sZPG0ZXzNAPbL=~xxfci5EFIwc<`g!1@`TKX55=A!
z7CT*B`}CSAh^3VUm2qiMPsdULo8c%70jCTT5buxg)7u~t9Hc`xLZ}C*;_oo()6u{1
z2WR})gVB{o@ctQk^;S6j$uh`!VfjbS3l0dED5!B`35Y1$@ca0+86Q-X7eyK98$d*D
zdxR<UM#O#yu!rNhf4<`F>!Dwr<YUGS>Y`1?mg}71^;aeD3YgVy6r!%a<@xRGwOXOh
zh#63zz>(ZeF}1H$BttpAb~PG%Is^A)kV7u%+g*+5m^a6iT?nQYqmHLMeD<jC(4;Wr
zX%_LfLFSnCMinPS6fcK`*W4a9uYaDR;w)oxp@#8(R(ZsP$@~1Tw``65A6tHqX#0y%
z{x`hV`tqh6f(d}vyn~zds1%MZ*$J7=lXxH?foR^W*F1p!=Nvo8f>|;F^Rg8m8^Ob5
z$h>|S`z-Vj_Olubc8Hx1I~2+ak--Ez3c~1qgxUS@Z%AFhGvesloM0-4Y;)Z&Cs5h1
z+0u982}1O8kpE=UHOsgGa&`U;*oIHx{--%MEnq?p2RE@zzT*yF=D;P7zj8;pe<Y7;
zB6?8%n&ki*lE9Edh^G<1IbbV&c_I7r=~H*Xc63DiVicEL%A?-Jj6uxR31M1Vpe)}B
z-4|%0d#17I?H0C<mztaRUD(7Ma)|}CTk0t#UA>Vc)mc+VKcg!HhJ*KOf>R?J33;iz
z-`Ojv2PP);*t@n=uD)*EtmjkCH@Hl08~?yENGrM+hA25J8h(gQWN~Miq(NcS4-5Oy
z9drRMM?OA`)cFTDFZZWM$=PUn#AtW6Wvck{pN*U3+F-0Vjx0MtY13KON6M7AYe<6r
zz*K%U>huold3>|}$b+YkUYGN;x`<~4&q{FM9pKD;bG=+D@y}>jfr>22;lui5;osO~
zslt<`VlkHYlfFjrS?SKRbAo=0VkvF9pS8rew|Yh44KncITOHVMe!NhJ#(|;`|9N(c
zz>hBvhYtGP)S8UqceU8M`S`f})DpMG;PH6z*zTsFnY5GbPxEf;QqK6=jMOOSd+i8!
z7qYc|Gfi4D9Q3n&>$}kENY<Ii3ZD#^lkyy#PMzS6w-*|?lx{lr(BDXMudhzhZF}ib
zZ%QNorDGbGn=Ix*!sU!2_P)P9FrRw-P4*?<i$<?S9Yo79aB%bt1RldG2M7qO#MQqF
zy{c!=D<bZmkyBm0mbUw+l(FnxTq5)!qL6%QSpNXN-FvirMtLfvp3QM$(*h7|xBf^~
zB;n!ch5>AAfGBi+hYt|3sA_Y}9f<wL7Z(wVcHh~^!`#g~Z)Kv$tnHr?my6UF?xevl
z(-P4<a|m{MDP#4kJR;_oAEob}zO6fx8Nf_E(G~*DA{6ON@_x&UCJjY-K&JryhBYD7
z8M8G-#_LL~7fg1?&1oAu&v&?@XBzCdKdli@L<x6vLIsaz>_}G$_TOPo0!PXFx}aJ~
zveI{0i-s$e#bGT^Vc1ok<*?1CHy>Y|TijLeUsmsWX8;jgA)jk?Wpva)J}T7aifCvE
zgEwJ?3%eqw<};HSbm;=3Y3|eUIF=FfTlkNwLQ!?a1IeAOIGOFfRq4U2(AXIxU{Dr~
zEpI{0t-v3+*D6x$(gp5Mk6jmqHV*3?ud^CjUbd^HD|a4luW-)2QuY2?NkzO^wQ^1F
zL*=dAG#JsWnR1vcL9Zf#WbDcv<cxlDVgb~58lrJ`Z;VFlT<$+mjRf1-_Ijk2B$^o2
zbwzm_Ly22bJc>-C*HuZ`KoH+_K&-2NhdF|jN&SDPOs*mZ66i+Q7f>&48-!B*Hwbk<
zee2=h%<F9v`>#JvWq#;50FjTE(E<^GZZr_+J6LEX9v+NXZv>@hIytjZ!9Y+8?E#4-
zfaoT7qm8~xK^6$`Yh?I$n1z=NP1eDafwK9Jj4cB|LunK=f!Ue{FRS?F%)c_Wa<<v<
zAEU_W^tV@`B}n}3|4n+o0I0}4Diz3Xnbb3vZMzT0-m<<{BQ<U7&Za#+%5>fAtTO7u
zxf9U9%WPxA1UUhm=kJp|(pMzXKd&MCJI{Bh*}LVc#p>^}>FG&6UGLOVpBSDa+_M#U
z^ownzL9{2C`a$|I$7{g%d7cplF^?^6_Wr)Bb?;VBw`}*<%}m9?HQ5->$CuI%y8E|P
zqgWRTY)P%sJjwbGZ0_JTZ$`|IL8Is4GZ!#p%i-g(H_bT)<+Qo<8|{tX!v){_wq<&q
zwf!J+LL6OoMf#GctEpM{oa?8`$@pH4{j(Z}Dp&JgZOBG8-C*-R-e=2%S+-=dVOZR2
z+Fi-yYkT>1+1(j~E1UyoB!6#|jL|(>H17_nELP5~KQj|~>Q*x8a;3z%<Qkzkm56d{
zv!I@A|K@3(O-pDlGY|0$6A^3wq<ge0CLFt&G_!{5Z>+r<gl&bmpzyLINnLZ364mlN
z@<Hn&m#-Szm*=U)NCxg8yldj2uuX?IOYpcG$_03rA}bUMG`cgNQ%|&0)eB0q?H#9w
zPjGLzD8ZgSg?m_XDnwY0N*%M6XmbCgpI3H62Yz09Ug8@+kVRE};GZ8l@UKrg$Of+j
z`LZV4+2Hd(vcZR;Y7U@9fsEO0MIEtSo}>;n;7Y&XvrV7)?gxEh8H%9w2tyVtSOiL!
z6>m5_Q3hxhOuv)@@X5G|!+yEL0sT}Z4gytTd64n1*fQ?f-&(GE)wgJ$8&5jdHTLG2
zI6TWiEbG<{Q!Acx*MeB`YpX{0IZ<V@b@om_O=#ZRn8I&;S8U2<Cg&q}HAy}#RhB?C
zwX*BCy)trS#zuN9u<en*t*Rd5BIljsQgktgc%L_xr+Wy)(0OjTrr#d0Eq<FB6)7yp
zc-Jj+vpn&7tmECz_s*1l;rK1D{A4TQXH3q5e;{c~(!0ld?7>oP5J8iPk$iyM6OSR9
z=)7KONs@-VBu_MCI47EWGbnu=U<1)#s?Xocu#;zWyVoLLIIrQ0T2BV%1<yaR@t@jZ
z4OE1Dg*&^~AgI4=f>c6LrCN3bUdgs!v66q~ezK<hsfGE8H+ms48kVESXSD;&o|<*w
z_k4#rf7nw6WSQKO;A#ytz#ESnr{Li_{#Tg4Nk=Woa5t$Y9fIFjWp=x>7d~J>S|WhL
zF~Mc2dk8bNYXll*;L)O$uCc-5EOk_w6lZv4xY7bDtkTrvPug^-%;`WnxrX_3wAQ~u
zGbA|+>ZUG9P2CFC?L&nIhPHj9ckg7T9p5r*O_l9&rk<KuGBGSEiD~HBS~0)x{G40Q
z(?@c@&hxvlEyJDqAiIq#COn9Sr9C65765en<R^+j?8pWBd!I=j(r3r^;<kao240=o
zTm-}>RbTvYF5!{o)nPTEC0SuNJ;Wn?&iz-dD@oq~o;Sc(tsy`-F{^R%P5C=#h31RN
z7oIlq9euTOrR50BcE<KtR6aG-#WAfD?}WOS6Ohq_tm(P<I{r%5WfzXUg9(qnxg2K{
zj^NSZi4I^jWDcQv04~%(8zS{x!&?_;SK+(R(R~kV9pXk%UuQO=mX4{n+*^~c>+QA@
zrWMoq$#;3OT*Kze^3wa}Ubcz90a3FoR|cbSCt3XFrbSeH+mHvTDA&p52P&izdpp4t
zyO*d|H)ng^Q1i=Inqm$yb6*;$@Hb@6LD%y;Z1vLIfDk?{zouVOoRF}KRkq^I$7&<(
z{dy-4e1WMXZ4Q#el)Kjpwk8qudyex4p(EnqRipch)omt@iIjCL+q{jHJ9P5pabZ?s
zs>GIK?WTO}sd~$WO&oIy^x+eB-#skUee8XsbD7Hk+AcNy;H%8HlcuCM!$mCVv8N*}
z?;dl0xl>o8%3WW_iZ+QDu&pZNz3_}VJW$jty~!tI$o|#Rk#oH}&&JF9IN42^Sv~m-
zFY(>$X_9B0!S~c62pZ!lf6=VtG2t44S}`tJrm(aDb+#mEV*;QVsBN8@cMu?<_GVSM
zgZQaT$5GOLU^tv{psdylA>N1vgY>|?+s0k)rVt3U4#=U4ZsM{G>HI<aa3ug^7c~S5
zGUdP7dR?Q~%c1-`EOv(fQ|B%k3Ox*RcAY=aUjK!9rob0aMF_wMLZ<vY%(czvv=UD8
zBxqskFp*mqFgdScuZ*bf`c0un$=JWw+dL#Es;+kL`JqmGi6!sFd@YBFrvkc8arDWM
z#u9E)!F&Ap-AV-1mj4Xs4*ELO<7TzXo9mzg+_7Ac$_RxhkNVOUHvwFezH0`Upc?z@
z0p0e0y#_?e+?P%D!Hm?>Zq+~m+sI6yP=qYX2ddo>sPP?!vjiLKZ%G*PwSw@`)df(o
z&IDK;_htUuCD4Dq253C{P-@GF58+$w_vjnLK!qmj9JHwfzZbTf3~V_KAgFi9BM8+f
zIDV!VjDJ;DI{i?k-v}}Q4xWUz{GPsx5F=I}1TJOeAW-N*UU2Ge2jt(!LXUpvGvxF0
ziai4;AL@Z|exnG=dpfto_y%=r9zi|`G`xR4RtV1w7%pT_l;}p~GFh}nDWd=wC4cYr
z?<2fDT7N#ecf$5#5DfZo^fSDpe=H|xP2DLFNqeFOiv3MY=u3~xE4(v&<C>Cu$X%ru
zjKc0^eflD9qrafP+~6KD(c6+$>gL<@fd0}FpG8c3OA+rSB3p)xo$JTdEr~D4amzXU
zFqTdMg}~l-LhnUsB*!`A8;Q-J8F=Y~nKiStKabx65!yakz`5paKw0eZI*~MlajkI6
z<HJ1#jN)&}34iK`GZFZyb~T`AU2}A$WukTj-YhdmMW%{GqZj=%KVj11LW7nj3NiiL
zg8i2cX`Zb0%K74VSR&nS-WM7#(As3B<shedRKjV{z(3uPhJW}WE1F3lpziT?pk;z}
z_#c%_ea!snznPl9MYw3YjpiTg`dKtfe?)1fz`)-N>ue{5B?YlT1yuF`x^XQ5K`#ez
zoK4pP;TT{owRYViZx>Ah$V;^tG%bl@_=UDeUATipzxbQ}K-Z-M@8c(#ic3JtTtbrK
zEP&ptho3%97XX+WWJEXWM&3uPM2>Pmy{g-2%RdNI#2y2hqnk!rOk;r0m8brXY!iK%
zkeCzx@T*=wAuD4S?o8~M4+jJvXC@^BXK4x<$QoN|uv9Zom@O?+_j}NdMJZ~)LJ0%M
zw#yHl-e!fHnn8o|L(M<S4}sOdWCaYEyASAX$Um?WK==HMLi#6h4FFCK>d=vp6P&^y
zsP!F|t@@5yPK!oPjjtiLW&xPF#Zb_NBa30ELFm3;^dO2}o6ZzosHt`qx!w*eq@4xN
z#}S+S<KJP8h?dC~<Z$*Z(974@BE$;5^(~^c0qlDGSH|6Lv7Eytv176^%EJ4jTQ2Di
zr~}4h+-@{%n5x%)y(^=F-uC(m@6pGaH=Cu0pqYovBSuY4lE)<!Cwgln+U{+Ta@26Q
zN-9~eJ!!C&DRXhpR!=;4=;0~;PWm3IVe)uFbTRF;9*=yU#%I^!=B$eR*DV+A+y>|F
zcr00L+^;y}Hesoi@hEepc0ZGdwpZC{U#+%l$C0~N?JEp=ET`T|_500@%+7wr6tz3p
zwHregS6gq0^ry#)ta*tCA)m+#`0FVBQGM=@Ds&tvuHzqHd_y}>!A20<G*Lj=1Lni*
z*Mf=)O8}BXW3CiNb5PxYtT^dPjW^(c`mWA=hv~=%%}tCZkdOo!T5uko6bCWRpqAJ1
zbwH^gu_6hRvtj5i+zJ#Gq({eZQ}fQ@|4q$nWk)fAKFOBIP*}DjwgHdT59+w0UmpC5
zBHOKp`7*%8v~;Gv@<^wQlxxKkr`nxSMbg}pY{&hCzVzB_!TfO1bohLwIPqfAJ(VcV
z!s3^gO#D-xD;Ul^<znrJ1S*Y8i$_CM!V>ayCH?QxQXL(iAlz<Rf7KJp8p0*G5Mx!A
z3Qj-2qh_Z?hEFW9Xf90jB%L!J7$VI6zArbws(<{6qExSZPEMdSF`bhl6Pay#!^*NR
zYME7Am93wDGGbj^jPVmymEc%s=-aH@QzFA|WvQ24Daesn=iXofv9f$-Lw&8DJ+5l@
z5`bgAIvAu~!TqbB-+K8yr=CvMj~V}_p!pi++;L^>;SRT^nuc23@-?@l%rUU1q4r-V
z6x6A6nG(<N=^HC_u9@0-uRK>Ez~!~kXYg%vO_FeH)M+D4!2`^TtCL}5>+uw6*8^9Y
z^2t6XT>D4fd~6TWNHJ;F>QA*0QARe#ze4S&N|W1sa)#8<$1L%;UjJ_XJ5l>fNxve4
zHrn|0L$E5&2{_K}7GtbBOiM)z&--KdV+0x2vBxnDq9-TJ?i5rw2V^zd`$|m~-IU=w
zDJHz;`gmP1?7fN@V{2d#A>5RR#tJ;-+sQf4i+o^>)p#ht#9Tjc42ycm3rQ2PVPN>A
zg>D*5Jc{Wo=MPd^=;b$i0d8MElgddv+IU~?gPt)_tGjN%=@Z?;LnR|ON=Zn4*Ni}6
z#Cj4yBlnRL2?rWeg@}8n=^>N-#lADK-Vwvs5asOL_XlY13W60L^@boS%3wk}!DCWi
z^&;_%e&)!PJyKFBiFY8o;4`1NkjL1$rrbT2tY})WKw2icbwr_vESpV6FVu6E@s?t8
zblmKGC$wXf_Bmhj68-9QAl6r^)rg3xg-3I7DMq_a+#htheP64%fW2H%sKxMPElbg=
zmq6|;sM1=s1o*X<A6yMfkuS|5auVb9yib$bgnwWDT>F%ob{%4jG3P08ZC?_8-63V2
zbVl+^-TiMD^j^ab;QZhJg-8QI^V7$}f-D}TK3(2MghBWjh)8qAk465BNSmZrfFL#5
zQL_p7k|N-*R^6u1-_}k5h5jI*^#>s!)C?UG0F+*%f67)E?K|{~9&7uPaT6TBdmn0C
zUJCw!9s?0L?SqOREzG7q)d&HJQHbv_O^0p1*6mikOW=?#=KjxC35ddUJ5tye<U%?$
zyR#B=51MiV&?i515(Cf<Z(KSR^F>_jIsUy+;U+f_HB~=MRz|S@VEtkbGZ<l$W6hv9
zb7JM$Qi1(tJx2rPHUz>O@b?vP>=o9uXLc^6*Ncz56;7@iNQPt=-$8RUwrlwxv==ut
zjQQAL>>k(x`up<m4~w-NYywwI>HHBfGhYiDMmHr>#ld5jw9#W6D4q5Am0N;4z<2pF
zP@D8FUEw>d=?2k^7Mc&?*F4NdQl-Ggr1_@+W3u~~0Hb#SouOKG9sW~5O~d<C>AM+;
z+dRL-*vUo|>$0R|;3+q2k*6z`15#Z#xx_C!yPRB!ahx9=z|xH{FQ7i{PJm%Qb?vCA
zTm0tyu5jxHAg#3rP9xOX310)Sz3uD7Pe{2A?xBYn?1sj|c&Sa#3sSzr&f)A3b46?4
z2I*|gw8H$E%b<i#=v3^P(6a=pWJ?gN9&B{`9q4^$=r?6{16V1HcT<7{5z6kpqBAd8
z38VH6T_L|485{guICpbtE%yX|VUi(SQrDQeh_L8QB)35|se3y-bw%2#<^j2*xzdC7
zo?&ICOe;PK>dflO=>vLO=d3;>JMCtfsakmyYv@bUxB+!vtseMQN3e^6n+Lit)A8P~
z`cnMMTW3ga^kk$y^p7V&{^J|<)AJY~+M!<!p}#-#zguRcZ;ycbQz)ygOG=2&RzxfI
zS_lnmG$qicI{3v;jh9c|)VKq4*oZ`q%`OjySLr#@-nwPXj=C6=CMY#cE;o&$;#kuU
zUH4osc!RuwVMf`H7G*CEyJh<#t6%nVD!7P33}?$EJ^db>*!Q++3g=G-6&S4&t|Uy%
z)U5YNdQvzo#n;Z3#&Q{}^?BefbOq=_x_kN?x11t@lb`k)KYN{!O=q#r1UhgD-brSQ
zM-3=ocex!`MdHCj9;N``R3DdxCvui8g#u$sG!#iVvlsFAuh5yj=o>~ls`Q5e|9j)@
zw#G)Ezr!*Fx8KRUP8fLO^D=|B4L+`}84g$3GUXgU^bFRzeKhoc%EsK2Gmj*Aft0Ak
z=cr~!zkFYZo(axD;gi1p!oF?K0KV5iXM+fWg~-J=M?qZf6|#?Umwcjh&&b5`Vgm2*
ziwFCK&kP@N6E$X7)#Vv*#L}L7<?5SXCak~mX`kPUkAALY`*L1Z_WFmn2Yw$5Q!D+L
zDpn?#C9a-<&j@V-v-aC4Inta|1I$ot4UT*`EK!jvkW9IzzejsSn2_IVoJ|)#4z0;=
zCTsngI#TB6J009Uj{0RX(M9kOa_lh<prm(z<yH#}g>9Jhj>_%&HK3|NDQKYCS06)8
zOClJ6ejAn!bVsQRMPfA49|Ga0csoX%ZKJYp)I;l^JGZUhMns|FQqg2VALC?6L7hQ3
z<m2saB~nxx|5;f&FMdLn|H+U-8KOpF5e2yW{?d!lF8K4DG2?%&+y7zN7SBK(qT7>%
zrX2Ef)gHY(N#qK>9(($?m$Um~>(*d4iK0}2bc)T{X~?|J>L3UMWeaB03VcA3CF|AX
z5hm+W4<%b9^)~Q2-YW~1>-6n0tw%d%7}k0)K1%hD3HVy^9oC@1NwCbqcz9)zKT%A(
zirz|1w~sI!6Mg#DBW5O3umja`dV7s&04v}hbJPBxixZ+YW&T)Y=<OLbSMZNjuJey?
zsKkqZ&AtDv<zo;09CHz7t$!;d3#ta;JEh)5Dvfrpe7)y&*}BgKD)UD*eu0UD-6#S-
zHj5jKtm-K(a>UyEt10$VR7c2{oa_1)%G{$S)pO_JeR|csruf%*fK&Ndk0Y2rZm?f2
z8%VrpVNrP3bv@k0-9I(J>@$+!!Srsjno!~ujnwb#)}MJSbyS+~o1L1QPI1E8!w*1=
zeAfH-x`qBRIR7se?*E^4s~C<Po5u{AG;o3EztOR70H5dL9<nVX3>hC6%w`N;He5gu
zyxNvh#)q}_)X!WY499he!dXWIA{0?Cgye}(Eu6`r7gdy>)}xYw3-{WqXL3cVwY9hZ
zde5PY)#nD=`9xzGhL<cx8)-Hp&d8c~*ONjki}G)g;B47Jdp0A5<U(WB0r{})X)Z|P
zFQG=s{`ctodvGF@N7up^Cus^!<g$9jRApjTW}X9UK~S!hZoutN?=Ln9CD<^#=uY7M
ze(ER>m-{FGa9igRco|BywjyX?Lf(~?9wm!Gi>qJ>U!wti<@bc{M4jd7KRLGm4{0ki
z_23ygfKHrbfH|iF%sGj7)O%!~NlIH-rA$dr@u<vF{Pic)`k{&_cZu~?`fi}9AdsbS
zT8xGekQFJ@=o8pr^Kl}FSXcB_nRp}ntTKJ4_7f4YZt*P}GGt#-4Dv%J82_<D>2$$e
zlWoiP5Sc}yhSdJ15=ZlIgJwlg0ZP!D+ql)GpvHIE)PszT*yER+<r8CIoFPd;jZ5pq
z-+D}A3>N#QqT+5iYVw?$X900RZ+t>3Bwo%|3irtGy?QS2QhLK1ds9^ZR|1Ffs^~>l
z#frdvm76mhAIY_~8hZjHpoIljeut}Bc_MT1$2`p<m)O~Ln-i3pmLrh8EgST^H#T0=
zn`)r8k_~|bs@j1@+(-w=-rWbJA)JXgvr&wvGI5Lti1q7iZKMLv(eITcM8A^3CaH3A
z7&$(cszxUzfckrPF~6P{JZ{0Be(g`l-ijZ+L%+Hgocmjs2cg<(H9y*t%y$^W4qvNJ
z3P$t~Gx)UwG9SW87Y@*a3d%QHk)$Q^gO@FZ1GRQ;Li?WCycy9|-?_tqoIrX*1|itu
zBb3WuzIHf$!!?IFwjLeRHRq{`XB1^rGXtXIz?td|1YyxNv<&J&A0WhaVI39vKO~wh
znJAJ9VakKJQ@xqDQ3Utog~l;d?UQw9ne&}Xy_VQd6#mRN=r&O%+h8z0KcC<={bTia
z7#JW#3W`855QGANa#D3l=WnBB7P^>z1F<j?@EvyQ1f>tUK8~CjpkO>fmI`#&ca<`L
zqW`x0@55CgbAwL|xJ6b+w{|6r)KWxu0XVLAC?NZ9o&G;~1+!Ajq+xR0M2eQv+Mv1R
z>A7m_g9;k94^^JB)%HXOfO84Zc#sxgX?8T{dr>8IkfdRL$Dd!Yv8RyE;;U%<fy_7Y
z7MwNMJK|ubP<YvLcqr(}yhCV9X(7^Ll@D7*>tkAx;F?4~<F{fYq(=JX3@!)?cU)c3
zTX>PVdhhrr>lNoHT%BP?-Vj`sCzJlc?jP@P4m|Sl|2{>ag`VvJWB+r&qGi|}JF!)%
zT(<j&uGGYtVCWCXc=fKxM~<yC6YFh@L1U<&Ai<`?`cdV#t-~M8SM8p0XS}+PbU<us
zD*$uDdJlk+(Qe4|G(p-65WY4LPP-=saDmOnE3nouY^JWhhbC_-Rt3k$uiLZ@R;95f
zx&6Ky=KMoEO!HjT=9Xg^_Qks4jxZ!(ALC@9tDk#TUj<*PDBT;zV}da<G}7c7Q786f
z6Zz^qKuP;%`MNammtyDAPSrH>#&8_Geekx#P7nc;*>}s}gF)J^VqhxK!|Cs2RtrX#
z$wy_VnLcAk+HFADTc6WAwiCeQhgqOe)C>v_mfm^P=K19+XlwihU>1)wNrR7`hyD?s
zgxOXcwrPrf0BUF#@SH-#8S3-Zdek2}$k%n)N$ZR`V-t%nI}^gF20>#q7Xcmp^4Ol0
zp>H~8FfTOH)()+|<T@$eT^EZSc@(L@?9r+P%t7F|QOeo@Q}_W9x<};+vGT$esT>eR
z(|2-w{wicmE~?|bdRZyp`rY;JL)Tb#m??2HtqCmXO!_QcAs!$-eBH4G%Hy`0*R{{S
zr#F)30&90Jx>Rpe6{!5hBgJK%-SE3hUYROjS>ug~fQ=A)>!eI31aky>GEWqpVXtO2
zN{iw1?Ybs@Xk4e`^{wZ3Kz2{qJxbRWED*K8H7~I-LuaW6xlns)Kzm<A00b|Vj%Tm|
z%L#9U!s7_qplX}z;xd3+mwt%;H3rK1-yPelr-0)dps|<&U=4x5B{0sPSMWUM-+C88
zK{uc!XZ?Wh$e3+*-#BucCd9huU33@@OdHNMb??<$|B?^uQ7czRu9o{|o(VgB>|K7k
zLSfF3)rG;VcaJh31{ZVMVjH`<&x^sH-#KAFsFb$zM;Y@Ar_Myc7Ss?#d;=&rcvpZ6
z<Wwc>eHAGwYd)f)!<XyABz>F3#osG$ISRzIZGg~6zFJ;1W)gyU9IZq;*K(rkGkiMz
zQuX2_9-{9>tg3+i{~)8z-f^h&RvKGKgB7w{&D#k*EQi)kc8ZUWCmxF7^E71slzvBd
zDm5ck-(w9F#*?l+$F^5j^EdB;4g(OE)RgMWMX%}^rJTnrEUaOHEo+y$;}2Ul4cL4o
zw)+~X2l#-4;B_d7O~5NHta*^Yq<w7TfFSMLCY_lPfF0cbNJ~C>=N-6o!nLe#axQW(
zs&fYPUVq5`$6Ycsb%gWC4OlkZ*&7y{;Fj)|#%P_9`RnATw+FHL8QjnTdr($^2B&#$
zuZ2;<`FM~A?lC6w=Tcz<zl!(*kX$Xg7Y%6V;>=WMk1@qR&VONEj{Ex#-((Pjb|oJj
zjYKY_fZ)`E)&bgKVinNVSL<<qt(3prxcvY3JBLToY-n0&8nEJdpy|W-B0Mc*9Zoxe
z>KzmQIcYcOEX`oj?xCeZKj-Wgz{-F5*tb9Fx1h0Sc;W`d8u-$Fq>_!8O-i9#pz1To
z$z>9NI}01PgH$WF%aDjYPx|_|u{Pg=A4x3l_)+$ZG5uM+Le#_^uI&N7HFS$XrCsmW
zsYi<K)1CG{yfEX(exAwEe9<s*fc|$oC3(R(w)7{N2Pp!+@LzMmaV@<*9a)GS%TVAM
zvG@5BscVxe(yw;S`kd1Eok;>muLZqo6ni|A8>*w61OAbjAo;D{Ss$uu^B9W8tajx)
zEHEO%l`M*?-gUv2$Q3EXJu9>`MyH=vy>xgOG%q!c%0q`hwQtd2_xsW`u}oPh{>L}`
zxK2?JZb-00pnY>SE?okZmQCN)Ot=WO)K833){1e2Z>YO?P(#PJh)&HDY$ZXrX|Gh%
zSC=KUP4TCgsRxqB3TUio$?q_{o(@$tVXW+rZ$~gUDadm5Kig^!(swlxEVlb?1O0~6
zceNAj=wUJ(-(jQAe%?b5xChFQdq5GsxrQLtj)Nbi?S@ki;KsDtfuAO%9=9=Tv^Z+F
z!CVsViAGP~`qVo*O85qaKx@az+c$_He8Ys`z=Z{LS^@dbrh$yx-9ivHF$)2yCoj^+
zNUy(P?z}0!;kaB2u#b5%5}5YP5zz7%;I^oJSGf<ji2+eJwB3I;4)%fjE5iLL<M^=@
z6pIeEu>yc5=teS7A=nnlKnR{%J_wB#(hmkG_S1j{`VAA@nWs`oj->CJB!r1<mb4wv
zT{Hv_105Iya4>DBn*OHIM=(TI9qPR!fr!kroeti_m+?2_G#THvLYkulJ#`gFSF$)%
z<(Cm1um0|_GIErc4V2q)OQM23%x<xSU^jN*E&P6BiT>3|16P$1)k#XGTl@Xxn36R+
z>iz}N+jq2Q__24$qHmZiPz$S4u>EWAx1(k$lQ+zBFySTg%#Uhb2(zwBt>uuM9dBy*
zemJ1B_Cf35#m9f*mcsO-u1gs5(SnG9A-Rx`APD#)YS;snyiRId6r~s;SjgvHnaIsr
zm2W#_u=`%*F(9#(FRT~<Zk!VdA-~Fk`9}N>>q(~z6cW<uA%fCinjmNnpjfF&XYO)2
zek^%(_mRNT+=*V&@yRWdA5-KpW|L+6y#v7D1>>0Nb$e-{OFTEP!2}kzb^^0Q-ri#n
zNB~W|-CN=4INLY)=m(3VeLhsPs!C2;R3)5xwC8ZIh^5CxD1dX-CX9G4^7a(F>}Pd}
zc~FU9X35Qqm`>kg4>HMBF2n^nruFIPw|cn~R2olW;Pa<o9~;_nbxAOK>_4Rj()G(g
z)-#HY4(x<3AnZwau(Q2)x?6^UehCoMzd&&z9sKA(%2(^-?OpehBlRlYeOZPo#eB0k
zR;5y&rE+zDi|KHS*<{X^Z=T1!cCEtkIh=4XjrGmdi<sTS-3;ENvtMo8AiD&HcJI7i
z&~8BX2Av_d_V_l_Y0&yh9sm&~Lp!cF4BIsrZP6!{X&@N9GJ?hml;2xaa5ilNY-a?1
zD3qDLE0f@gT;V6;AUY$4kOps40X+D0foy^+JtXxc(5l_&z%nS&*bC%=2Pi(mhOD`R
zRGTgM(nj{quEuY%ZP(smXe66J;{!-$XjU0ixnTz2j3M((9>*3~t!!OnRWRENfGck_
zn0|1S>|Ibjy0!PmWxzkz#jv@og}w)@LhvI%1Nh?DfZCY+4$IRAH|sz}fSc`&f(YO<
zPZNPVXf`VgUaAB2@XzDRRlt|*N>w!<htqaafs{rwgWRQ=VU8^zzu0<ytTQ|}wEe@N
zfBOC({Ud(#4|?-7o8_XaqQ()loq^U6xEQ(B1@5o0#&wI;_dT5off=<*kDyTgH6M}V
zgNWV8*<aH&4Sol^Y_hNnw8ODv+-{+u)?D9`@MqzOjtn4bMQe<aQ-^^N12I=UpsC4I
zvpJvWwdP2JzS?ScT|Vv7E%mgAYyD7peH6_x`3v3}6H>|0^}O2!KYplNsOZQkSNBXC
zcV)g0IwiM}W#LO6K}56acCt{-mh>~hq&MlqLt4&<OfP>n7M@Hy#2y5~L>HexxQ<{t
zbY3iv&8-VK736+>PlNr}{~3Vh|HJA3{VcNyHuIoye0}GT*Fhsg2dtIdA*_qtzW?yY
J$_Rb$|39s2<iY>|

diff --git a/windows/manage/images/aadjbrowser.jpg b/windows/manage/images/aadjbrowser.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..c8d909688e70c5b486ca5cb5563547d213721a10
GIT binary patch
literal 67277
zcmb@u2Ut_v);78n5m6LDiqt4YP?`vcN{I~+5Rl%9jT!+Fl};2D=?Dl22oVqv5kp66
zq)V6HTWHb~Y9Q^Oxc5HaKKq>e-0#27jVxiU%r)m6bH1azW2}VMPaB7hYN)EKLVNb?
zfo_9;5N!y$2JPLmXZPpN7acv_?rZ<PeRT8;`xzK^j{}T{7!Mpccz}W7;NgP@4>5rk
z1LG0q!%RnZ|K9Cn_x9bpzz@>_h6B4T{_kG2?-0v@Jwbch>GlXfds+6-vFxGMLNEy0
zLl0)VJK;ZHd-l@pqu&pvbnp;pP<RwfpN?)Xm@NIieW0}ucpuuwLeF|q`pW)ex_1}^
zT-eS%k4Qcscr~|*U9ST#By;zXALBs|&f{F%!ly(;PoI&MJ1>9X;-zcXRaDh(sB7pO
z7#bOyn3~<YZ*601XYb(p_{mc@cMs1OFJJk;4hRg2jCva#6Z<YMJ|*>IT6)H(%+GoG
z1%*Y$-%3iWYijH28-6r4b#`_4^!D`+3{K!Cr>19Sf6dJkR@c@yHn)h|JG*l2f$07a
z>tB-nLoOB|*Iuv(`xtiR+OyXU9CR%E=ub-TXT74!aL47Cz`5rK*sew-=T<Qa%IM+Q
z?>_1{$RQ*<Axzj6?YCtAJHh<^KS}m4!Tv|CL5PWN57<0976=Y)Cv1umGf6t+TSQCe
zNi58_3(n*Cn6x3!ZSy`!x;)VOxog}qtmVfwzpEklnWA0<tq9W~zmjVontH=Y`oxLR
zy@o-^;<ZdA{I){nhj=_}@P%19evEufMlYyy#^iaFPM5lV_&RE2?+d;?bo;#G$)g{b
z2Wn^#eZUK9SX2X=DBpb=K0$E7=nRH8pu#XHM9ABN5am4$di?`K;o}TL;T?UbY-2?4
zSc>JJXY9mg709;*O%#u#L8-}vcIsgawmN|ZF~4=*xk!U}Y0&s6i7ZA)34$omaJ;E)
zI~jBcx^f0xy`~<LlA`dggu!=D*@=A`sV?8aq>h0}y-T2mxi!Fu@|EeJ_wI2T)YwX#
zr9ljwJ;doL_?8yT7PTA?QG!uK@#*UD?Tc7mDtE;eQJ<O2;Wve9Z6U7Ep#6O`XaW&N
zgLd00x6z;x**zpC)OdmXJ*v~a1{6^qOM?#T5PgLEX;4B8VT^hh+*OU`ul(KC<1nS`
zGAzfIdPviU2C0cnV#qvWH0YHq4XU!o(4b$_imo*1MKBG*V;V|D={A|b8xC?TG)P`}
z5>4hsfVO9MFBP5ymjwU1<O}b(48t@~4;g=E-Y#L@U85NqL_VDj#Ln(P{hB22_6ime
zkNI&)lx|}hG$=I71v3mK^ihvs>ZGybg_p1tUfVD%-s6+;l(yXm=Dt>W>cJ8mDmb<|
zbq-x%TzjhW8~sU56#Ljf%haaoaEWsZ$v6W{<^&D0(;4K35ha|f5KP33$?!TIKC(PP
zX2GRBeIe;&N!hE9!PmM^-IxtcxHmDW&XU_B^UMf)IQg5GX{1SFYRsu4VHr#z7x%%;
zC}7%tLg*z7@wCqOtY-A6g<Kk?cdf6*aX*=3=grdgPlolADr~p*{CO~}j*vLL^(Yy>
z0^Vne2(z`!gUCti?64313))?=^~P^f&A|$Ow1CIGdAawh-vus__r}g5WcFS@4%I^E
zL3G2BpR8Z>EwORxo8F0I7V&tg!3B$Q{1*Ax-BmHoxVxs3Umo|Kc{($^k21!`w#3CB
zy<Kq`mJeXY!a(5@2?sFyq{mDYzmM$NOa)7Mcx8bQ34r-uARYss`Q^R44agNdrrr$f
z?R~Iz_uDCa%zx@Z7uc=n{{(r=F35o{pm%j)1zR1D8qZs$K^<+xNr1<#u?a-z<InQE
zK(Qh~%Rua}S#K9GjMuz9Sj$#zX7c+nFo25>BFyR<4SL+M=|-LVz}#O9-fgoGr9n{%
zg!YN7G1PBh*-5IAhuZ<Z@s22<KP!LJ3x7D?j0d}OF`RE#1$W^EpIDE5L3J|!3-)AB
zlEUr?Q}SC{kZ%>5C?T;$;l%(<Iisj-yW*t-?MQtK1UVx0TPuEniO7KKpSr=YvAfd*
z4R<Zb=Wgt;so%@>hc4^@)Dm}rzi|Zs|Ku+4clAaN;I_1w!ixg8x`GLBGXUdJE>Gsj
zGJ>zUR9*si^bpgF$s8HRVBiq2L(Fmq$$_nGdv-|as462xU4q}nV;`x_Afo@)7W75k
z5m!dKI81|bhGHeQDPo;K)HkpK_!2V%nWJVL^NMUtXvSrPQF+}H3kwpo`xLLaK4FSf
zNuEC@<XYdF+f;5ZP;}|T1$rcYeso@wCt&u~;OS%+At!+EBUc!@xhX*P{KQ3j;o}*w
zz01o`BueB~$*`J$>dz;T`RY^hFS?zhDM6ypp9kG`E&*MuGl;+yFOf*sM=gDS(jYEH
z3H(A0`WRU~)$WpZG%lgc<(&C^EXx;Zh;+9&(D0TcUygLK+!3Ig^tVv2&0Y?w(4ZyF
z$p|l-`ini@YACndhJ9RgXNB%1d3M2_vmMr|FSReZy4-P<DBrX?L%12U{M!CiS`S7u
zy5ZUyzh@r~KldM?N7dkP`VC8Jlh_7hET&!q;MtW56Zn8?>~IH0^|zh80g!r)8W!9D
zC!VhaW|4e9<r&;Yhs<#k!1w2_?cLuuHlYRFL6ba%j{)rAZ=>A-_OKa76we2(+JCnK
zAlCxe_JIGIEqC3;_O1$*f+0aiRW_$!Yp#_Sz+ZnFYa0N6dHLVA(Rea;V2qR=o{!x{
zWE}v4(>U}0tz}27yYd5ES5?p;q8_T|*Kz}S7`v+?0M+cojZHUrwH--ecGq{j06Jnm
zwsR4|hx$WBfbWQ>LDVpPum%?Z_z#jj6?Omc06L#g9gVx<F>nH(0^~Ex)})51{i~rb
zSS&<4nFC`0TYJP0Twhfyn1H@H^^o~zurdw5Z<XJ5M{f*nF)TEL1`dVyfarX{tMDPZ
zz|jAR`ZXi~#q+*$`zQPf&Lma$Upfzm1RDY|OX~N&?`algAYhJDa^MdTgBjz|@A|xz
zNb24$=xg@Z-8j~Wm4vB0abG<i_u-d>_7jsA+mLGot77X?6M4+MzD-s~xxYI5_GG9=
z#%WKUP~&;zHF=k6u*Y>1J4<EE{)Fn+26}xT(`JXWPdM<U;U`nyuf8R(cJeWOU7&7>
zuc?iQT`wr3in7ZJd4|Gix^|<A**yo27*o>T>3(;8L{b+W?JFdI#cU<PkJ?}d;v65;
z#3l^XHT4xPb#6W-g`-2?Hus)pAVZx#k%;YS5y~oZV<4LSkuJc-edA8l5unV`W5>#`
z5gfX%5>CZBPr#Uik8k*B))qVS%*CA7@-uH^xThgg-1Nh7<RMnhw=fL<n$a)(yqL6Z
zN5!42LX360TWJUKGyKGN_r}l$%_zp0lKGfuS>wT#fq@4bo^~i@T>T?>H`oeqZbXg_
z4N|nGL6wJnmwgAua;F;>(@5IG<O@07s0p#Sl%k|2yG3%G)4s{mu-KSw(nAl5Sd+6N
z?9<$iTzaxHTFA(aRM{$cg8!jjRZ!T+y&;VC=Q5Jc<Rl%LAjsYcNDVKyi9(bWcJ<iJ
zK9Ww7y_-`w>yL>Yyyd956`OCSWFYRVNby5$PfAhncBFkYXssSW8t+@!j7YIS4u)2w
zC1zO+kKBwQs76echgIqNrUmRRJV7+ajM$+Db$`V^GNGg`aTvbjTTR#ej2U(OcJa&s
zz8_x$-9@w|I~#;)&_fzTa!umDXc%Aq5Fq#)n$kjc{MSGon~XGQHUzs>h3P-cP_tzv
z+H)tjYjJdSbsTpgC0v|r6G(=;I)0`EE<Gz*t8C+(KGE3FblkgS%5BAv1|3!9oOWMA
zEdV3$q(fFSi<#N+M{lgrpb~UA4Z4k{y8m8e<tjLt5KAS>kzkVu|DC>?L|2l$MW=0-
z^QMqLqpl{s?=5l(?EHm|FX4GP3|k`8Lh{Sh<x8_+-O1x`Mc75}eMM7%YA;p$UNU(3
z-u78OV*U3RZ~p5TTqryZGVUbH-^m)bcfFQApZ4l~%L|GKSEC`R&ev!=_eH@t9tqd!
zOzUwL^gCcU{f;&0vgP-^IwEwr$?n4Yzvd1~?YPmPp-|$So`kB&VFX2S1uSIy5BUFp
z1@<rDDDEV&qwt3wL*XMEBU@f>OAA_dSEcFMjy}9{^QZ$2!ZAqg9Hv1{C`t*8zz=rh
zGJIQqcZDM0|LWsk3$(M4iz-EL{Ybq_gPy=wBGky2S9U^w-~A1XQ^fA<0e|mqVbFiu
z!amDjN;iPA3J)hK6QDZ?j$=S|J5#}MOEpwMuooX-Wbnpt`wz^273E1kc0`9XrTgb3
zs3+Vgsx)XCP928-?*~_R2;O{0H6Yax)w1Qr9Y-q5XwX}LLKir{nek3I)qn;q+fE%h
zpM>1Xq8@N;AhVf|!znMEQR{VHh*!RflMQBl6ckX)RBr4O?706V^}GaLkXjXs-ML$i
z`95D0>BJXDVbt(mpH!ZoU5BZ#8F16H>0aJFU_VxtvS^Sft^`=C*4TAS+wDV-F&&s8
zeKheDrJdsc0GsBmfR`W7C3bysz@r|R*o_Ss<qXF;9~XbbC?&B}v@CQxyugXBvc;_x
zdN{4Iar`6ZgE^IP0GH;sYVUn*LQ~Yy$*f0fI99iORdm=8dbSKXZdZwF-Z9PTUqb=Z
zLvrYWn)=*d+#9`7E}1+}k_>W6*6MPF-`3AUPV_oAGxr_6A-kvMrO;z|v{cO42t4|f
z-N@xb)5Tjl(`tX5&&%K1yX{En+SdJjRlPK{8>%!%J*FCX>|WJ#N__(TaV!7ts|i^P
zUT~sF`fDE&&jOq^HKD=LC(Zq8SFMUl8g|n?2ARKyiBuerbL0Sh-bLIuLjSzGhSgx6
zcWj8cdcpgtRDRpM^7x?2rH_U8EV5VEBy9_vO452(8$2FmH5p;W^`kn@dq@3kf<A_m
z?L^_0og<<2GcO3X6X<|W^Wf)a(m$R=n%lKp5s7%zBF}i}+>)}%wWz@?cUvl>HBRZ8
zMOS?m;n0LlT#CgdxzSWu04pl*@>S`m=IVU!uOFG7)&0EBX|Z`=+pF1m8Ql~vfh|Ry
z`K2uG&P0|VMrFHuk*@X`S_&)yFVd&1HTYunN8BuuiDl!f*FP5H)Bj>M6UDZQsRtqe
z_R!<T6b}SyE@%h4FKep|T%<v#MTqP)$Vz@}=WgW(=3keBL_h5P^I)Fwq8_}`I=l3m
z2Hk@P(4h4NH$=z}f7NQg+I7eVYl9t69Uk@VM{mjy0T{H4pKK#Z98A=1epVWU2?U{T
zAD38}Se1_}ml~s&m%6I_=y0ppQ1;h{Gw;SS$FuG(p=`M{h7i&6$OUBonxOSr8Wf|4
z8aoxW7)gWLPs3ND5Lr|+^!TotPD^baqi(a4P~^)SH0TO;8z@aN95~Q`DL_&W(V#P^
z&DYZh^4`&)=G{BBygURi+<&6{3c2y3S(nVXYa)n9>cNYvWS`;&7~%Ab4>ZU@W1C+F
zKS`pa<8|&;N}Eb`(zfh!!^$lBxX}~etdYHQ5XPHNgQK^%i(HI~&#VmN;lH;^v4}cH
z&Xm_J#h!)ha{g@(wYr@?(60`WGFDT6UyXXg^J$OwZtG9KuYMd+ore(r-p4bx>$Q~L
zKO1C^`7^+e%3^kw;n}yB|D&(Hc8{AA-j48<uS&W^heT*o>&s~n+8j+<2c#<(hF90&
zn}-1lJRVpn+*6Rgx)O`izshI8A==wp1$NO43;32T?3IklL^kV6UF^=+jIRruZ(3wC
zQ<1Qo@`%)TiF6+RCjB?k;-1w%dKS`a((;snk$oeu(gtJAL;W;qC~bJ=LPvVMnPt;h
zDm*5-L&}6;|JXM|9)zLytZZTTfi1#nQQ0Xz>iD?M4qRSQcR|AYXZb^;(lO@_C^}2N
z77V*GPU!E8^6fw$QMAVwDV>>Bjn`bSkWuQ655BI!zPjlsT`!&3{(k4+cyg`j^^puc
zmkmFPkm?!JSI1pHAG89{xPWe|&8aA_6H-;v_xo~IZ32;urfVA;xK;(<7>BRl!Jy&e
zU%2H1#Zk`K0MGCs@zG9Fty!=`E=R<D&ZF3-Jh9V)`%;+^Z)Ym~iQMo>Hg6W70x;68
zzBI0C7yTEdUVLxUPG8Z`Xw5F;ph3u$ZPoNN8gxgKnG#uP2k4Rws<Cbu)z1M!<!eEe
z?<g4TG`CqS<&`*mQ=<@Yh-_~N|9VLf1h!{;6qP0&xs_bi!oLqD;)WDEukXuL`e4-Z
zAmdr<7;j%$jYqU1RyH~8OG4<yQ=MbleYrTod1K>qO<Cij1!;Pcrz;9qkW{tI(v_=9
zDn6+b;Y2YIMiB(v@8RVAWYsH=A_;Z;`5*0nj3LA3G+;}z@7^q(eQY%Frp#c^k6~XD
zpfVc1?eKMN2{_)`g9bI&>yTM>Ha+O5>J=GOCJdao<U0^YOsw(nLzva{ILS}@&bv4b
zre~xY8F_tujWacVN!E##->}dUN^`PakrTqCYIA2ijUU*6OQ6P6QH9FEByHb*`6LCr
zX^+HXqQsZ+yrkumY%`iJwaHg5@Z_j^OuiB0cOJU5jH5y35#=%;8<1a4hCUdNPW2yP
zx}sQkVI;q0zlGRo@mgE^6Vx0URFej`Mem4kpo!-Ix+e>;_&NB%ENoR<LJ2-4yeor)
zoqJr3K~6V5i`lULy@BDjv$a!~*&I~`r+5Yz)F1z?I3OiWPg{Gqw+!p9Bu9f}Rxvu1
zV*gOSv3~Ngk7^R5TpuHshW$zRMy2b2O3(awI!S+-PQs$0CVbEV_4<<gje^uCk4s<n
z<!W!Wq&M0as~Zg+D&=_c=u1^l&Y`zLbO;OrKc_P=OAW01a}i<xI5#7}{oh)%`)AoZ
z7h$(=wGy@J4%h1((;OKB%P?&_EmypRkqB)_aGdb+GJRLR+PFVe$XT)F?9dOZJ4!c|
z7!SI+SoGCl2hApN4KHmwKXyD=pDu~N$nzsHgyp4&$#I+@qoBt}#kl6rpT1-I01bPL
zUIc;SbzB#~pD~*JG>Xc1nxqJ5*@Xf?Vxj?5`95dhULV$v&*YUe$LLT^&LpuCu8+?(
zAJb?jBgkLK@%X-_VAl`!#xc$l*^)S(g$1w1XFlnM{)gOOJ{Zz;*}VVcjB2m#JR`ds
zf>OHC>V&Mb<gOlU+A)qq-k5PdqeX-4N4YLT%Othd@9l5j8_ze8FX?ZB4NGyc2OL?f
zovNTogN{T|k^mnT8vSdg$;5=3!)uBXI;C(jIzqEL?2Kmg-Atd=-F2FJUEMxdLgjGx
zQZERu=^YFmjonv7nCFb$YaZ-AmKZagDj>S$UB~0zw&*xK@QylA+R|Cy$1NG|?l@g^
zp6VIHfmhk9CY%@McREQl&6>{tTF8C}3ee$yXvKeCaY)0V4r@52))<tnhI`SVi(=JI
zqPK3Dd^WO_lI#Um*LGSpmh^C*`wSx3kyV!Zv%5<#Vsy?n!ex5-x!H|`2ZGJ~W+5JT
z-dX2c$>UmG6m@WkntEZK3T)kyA4|;brtCSOMf2OX!ta<Sg(8ugEC0D)sZ>6Ze{5lP
z&ZroElV985;fB7~9E^IihJAdN_3qtd^JD61MR{OJPow?c8ZX}lR!W`PE<&~c3!ozZ
zu@{zD0{1!R?KR_N;2KUnq(QZZ+5kh^kg7zHpA+p>e5e0Y7g7IIPE@U3BX+hGQ3@l!
zL;e5Ufu0%A^%m3$^DN>UNN)VQ!f9I5pnU*JhZhk9CvoZy4QkO?>!X%-S;<Z{j`jDD
zl0iB>kjS1mMC`8Ira`L=gy_lkZT>>c4i!y<RONgZfL<JKAU`nP4aucY>kS@=091i;
z^!`_*%kDExo$xcg?X}!5kJd9PusGc}<Wj^#n4xy!$p-RA{c(AU-wJ&9mX@CM3_X2I
zb9jc`mFoAmcZ9-sgQzd9SO1Elro1)*QF;5&64md}zGGa6&fEH~fF4x9vDZI${BkO&
z!=z#^al-!EKKJ_Jy$U(-S3a2}2UL^%SL~vkEk$e=K@=_~zqh18lxI%x^#|+|1j%zn
z$HXv!HD%h;j!GNbzkE>8w8?|^fSh+s4?Hrv<MoUk7J5uEQ3@W|@tF9f?;+|0ZV{Ff
zp>(DiPet3<eAk|xbKm;3f*p^(RG<E<4}R3~E4L8K$(U+m(HAKpjo<mBH!azToaE~k
zAW?)uO#z!crL!bOeEuG=>dPS1+iwW2v<IUmI=4Vns5l4Ak9ZUf3I>3cLII!H1{T<_
z5l$>6X#id(0Bp}1a74lYW&$t*-32M?a~PEgaF<3jaIZCKD<FdN0MNyoiqIfVHS#4Z
zFz)L_IPjm5D8iG?Xf{->N;`n&7FCm(dL542{}4gh3nz0KgIuw)1W;zpF&gx9EdvBT
zc{)_daN=W-8KW>?LQxM10am)ObVd{eiosx3?JMLM7&!n{%QTMN*@q&Y!vN@eC*x7n
z16i5g=EVGo@PiEmX06<)+S0Vjcg0d4e=IoJMCg0yp7_DlCWG)s6QvjGfOa+3y1UUJ
zMlS63nehI0sy1oDnG)*hOnsY%y5_vq-itNHuPE2gyz}g8(21*8mtdWniXcx;y3tSb
zDuvbPHrab!XgiGc)GN~-v(MiKF>C-o8Hl6CGBHLLvH{Ecxe|-FmapB{mDGx|&pvCW
zemroTpSxsrV9yUdEV2q(3!?h{!gTQJ8+pM3NOE52b`kRBZCv}#1=JDLgfLh<p$?F>
zP$K42!(cUNqPh;4v>fGdhsuix*lydce{0(b)SuZ`3^36E{0fy-2DNI4x@MrC^GI+T
zn1TP89Ec<LD-ki&Fu~off#q*B1YHLi9l4HD#1iPng20yI6cuRD%aAd0G@$ldIPA`a
za1gIg2+9K}7_ZBzC@=`XlMuw`D|M)K7k-e#uU2)YYJ5Odg<FY<P_+eXu*4g!fAp-E
zF$Oc+?R+1<0=~>0*1+8s)Fshux7F1j7yUHwrrtRxx}vAE{2QcvU=?n_2zk!W5gU`h
zY^RIOla+|O=o_lXZt{bqZ)c#`)*<SF=znn^PC&LRGta?442q^aJNV}Tj{~3<-6H!^
z|DE5kg9-g~*Q8bgV0D}`o=1?`+^EVl=mCPnMOLFh8Rn(r0tyg+>X)K04MMP@e#MCm
zPlRvtPQVwI;1mgdPBzq!1Wpieen!nPQBLB&oZsR<-F2^wqrPJqXIj^?v`_d@=+M+H
zQ%<gC=mwWynh((ZgJa`k6uL@!)I?7YcALLavr`TkN@rY%&3{|vW_`}$iYWAMN|h=5
zMMM>}D%KC5z#+Kv(L|j>X7XO(|0m@rUhl_U+yhl6(vZ$8O|Tsew{7$f5B@uTHL6HX
zo?@g|1e*G`CtQNCQJ9DhdlFEvk*j%N#oF9Duhgr|Iz)O<Fz&nkvEwyo_l4cSJOj)R
zyNbxBL5s&2sIP>5W^wSNqr~D`&eHT$1xp9+kQG-~8Bu-lFin}G5S>uc3wFHi?m}s9
zU@3k;dwzbzJR>~6Fva$^cr#*+B%{1mHFw&D-c-%mR*E9YaFWDHKAJ=M2zNlxyNel>
zlooV8skkgbj`>DX8%R}+F$_NOTu|u2=Nl(vnEWnaO!3;8_?68n{7S9X-mVE9|4Kd!
zqE2;uY>=W{<}bJ6E=yH$<909e&2RD7OHJ<_NxFSw#JXRVEf1DZPB+<lZ^AiDHk{Sn
z>(;l<CnNh;#VE>~bb%7Kp)XP~5B#CEhHTH`aFF%WvaK6EOyGz}B`QqJJ{Kayi(3hH
zE6RP8OB>BU8f|lyweyns_s)+_9p>Vq^>R(odyw02sfkL)`oI`!Sh~N!NzD3{GZGHn
zB!q`NhI7vO9_@WFq@Gki*lBsi=4?AtON(uojI%(KVxjek2ds4Q^N%q^kyEiGIp$;T
z33Z;9?IG&{<qThu+{%eKAO5YH{Pg5Iu6I~G93x%C%-@z9h1PyhHaVAd(hRS~Lp{hz
z5UWA4l<VRuE^Xb+>r*tx@hQ}96|<OpWnHbCc4u;Ulp-^GgYUq}?s0<lPn44;hQYl{
zujjFpKMi7%HCJ-IUiwo`i+@PF>^yg9MQud$Dg2g%=xxGD%Sh47XCbZ+%-}9-7#+0_
zeV|-qvXxP`{l%ROf<$<rW3Og~=1oDh&g357J|r(jxVj)h<7a`Yn(m1Jzm%(-F$CvD
z%_o!2F9(n0k2hDqjJ{c(Yr=uBO((ujxA)8PMl<D{*g#FQ0OPA#qmI1fgITW7RF;g(
zs4%6}+a5E2mXb77<H;X-?}LLCPgjA2l$N=p%+12?J9Zdu(N&Yy6L-z*xu%5m#jlDU
z!Uu1z6JO&MYJIr@6LU)+vUE4D;Y?!9TN95lK#IkE6>*j}_m4PLa;~1Diwk@$DoQsj
zfgKO76zcXC{_GH=d@9zUSmG<+G2OhMr(#vQ1v;(VGh%QgcTJTTBr;&Usge@ZI-QjX
zXEXi`++bnY$1%D^??YdRwpCP-!k;N+FRpYKnqNfR`gynXX{6n_`?QMnn&q_aIrZGB
zrxs3f(*}^P3frCvd<|7&KQKv_4I5v(HqTJvCn-5thwy!5nb<l{*z-w({|9k%i(Vd%
zr!c|uGgJ2y%M9HPw>6!UiN{foqZ%)FVi&$q3twD@IV>RXY6*@!6R}J3I5^P?#U#nR
zIGYtJsc_+|t4J{Qfk(_3yoq__7Tt1$<+=0A${;+arvnJ}s39@BJ5NX^bJhYAN>+ih
zd7n)ZaDU8LT;y+Za@Be};lxTcw)tDbiNW)0YmRJtb}Os<?&DqE*QksNX+Zb^^w3#Y
znCIiZr#Ah=LPd?6s%TH>N{A{S`r#nENii3u&x`q4tTF89mks2AL}eY4@!*~Igt8M9
z>cQ~0$HK~8yJ7WXL}64YcES{dW*kn68h7NyCfY+{;<L<GL?y4Y3^q>Z)89=l8c)pN
zd+2GrG*(T6LizcKX%jw27Os9P=@x&oaA4)ZaFxLJn{tO=CKnDzeqmO`yCN9skGa&>
zMEktj&VTS(I`Y#;YTq_r=$EIlX~N<6mMre`$3bgEUaH(9cYzqi`@D}CIzQX-A1%hG
zVWN22FXcP$cN;cXx^;DjuK2=+&=%$r<tx@sLTd9q5r&guo3FfUHfLtt+Ej3}^4^cY
z)fE2|tgiEyjOz!+qR}eHLG=QT#k*RC+NMwk%*@m_O{GS~GQP#YD-Fu6b<1u`zkMD)
zsazP17q{Ki#ltD?AcK7kp@6Eo1xISG3?16c>Mp<L;q2y6q$?4k?&>=GV?y)%>cg|z
z<LB3&eXywvByzwfkCB;yM}d=cvo@LX-e%sh?@F43$z6(gUox35LG2q`4VBQOR>#0d
z!fq(MtuZ+*90VJA9$Bb4mFS1)!Yw#ni|@|{o(yCztn((CD5m<gq=9TcVvNpi4WJed
zU!f=@@2Ovoo1H_5n!0mtzQAV$Y-A(U<>lim;woaM<+L7&g^JaguS6{33Z513Fvr@@
z2ud@q-S(zIo|QE^N9gZ>ry7QOD=k4hJdQ?lVxEAa6D6}8<;d1q9(Zt$W9n*J;K3u*
zXS}}b>m~aILg98<1{rKi<Qr|qV>&MIL~?x3sY+D9FT<?Gk>dtY##G*9j-tLXq*d>l
zj=C%^rweP3T;b8muyoj=4-4L0Fo74|=~@yJLr&$!;4Td0nKVB8(Oj=ODr2%!7rUfH
z36TqMELVaBo+{8(zwKut6x6{nwO=~*LYUfPT}g9#BfaO(Z;2tOeA9&2)UbRUGnH`(
zL<ObriBZIH)UO5Q6F`n65PAk<lEcKHc;BJJT~v#n-VsV$g^z6E2-V5N!aJoaH4rcj
zsZ4v{QJ^Eeqot!wBMjB1%F6Qf?jHz|#QW~2SX^c-2fkeON_k%X<;2||Lgz9{DG_-n
zcd?PXxAQWcOAoYnmK%?UFIo}=C(yO6a5DnK68$8M$Ns$E73EN`^cp5kuZU>3bGd@{
zC;b@=*;ml`Q0DDL)JpvJ&E+&kW9^s8!q(Xrn$B!_WeTm#L>DPzPa58N9f{$N@NU<L
z3>o=S<l<=FxKOgTiB9*{@BCUY>!;AjqwTMBX+|OVn^3rcbHUA}hsX2Tu5bl#h|RFP
zh3-AkvZX<XUJ?=Q-=g6K0s*kRI%m6V#q|3}5}Mf!4hRiWUNB{`w1YsrS{6Q=3raPB
zW52XRwci7&*uK!mUh=AXvv%zku8YVfWl^GW1Bm|%g!>fblu5@Q+$;9)S~7Rj&~sdw
zE(-|Qms}%>!=2-C$Wb1kK?i=)pri)sb}E$xa6F}O%9{2s?;rTgX=1U!rJ=9&(%1p3
z$N3F!Z<cA*GjrbC;uTrW#VYo+GuIKWY4;Vp?6$SksMnk(A%&ji9v^RMdQ_A5xw_wQ
zxMgvV#a)mT`>R(qvfwqU7mPF${qt)`>1wO5b3jb2e9@p*bU$JV*_cx5;b^U%@+iIM
z;Y!JE#QPh2U(-1auUWPKKh1D^rI}cU<I`#EelV5SbtIeVCnd&9NBWLtu-oIfRpv-R
z)6KU${o`k=vQg|+1l2AaJ?>W@eZj>I##3RY<3;aOSb`2me0EY@t>WZr9KqTOYk4{U
zHN|kE>TB{Qe5+L~*^=K9Zzgp-yN+BbE}#6>G280EN2E;<=fP&t{U;9Gy_(B#Vn4)s
z<?Ci4e1aRc)=z`RWKn<Zk^KmB9M@x`jQ{AD^V*E6r6$-r7+`~y*fz}n?5jQA-TT@(
zc)WJ+;m`^fm7gUMWD(yk?CK-zQ4k>7bYs^)n^8az>c<;`s!~y=L-k9p(V&}d(Zo2?
zt*`Bawzw1P1m$%2s>2`60263Z@%^7>`_<NY{_P1X_-}sfgk6;XZ~S;2vGfT(X<m%j
z<j$u?uVs)~hp5_;fKh&zhwYp{xSe#421T3_A&Uc2a1g}lUz=&r0#2El5+t^502tU`
z#C^96!mL3F0Zmpa0Z;AkOQ%6|8piAA0e~sU?P*Gg2PH?D1Jyt9=NpQ1bG_K7_;5-W
z3sra<1`w@o`=FT~7-m4B(pYpg#$U7w`<A2RK>037^f++*!1*&^cK>ICep4I`1JdNe
z<?!*b$rW;}GdCF26U<UW2r~>P3YdTrPQthj#U0S&-5L(FGT<GJPYD>xYYcWhMS}ty
zx8EtS#_GQNP<^jfsP8aYGITqKQvUw*&IiyY45U@YmV*CQ)j@-x0r3n;x&{2MMkTvD
zW8t+FOaNy2q<jjqVpU!n?&jifNn6VkKIA$l^`Js)-%{w`?uMbNzKyNMuROzUa)69&
zm*dFeJJRfDHzus23R1ds^0j}>)ZdxIon1>dwK}IIHzH@_JBF%NcnWd{Mqufx-BE-c
zIF7FjwIimFnoxujDZbIh?JyY14#jSVI!1Q>Nc5`1GAqK6_`aH$QGxQ{TB8}9rCXaR
z+Ua^ng4dIyi|0h$#!gH^`zZ*<da`;z!b|D%MWyvhopbxQ>>c}xGG^F`46jeC#hW;j
z<9)HM12D;dP5@7X21Tfc4;K&tU7G6Sne5)Vqj_Tq5dP~g#~$al`F2;hc|OJT!(We{
zM)8v2Kc6&;XLQ}~Ef_*><tI?AlVgP6)Q>KdG0a)1leB!hjIa!VR5-+^S5kR?k|kMr
z&1!gKcSeS;=gUeLd?M5b@+3E2HHrE`hZZ^8mLEb8$8zZ>ig=kRki{m97v_5AG8e49
zmEPX(;g_e^iPSRNit19^Of2<8N1+J&HexBf7Gp#e8nk5%`}b4dALN6?JnT`o8jf7%
zz=DCrKK)L)j|E71Y|*)L$-HXAr;WT35pO>8nclc{1*3wA%#KxkJ907G7_)#G`#kSs
zsCa*t->yPgZ9<29Madc{1gAWe1w|Q9`}b2sX}1x=Fry#)rF+?z4P+0F^&-|?Tu~E%
z+K#+M{o83YDO&{w+A8Pkmk<FRI;vxe>Zof4{s2LPp6dSdg7I=8n~xFt_D-wz?Em{L
zbT`a=UM$Edp#4XAK$clzk*t6*8x0>6@HkxXd^3Fi^D+X-lxnC+J&}|L(i_1Ez&>NC
zi<prF_wwxynb1W}<v2{-24;w~h(18&B?jC274Tid36JzdC!ukNH8!P%axDr=g>;;e
zlDL*V3e|hQ-A+R0Ge&8$E?t%Hk*bj2R>4NRdeG3H)g6tU=p+xqrLZ{01*x42C0IPr
zvgIcDzn@Y%3yuZfsO*ktc#`YA9vUp59{%q13D!MrjC6uI7<8qqZ{Mge(G6#*(QxC%
zcpa|aA>V$9QaA~$Y38JXKO+<=<3zG)$u2#s-Lu-JO{Ra@IC{#rEvRfmli*Z?c~>eu
z^J#ru*%3UAJU-^dJW#xOs+)Rfn5<jcCn1MmMITlFT$e0S5JAW5@-F6lT)hkbHC9#g
zWdg#<`#9yjq6kUZTeg!dHKBQWadEv?Y*t4KEmw6{Qzj}*lhxPahz>hyJiNA!Scvb_
z?lnUlY4s6!w=(&&Q1`RR;4pIqs|CF!ao-~YeouoWg}x`}2}c4amN@JlI2U4-?VZzJ
zw{e`uzZ`AknwYYQl)E)1+IaWKS$AngxPO+FE=J2$*k)uibWD422^(jSo9DM#0HUT$
zXMMa$x1%Y2W8hBKmwVIjM331zY=2h`wm{0?X&uhjw6pp8lWDuP>;25BFTrPCNqyse
zt+z+-5{t1fKXJ?KMuC#Xq;9Oq&nFaZAFjxyFH>b*%dG0DVJh)mEb2T3!lnntxU3t0
zSo3FCtWH>951VS~TQu#AU`5KP#g<&9t;pW=@#)l6HNtbimMn>aX}+ykyzW>C|GuAt
zww;O+xYJ)GxbMYEf3k2=F7E?*H##-)UAO1h1>gf5xL4ssDHu6jZ1WWj%B`N=7WQ2E
zzOpSlwii^$!>QeJ^(iSO_wtmEF9yR4x5%k*pb$CP;PEr7K#*laqMFR*oJk_38Pw>0
z<3ws-1{{BL3B>9}Aei?QA#-JeMAm~I>|)Y9ddK+AP1_AQ74~sh5ko_w`NT@lx+WYj
zgK8B);v*PQL+(dGw)Bb-u2qOd;^Wk57V#fWiRLd#yT0!E!GP^R$c$3EcUEei5G3;u
zY6Owj4MEPb3rM>azLnG~_a*N=98S4f_NcjFDX_e?fk($}qCMQRD2|{}Q|&9D%=0Y?
zuO`3gA19WU_a&z9TtLoL#EJ85zFVz4Vz+MxK^uc&4JZ&Y1|^*!j(l?WH(yvfcbI!k
zy-P~=$NGlAO#6~i<-Ou~b>_yV#MHEhJFo`$QDiU2k_$=!TeA=fukjTK;-a>1Qfz#*
zM|+CD>A$)GCD={$Zp+j`K5{DVF@Yq#QB$Iqp`)k7sb=$z^;Qk)PF?X3#ZS{Dd)kC6
zG0s{q%75+6lJ(&CBbTSB!qlF@uW7C>X{PFj3)53=#fyr2gN4ow=^*9aB}qx6x3CK%
z$5ZI_py7dWy196<M&%1*^UBAGsS~X>t0X;OyEMici((Ed=$>!4_mHS=U|Xv`Ab)<*
z^xo;H{HWYK4Oe9r%BR8#x^eOrRXCxhZ)Z9!gfngYRPX8XB~^13%a6JAPesR9YnhmS
zGW?V^ZXQ*jq$sMvgA|oAo88i@QXI^D(_Ed??fW{fc`9bB=@cX2pKNr+oCdRU-!-%?
z^~}K!DqmbsmL@1a=TF`5{}`ms?YGQAUp{437@o^IRIga(r_B}ccK;d9`$5Ks-~VLz
zqKmjNhK$A1m0M3zjQaEm&H=N*rd_g*muhbHq?P66%Qrj5uEss9E`Rmx$A#@H7QJDa
zBm-h_jlP}kyr)WZVV46(k!M9lWYuKQ!Y!nN*E6d9jq=vCUV;1GS*Ppek23qDRC)sN
z+lTX`tmk$rQ`6nA$R-3ImNJTSOi#>Uu^OQy{IKlj>3Y4!d^oXezkHt-0b^N#m#@n{
zX4NCPVT^yN>1dZT7a#Hb3nuM-eYlI$S*PT8<<ie%R-2-7{B18YBT_1T@oGzAz!vh=
zCBIXY{y1<2mr)Q|y}5ifXHZStn6=y~SWvN3;OaN))t=y-?Wb#Mwdf+pk?6GSshyMh
z6AQ(;eJ6`6MFqMi^Re;f7E3ktnGYgaM>uetiz<*0OvT+cn5s;i1(43`kXR2rR_mGB
z6_&4H|EbwoQQ1LNV$xoi2N9!;wDt%Wm3JBT<|8J2B9567_!G0QIA%DM%KfB4fu2_<
z#*3c5xpMk#uKLShu9IER(fP|~?C8osEJjC!Q!?RGv&w>~{`O1|${7@r>_I9;={N|@
zg1qU0@>|YQ->rxdq&7c-0>^veZmgx80YXT<z9kI#D2b|f8qZ0sGDh#*D+kZ)NdEnq
zov9a_J)qj;I1FM(Cs1x`L*q4_w=a}|hti;7)USTAU+qIW-~qALK8pV$=+b)@3|$0<
z3C4nf4>wRl{VHukuv6;5_8bE7Wi@tN47kl5VmS6wN)Xi$-tqJA@nk2M8f;sU`4xKe
zyghbDFPd_+Z>@p^L}?uN76;}oUkha1-(r6GW1rxo{tArI>fzg5x3LSuAZ)!D8?kNt
z()~5gEmZL&PRUp=sconIdS9WKxzc&{31rpXU^l+9oZ?%2Ot}g-_J{~yX>izz)!LXS
z#gN$)Hoe!%gR#M5hl7V&m}AcuI^BGf>Qd#zW#V&%oy5nhWHzW599?#b1_^G*JejMK
zvKOkjA+9XrzM@}IS>%5RRb;}#qaqplFd&!5DB9`cLvtj@Dh+zH=g!PMhEF4en0y@a
zS2@=g(}v9N5d%6(WY&I}<B1`RGwN)P%>s&TxgpC{xI*6})Gh>5r2^736!YBMege+s
zz|oQ2v+k+2Zp@kji?Gsq`Til>vALjM$|7Vld_$GaLFEb@1*L)S4Q9(cH0B^L=DfG;
zy+G{U{p#Ze-5HnkrayfluXAT<)eO2yT2YkOn7?yx1$*C&PaUBo4IX#A>4|K;jpu1R
z)WkYb!}~efBrqHboxL!AL|>EGI*B+om*Ze$rW0A}S0@>F`|-9A$wB7b^qL66ee=C>
zsxBp#YI30L$#!qk8|!BxOsv5VnoM1dR2`fyVao73F!Hl6(_4<v_qtNpokzR3TqJWY
zzTvgApg{eKcJ%$iXqF%r9;xP6XN<!VTue`kq}=bU?fATHuO&a#brA~@XKQ`s2nNd5
zUt+jrrSorg&E?ey*ZT3?%hil1U=(_9%b;w<a1|NsOf(UjG|Cyn@SQ*?2jxff%0(?<
zouopR&Z1IYps^9XW#~XyAwv!N#pp?H;~=ujMEH?;$AiO%EU(=PW4!s`hVfu6FKY(+
zp6Ml#r4l@<wzMM6A5D<2k}ob^6Rs#YI^Urf^<(Nx$}<n4H_*mck9#>Cu|l6!l>3a8
z-reut?%MpBEYG)`DrR1>c;6n*qI_b={`@hkxfN$;_v`vBX<Fi?26hr_Vu$O}BxW?E
z!^hhd%w@^a1m=bv_)7`SMb6^ESLOWn1tp#7tX7u=?33=DzM#%k6?g}JR@nVwt5?P~
zD+M^2O=R4<pp_TRsSHa^WwUm4IC_oFPkGCtFYOwmRRtx4H+w*Sn_t3P>mbMGnr>yE
zy{~mRqxVfhTSoSrSk|u$o#F&tFR_5+oHvaEi$|jT?-kw|oIf6U{M>mNKQV!=no-3v
z!qY4i{Y;uQ5)>nEp2wd|@(Ne(YA;eC`>_iIve<B`Dr`lLNL#j7qX!WaD-D*atL;@u
zviPwe$pT^w^3&ty^>6Mhfd^aI-tWD_mF*lj#_27E*Q|jL`AQM?M@?i4wriq_b`i?_
z4m_qSFHI-HKsT74&YyjebSc8YGCrRaYNvhtW!jZBk-|c9_=N3bbspJ;@Xltm#<G$=
zH?(1ixlO@%S)R<I5KcTT|2=#M4^l#1>>Iv3-Y(_Ay2PHzLjgkSAJFC%kr$6n-`7`o
zb7frs`v^N81Y3<nJ%?>F|Iyx+6?H{cR|R7G^FYbM@w%f<@CVMI@CJwwD7+E3sE6x;
z@$36-L<?uB2~G=(Qbf^#)`q3<zwy<RsH$RVM(lXe*dD`Dlmi0Re6w5@x43*-EIoW7
zf(J?W?4j$6(Q@aB*+njV^Y@*w%+C(|eE9@Spj@_%*3&gBf>OCzOsa6r`CH;)XdxF-
zgV3W;vKrS+C8+zoG;1e;<cLo^e1apNx&X2(HWf`5%RklYrirjiETt`a7@k{x`o8n&
z;OtrL$@qy%0WzQRSs&ZQwf+RDV`gdTg=r3F6?@IzXtU~!l&bSSfA}%$PPDP$nZsTT
zWPx7P2#T}_eC&Zj^cI3jl1mhC)Q^>wL~nr4BQ9j>e{XW=R2-|SJXq54BvjL+r|?+T
zLg}}#i_80zZ=Suzzan|yUbCZ$<f8iBmNs=I=ob>WmH#s1ba$fGDB{he-&@0o7F|pD
ze;F8Vkud}Rd~-(hE1JrJgfC+$o4X0Vzob_#(P>f6lzEp@iXy6fp+Tj9st$mR-JdOY
zrr~FIKDONrngbQ#zt$=IZ!H(zl56IpE?|ziKWeY%=dJ8~av&bbr@>J4O(i1LM)mjw
z>yvMH&YpPTC)R|r#r7xEjO9DO^j7-#%U6)l-S}b5!hyBX<x2^5Fw){#abRd(eekn@
z^Utn0sS8m6LH%>}K;BEjmeL0jTCI<}+C;RYQW@nqvn+Y?5mBg~khGXgErUp7OBCkX
zJB$orY;h^mz00Vqw2+ug;HeRN;vqa1k*axz$&O3#3TL~+VpFB*ZIhUm&`4Ei3;s7z
z{u0_j)FvpTBpI86N^HuEEy>bcL#|%Xp?7!EVIXSP+)Oa+-e`P~!lIn~sld_A9fds|
z%5unu?Fa+AdA;wE*jnRD))fB_JKBXQEnTJ~2VVZT_H{rY=A0_={k;=MuNa>26YKaN
z$o*|8KT$iv;c$dXpU?U22k=kLv2XD!uTc5Fh$#NpeSJ@{1D=O_Mw2t_V|0HM5k^Kd
z#q%wGtd^CB$4&Q_989`*`<S27ng6<p4p}xygBBY+&O4}gnbXVh)33guxX^ej`1Vbm
zr9(j9UbU}kY>Yi8`!@Q5s0IV0d_p#&#w%_Jf<UL9`tt+o=g38niqfla9(SifAsTp*
zKZ+k#V#6C8L3QZCEvjx@CaT}8W;@Lj_D`l`<w3GSHJ#g#A{{b8EnQlN6J^Y)dIMRg
z0i_=J`q%2`=<XhykpxYJx&D5I)+gK_JJpb7ZMun{TNq9_IWcQB^cG}oyAxuUJP0+0
z#JcP`Gen(EP}Hymvd`$LQOxM6N(n)p*c&(%)+gXYfp@HCG$VDSU8m#2C5qQT3BFA?
zN|S#kRhZx0c^0(_PaA?Abho|P%X6y;Uy)Wps+*E)F}wP)mH%hip;v7qADC>9Lr*^m
z;+bEb{HYz2#N1_k)4r~;fcwk=rqt)BS`*y%jB#ORTpJLDoJ;ihnpzQc!fqih_>yw^
zXWqeK;%EGgJ#80Q(br64utgd5L%*DaUf^cyOj8SV&QDAdlt|)?-y~-RZi)^!o%71!
zTNt%qHq83mH2V76w{uy>hK3c)^CH>>ow8nI1%q~I>u;n>W*#|nL$Jo1i@_&db00md
z*so20qe1)0d%jawCDYC0p69?Tqn|ECe4F;Ktx^mP{w22U=sXlYd2WN)Ku~<VfGZoN
zz^AiC$nsM4h#hhCvC<`wSN*z$$=Df0%}Y3M?^MpfH_jB3DF|11Mlqh@rEq6tT{$eh
z@U3fMlX)ULlcpGx?DMC$rFoC_vD?6z+?^!!yr%JWpGQZSbRNn^v$k9ywHAvkV-U;X
z8dQ)dnkZJ51rJ@^CZ>YVSsHEu29QeSah=qma4-kKiG~OiVG!PJHnz6m(*p1Q{QEaG
z`H9c5D}5V75_+VX4y$=j`_{DKo!gOKR<5MtGo~Kv0-trp!x=}km?GUZs@00)mhakh
zym>eM^vH6CGgAv4>qVix9+(-<{}|`L%!Q%?m^j>cxQ3$f#~<x;)Uj$`u7Vy(ObWi@
zqg!!{+04Y_SFFRVRe?{3Vw%rHC5`j<D2INuv*PV>mMQ=iyy2eLry^2Wu+Lc)iRSz7
z%g*>U2qk$%A)4FC=V$BDJK``l6#jE1$WRt;BFIOtZN?L$3D>|=`YHDOr--j7(JXW4
z>@K~>Sbs(q8$Vr~4=fCMbWu;${Q|Be_dTC6^VKIK*SGb(lwY5hdinWh>Y26_@63ua
z*tbh>xsCE|L6I?)=aU>n->q*?>YRe0(E~LPp;;w*+lKM>gEev?!4sP7QJR)94`iRT
zrYw&Iw2i%SnhkMn_2ooWIf6_FB5>?5D2b)RjuxPpy>Ad^o~I68%Q*hv@sjU+?;v0A
z*?h-PUeQLO_ea!ERX!!48^#9pC))iBmTavETlJx^8$CT{O`8j~#&d^%+-H^KX{|Rs
zaQg_O{u^mko)_~*sRt{2Bp=5cEq^`kdo0uF?HQ6mN#xVwC$2llfi%i{6-wBsUW)3m
zMVP38LWE0LkOy7voZ*H9=apV>75l6aqNiB4xekw`vrQM>u=x>p^@Gb+8Oh7Y?SO>M
zV&aM;X3*Z5V2cZy=cMWkOejm1wNyUT=U`3@e|Kp^(e}NoffLpd6MEh_%DkEI8t19y
zv>2H|7LNUxdb)~%byKc`nrh@_h;Y3G?=HnSWG&lnFr?V=!|**VUG}5Ae$~jh$_|+!
z`@5%Nbly4N{d{gr=8?yCcxINec5F%ergTeGLM$9qw|w=IOy3Zi*%Z_lio>GG-x^2{
zy=|i(VUJgep55RVtALY?5^2!k5<&(wn4u0vK7+v$m*5*5zZDI(6KziQ#gw4C%3;jq
zFeK7`pYM^bdoOg}4V%@Mo}n*#Gb#DPhCQrj%5^pTikT;0QusumBwDKjo<F*yuheXA
zKdSrf&4$~VR9DyTHAFM!pRg-H)i`+rwwh8!Py^+YtQD$)+D`EAF<<{Rc6T3Hh>-><
z1HVdS0&1%fKYwG~Cy97}^3=#PSQ<(kjUPgDqkiRhgG5*LXA=0Xgsx;t5mh!WmMR5A
zDu>TF>_WT%^{Eg$J5PFt$~4^l9k<;|(&eRgp;+7nsb_q2{LZTF0PYNcw+}u^J$M>_
z>`zXNsfO`bwE|~t{Owze>9R;gyt;Knuwsa1pp8hR`bD9><t;J`-7bs%*B!4S^X-V4
zV&}tuoe2{Cc;ZirOSgS;w{SJh!-?4B*)1la|4~fZk=X>X*jprcw)4?0*@odYe*)i^
zc@MKm-v(cql3UyTyrsZR9ir(D!z<LPF*w^Gz&_A_=Tn>2w5mv7@a2d?5ICb`d-E+?
z?Kqy61UJ9g=R>_=z*IiYufwoEUzyY0w%QE!+S@jrxL|-*`<9Qq@d16aD|^E{_soy#
z>w!Ywp0PKKT1SN(VRoKTdHyIe<bEO6Ttcd6tLXL4fwd>cFSfmpE_s~qxMpf8l;B<5
z+YqmdFrG*6^*un$8?)>=R%<+KQc5sN<x8wcsz|msyHTh<LsH5yO_QmaNl`1ByBpaH
zSCV-X9xg}uv@Uh%myR&@HCnyc+;p8tADy0-F`s>$TMP5P)dR^L*q$WB^y|9yR$_86
z_gww`jkDdtR*$qKElbzTX;7rGIn@>&OVDDnIe90uEApvZY2la7jfINHE}w92P=0Gr
z{vZmzL}MM>-$2!&o3N#X#{Yhx^12*(#kU^5>JB>uUwqJoT2B+(If)tZ76KpbuSEs=
zsu5;8?@?7vq;|HXD57GkZks|xx{L*E-ivtzKFymGC+6eHe6%PFx3C~rQXXvGIxl`k
zrd(OTK<^!CuI&+WBdC&2hbS0cBlY@HOlHa;*_Bu^k=7@eWL_c3%vyzXR+Qmb+Y{V)
zK)3kp6tH%bh{;bs(~J^LS1(>DO!aa_*py{_O;THZYWphF=%dJiHB-&c3r=&JXMrt@
zMIU+$e~Bs{3oBTnyHbQ7DQvGvJhka1DiA4TI=cC=HBZ$>@2V8n(ux&Gz|co`ES0N}
zPT9pjSwHP+{mFf+=4tU+>`44+x#JN(N$f(fYzJx;NC1yP)H;5NzH*)Mb~g8{+B{-d
ztL(s-VY&Z|+>JDeRkl!VxBHK7V6-SXsQVSiHrt63^3TaCpB63|CCV)of>PJxOg)9S
zkqn~=rajN5JZ*mlP2t216|DsHQ$>WEqDN!%G&A3xWyj{t-zm|1Tk-{yULomy1=LYm
zs7GQi<3|&~w;NPj9V^Q1+b}m*@RE>wP&r^1%fV9fc=5>WITgY8wo}7uhOIuQfpR_y
z1W)|=IeN=nKYl%kV&J*w)5snxI0jY4Pd)B^<7YvIj3IG@@Y*6L_nX~1$$acs6+A*5
zecGgFLj2GJ-XqDb2rJ)a8kAojK@#<5z;D$o?O)NY>{PtSn`_?g`>T(Y@sx-5YEahJ
zN5NOTdk}Edx6#@**%{ls+p6XPY2h)a(&Ub>4n5x3@)90EOHn)EOpcYpsH*FV0F!K1
zFD5H&HHbcG?H}g`Yx$piZrh0q{Aex2B<?iz9?#Yn@B0%)SI#w#4K20FM@}S)s1Pg=
zYz1QOFs&dH$H<PjeF1F6z@k^M>}S8SjQj;?_U3t_8|jL-Q&hcYcrBLAU7_}p^+(U^
z*#4cCOQ@J!jyHQv<!!g(;O8&!x>!htf)#2Zs@M`9b=4bV*}ZME7X~FW_GgL@#$X(!
z(6Yip`hv%w-+6WGhLS>G-DKWPOO2>oshl2TafOAWWmfZ)oyYLBbH0+zqPnSPzLhk@
zL<akXY-uPjZI^ghVv3eVXNMfO+9weSs66;$`*^n7=E<U-LS}zo?lR?*KMOMp5o{JJ
z+#?Mqu-^h4zj+7T2!W16#w)f5Tz9S@AIJ6*S`U4RxS8D1J#{JKjau&hN>=cNJFG7z
zEDO`K(|%!jl|={p9jv_NcN{YU#x?C(FSm+2Ge;NO9CG^6fRQ7qF;D)wm1-32@PBA~
z^LQxR|9yCbWJ^S{PO@eRWhrFZkfb4@Y*Ps#B-_YxiI6>nJKI#YWEuO;kS$8~CHub1
zjAaaFrsu5t{(Qgp=W~Cb-}8HZujly-!<??UuJe4K$NP96@8kTI^fW+MZ2e28TN>(X
zYPrc{NQrRlK<%@VkNW8!MR~H^<0>nqw~@OhOLa5QWHRDF4bT1s>evLkEAoJa$=G6o
zAXBgGwetRhnPoktqs!fIHaF#%(zo_US=`ovt3#q9_T^8Qbri$WV3%lr{5t}7<3RZl
z#8{$o_3)xkXbggPkm8S+Oa)sf!V=Dn4luyOL$*_VXG{x&hL=^Vb3A8)6r<nV_5LtO
zm%J_h+#+D#p8B=!7$r}grFBY{dxf_yFeByG!0zdiwp*&t6*NL&Un60&G0rV#qeJhG
zTWPT;O6#gbI$xK1lcW4F7Sy)=pN+Byr<z|+Y-%tl87XnoKChgS3vpls6^0a?BGu29
zl!e?YD;;!t7b*&uepG&#ORE6JL}>+YlpugeAWi~xn|u2c6nT{Klt=TJ$_4mzYsi|=
zn;$}@{rOXo#tt2lx!-7yj=nmZNC7mg|0xzw`LCk|ystXI#y5=nH-haEZ$tmCX-<Tb
zBnHXezTe@*vuMDGfR@b-aWWs+&rem5K*n}o70Bil$BhRey#6mnp$th0A3q7`n!GXZ
z5KxO6hT0v~LDg#L=1<s9n6Afb8cO(JvMJf7zZ4OgdaB!@B!%~a_$OIT507$_Vhy!S
z9gWKN%R=`{7z{-!7F+r6?OpJE4KL1nM+yK0K6|HAT4y#Xr=8bl#Dvx*>*G*HHcBpH
zNc0XlD@~7XSa}VeE{4e-vv)CB>NY{OTG<n=y&9kKwhXV<+&}8_;b`jR8M~l!odRNE
z1eeBC5d!}+Bh1GuKAtjF<`U&v@v<^qDzPX1{fdq>=se7(V{x(2oG5ZEOj~|tl;hxL
z`C)u1>FxemJLP8&ojBup-HHnm*^<x2B3Wo|Wrzs-)8uE>V`$yjVC2g^rxnnyIJU)O
zM%qq3^l{rwX}3olg|DJT%s*N_Vd|{;tbahR^&*?m--z*l*`@sFS6UK?^8Q4q-4a+7
zq4xOz{nEt&^50-`BJw$61!R1SjTYMA@vi|`(Ms*Y5tWgkm0k4NLIcfD*zxE|#2x{$
zC)Y&>w5Ai}G$~L_FDMPB_F}Jq(zhaRPA0LO5<3Q7y}l~diLfvH3FH0Thg+4o{}WcS
z0xA=e9ZtJC)_K5wV&^s>=Bt@t)Xbb+oo+Qtd;AI!2rHCVRPQXRD>-P+-Ph|;c(Qy@
zlZg>l#yR=W$9}H_JG*Xxe}OrIcvNd}Idp!!-2v5<5Ff4Uj5#In;~{f3|HcsfCAM}l
z4B?njny~DHJNSLyO(qv-Fsv>}9ZaPuBzY191q>S0j~9Zi>w}rDV_BjwC1#^t$0p>&
zP)wBM?dY1duXmXX9$UdKl!F=PhzzQ73dSlxEK21p+!nk^TJakTS6+5}kbV{yH<yvu
za_7faxzWo#61O$~;JW;lcf$olQ#>JE#jq)Xdygw`!*-y&jA($IQ~X-&DYWKM*Qfo?
zb0(qzv2tAEn|<IQWR2iP8&AEU%J$3Tx{mQ4Pm5!1UKSbT%h(9j67*1bIW$^(@t!9Z
zOFXU;Q<Y#ih`q8*iR4Jn&ltp61Y=1#AOW+T1c@8kAI@Mpj#^f!=obxIUTBObVysNZ
zjK0m9WLv+&CfIN_2|jopAav+JnLU;;v6h9$G+W5^4|m>(x{BW(4|KD9?Am#_<XLk?
z^iG2ff6sNoi7=)YtMUqum*qF2r#O6Dd=&)+d)H5f=_D=_r**WYgVGLsu|2m@lVc-F
zAinYLjHlToM>Jaj9))N`nE15LIA;Hh7(z+O`rgWXy~nJz*5p=$<<Q}EIj+a~=bDZC
z@kO>SE6aeDGvO>C*(y|SZ&T~EQks~W-p-t0naNP84MGm(G@rRb4R*;|R_1nTsWQ_`
z$;lp3F|8Vxs?>XhDS0107nYN+ZnEIY_T8)1Lb7k5^JcetuZv^=lgw8LCr0z+`ORk~
zSI;cuI}cP3h{YPuYuPp3vIDt*1lF*e66cg(qdiSIr8ssTTO%Ula^Uis;zDXD_1=y7
zbHbzVwIhu#v|nrZoRjO@rmoagqYq_v+GZZw0{pIapJo=rkZ_pmviR9!FiqW(A#wf>
z$G^akxjj^;l|9S7X4!eQo;na=0^9(2moQ<YgjHdwVUcxDNNM{gNZ6^@iD5+}7T;~V
z&2HFmv@)A#)P%>@u%Atc6K2X?O`AJ>Mrsk{F3KqCt-!Y++Esr9%d%pnv*Y8ZO!K=9
z6Jt>H!hD>N8oe<C<VMv}1k3e@Igl@c6%}GRz$ypLsWZ)PLnHCcHQJ6<7J*r|!@60)
z??Uns#aDN#;)@Rk4f~Y#*T0#KdVHpOb?75ZC^Vi{z=q6Sg_NQ)VF)s~>Vtnk8yI>|
zP24^cdbm-)u)J5eyuV{CC8PKAwPFqBV{1=y;E4^H%uLr-7v<h7cV0@yUk|JAB6hCI
zwjB+)ZE-lN6uR$wZ4E<wi)STb(rVZ|-j=3jWmuqtn$;8?p47>O9+&2LG_2d$J|a`w
zI~h^rxgYiQS{{J*rAYr8)0s8+MTkv$@64sF=5*5(!Irc4v(qeg2j93GdNWSmD^mZi
z7I-CG1`W9RRnM8u!z<&*iw0dkmv9m+ijRfZyLh-9k366LswJPKrs-ZS<$5nzpco#8
zd)UcE@+=LBkx^gK>N$4TrY43uE-T4JGvk@I$rzFu(LEC$^Nrt9G3Q;NeVk4&YGtph
zcW5ec?iLxsu3T{;E>{#fh3?U3l;zpvFRR!Dx~}Nj>y?-K4~^NuuJtN}&^#iKo^foH
z|J*20|9pCTjATHxB1DC5rPq}7%ADx^YP9K-`Gd-QN8j<7a<KFdIWrwW2D1tQyVhWY
z)%r1XRwHKEs4ZQC*Um#lw@LX~vQp1?B<&@>kShg;SjyQovk+%11e)D%rAR)}n>P_~
zUAURd$sZq_s&8ISmY`gQzZeGk2Jy;k*7$*3*PJzxs}?`{{6l+n1NJ{OR)n8rIqP5f
z?QDkSzOeU|zFSV>jo;Q-mzT!xRK9GJ`Evc_9sMg-e^k>ft($l~v-cE6I_Nrf&u@_s
zgIW8ZYNeW>B8I3MVJk1^4@>dK3WiL-cnUe(98K_-=dq2xatv_qKF3+ZIY_I{^YII3
z#rq6<vl&+yo-Xx;ZwFN3k)hD+qdsV58AUlXxDF??(^*oP#PMv@2IXH>WNbqx=t}C&
zh6ej^d+gY8B<ZC1uP#S8#or0>tIN@^pEQw8vO-1dVY)Op_4O|PDPH8HA-|#yBQ_#T
zar=jXXkQ2g2;Bx5-0bu^m>9IqKyP&qn+7?sgMFwE1e=06%m!C6KoW0#zge(S!0tDh
zPCbd=iBxdTTRMV1NZnI)ahB$@HXWfe8sn3CQgp7xxdXjRJ&>t-I`2h#&+8d0pE@rL
zvca>TB~9(qJo@$MDP8Rk!$kA^9<u(*@%K1aXzClL7(+Sw87xRA2++$PK!2c$?>A@*
zDGaU+OxT|=L2NTL%{f1@xq+FGrCz0i0(VIC6n2*YSVo%QpD<|z^9Sr0oaB<Vx&V5r
zHxR%R5h5%j{ywzNpF_ViNP;@sA#dF7k^hZBe!~7^l)o<U|7jGqUzf53E`<R6{r>vT
zzdjUZ3wadW&7BGIvnW#F`EoKjYX_uCui)exQLIoWC`XZ45WDwD+y7HVzRn#qWpPAJ
ziZ`www>2R~PhKtQcQviR=4Mg*Y9X;lLuZr*{s{1=X`nOiR@_6<KKUjk_Rc6?Qr}Tm
zv3+D|KAI#OMm=FgHVkW=K0~@GnQY>{Bx70^|Jwh<vIS4CTheoxag3##<OjXYi~04m
zug+-Qh&9gf@2x=)4t%2;h?T$Bb*Qq@K;NkpMSY?3gXuLh!fasSsaZdet>4C5KCzw|
zy5hiML^vfPa*h3xxcKu{0|R5$OtfVSep%Pe1A7NKZwiyK4Ey5G{M<38!aHM(rFz8n
z-o+EMGh8S$&<u9hbw#<Da5#W#`7#itMCyobh{lR!vPpB(9o%j`-T`wvLQ=g}TD6(h
zQ!+GXyh)o^bdcq2&^MJ0&z(H^V+M+!EJ&8E2DaDmD~ag7n(cUv4T3{~Fl(riV}nB$
zeYMX_SLf82RO_a#5?l82GfrjSXWDL@Mqk@c4p+ZtP%E4Cb$;G?Jxyn5(G7mcR;4L0
zf2&qyDe|dxnU?q_XAv5C{dNA@S)@a#zRTm_M;9*6yjwS`Z4D%QxulgiVVCsA^12^o
z`A;|sjXbZt{;EmPJpyb-Ug5k|;(^qYLneHto$QN)1WKywzIK_sSxI<s`{Tf&YO`5#
zmfyLRc-6Enp%90e+Zu;n9snKzdMYrfPSdG`mqPs+@nhs;1z-5mgB<w0dwz`GoWGSu
zmuxA(*d{Wc-mNAJ+Fy%ml+}g1*Ri4-O{}7Y>>453P~2@nJ-_p6kz;nIYYfxyVWF52
z6rOmjTR8rdwCTgxAF8v*XIU(1#c_pil@)yj(Z;v%z2-o{d+&ip!~<$a;l6x5|N8j_
zhCmn#o5`YM?ukBq%Zi{=U2^w|PTV`R_{3|F!6(gI7jxAx*c6|v5;~SJK|FOslkL>S
z%V%T8t*5WG^7%9*$_P)ZJqu^06i(Tm*bKOl*`w!vZ_Xe#Ao(d0E3n8K7d6#6Gkl1u
zg6_TuJ6-DyqkT?&wY?t=P~mN$N%4>MW&lCR?YA@<KQpsKPJno4vWVM61pef83J4kg
zQXpo5+=~_DUMs(HuiHHEF2%nbmwvl0b+C~+Z79%M94K%pzr_9W#5oBylwmfKqJaMS
zD1i69=5s!tV3gzVI!Y04)tbOfO>tbA1(t)oR0C(A-1+1I1U2?Ry0dx$9Vy1IabB>3
zp9*X)qP2iOn<GLL1k11GKVf>fsLiadgTZ7GebBhf7u5!}M3Jtgf#wHgcnoNKvgsGN
zu9NMitKKtk=bn98tZU5Ghr?XTPtG7xU{25{4LF%lK~5lpo#90&Vt2-QSC%vw)3L8j
zIz4U^K@~<jSSU%<f5*}Bv+pe7@V$bE0Idt6Aek1Tp7y)oLgkPEE!PpPv$z?pzg<Gj
zW<8E;3lWm|z1J1aw`h`qfBE%(P+Qnzx&sqXmhfhN!j1SPMVZSz%Xe(-&$Am{o0k8<
z^1PBqy{?1?1Ybr@XtQNz14T&t+xU04^nQO#k5K2&JoPi%IUd|0k1smrbsa7ZlpQ5&
zZE}6H^O_&P4t2O-N>o^GF2fj}``M=7GFI(eQ=qO;Z$q|OJE#rpg^dxa*BIDTZeYlU
zf~HWX7mmyr3-;u!2bFA>slCV_xH&CiA_QQe<mQA7ZlQL9O4s%i)(p(2$UD_PVfAki
zq>s}4!SDVYFl}EK0d}o8&-M6;&2g}$9e4=Z$$^#6fB%<bhp%+uN_zLPyZV$&%ox;O
zv-8DicO5+8=Vu@SFtGw1DnGzhB!;9)hA{{&qK0iLgXE7oUQLw`4qg(tggyWF(RA+D
z30O40*txrZ+y3j1OZ0xiblvx#!avKBxyz{r@O==+hQ<(7zql0~9Rv9R!Vk1A{FyUq
zfC&fmT>q9c?lj2mDxhefL6Avx2c`Qv4X*>`mwE<B^zGRwSr&m{>-cwhX)1LP+6Z?5
z>e2!D{>@ruD$4*Ev&?RSh;&0zqzc}$E!*K@QAdW%>~JN=avW?t9kMJsrtRa(sw)0y
z6sW=3`$T@D83}4VH#v>V{Ybs;D>Sa1<!wpe`ifY|BVX~5_T<?eSZgOtygG-in>1h9
z)7n;_@!!c?#2NH>8_TxrM;-078!iv2(GfA}AA4EbJL^?_cbmsCW_kYH+%WC6L8ZmD
zNbI538-{Q=I$*{ll*%_chK@(@jFWB;AI}%7?ZtK1M2mP@KL}tEJXZ(RZbUjKE>i`_
zj->Bale=!U%GX0@wD3RDvh9u{Jsjq=9Hc5MDp`4=8QNreic+e(=QWIW{Rd?|2(i<c
zmX%uf?+zwZ&owNcUXT=hV7zkhL((m+ufk?)W(5uBR!}xvQY**rx>3v2>m-ebRlqlj
zrA|l4PkT=kgvz)W_KRVz>Kf*`4#m&g^C@3-txS4+hlA^o(Y=lnlA8GX&?bWDV2kbp
zRwv}ZG(iFNxJSrA+i|NX*1|-Xx@0~evsR@6mhCX&kC;;KK*Zy9UbNKI9?3>C_C{|B
zve;8h3Z0?pAp%FBW1rS(K1tWqk(bcnjk-Z8qMle>k|^uXo7r@eO1T^L{RpPS%;B^r
z6?Vz$W~ljRxctZ4AG6YhDc+%feGTI^3~s6Abx<(9gYM*Iu}%9fJoM&$@il?`fl-EA
z&n=&BOyaZD2rc7L1l5@t68swB^qYKA{Q8albw`Dv(=ut1#{0M0c#FP{oSi==ziJ~A
z@%EG%&7CT(wX7L9+wfA^0Q;kOBVLWZL8ExR#xo`@R;N4pwC2}h&TM?%H&fCn5Xm07
zgJXkiJGs2i6qS|rn(BDzpi1ccr`yaArJ}Q5Ir}3#S*)&4W=^~gb&S)tn}RQcRYlX2
zE%WDhtTHEM!=IpYECAdl1QUr_@Pv<YJz*Ac?40}a7YOqwjAte9K0W_U%3g=C-iqaZ
zWMYwFsT{Ixu6kQJ!6?Eht5MCv!nDflm_857$IZ_N&Ye)mD|y)W6hOv{zT#%f3Cg#Y
z%N`HfKP{FtJ?^pFo6(}v@<q%tMnOJh;zaufBi9%23zQ5s4bY*2w=I)fESEDy5<d)Y
zbbgDr;%0Q=TX@nIiEau>ohz>3*I)gp=y_S0ikoC8{xDd3Xkzat%<uLf;?cSw8lzQL
z&{t#lal&Nz`qI<b*Vb0<GADziDrsXp0)-*X&oJZu3A`hYoWXnvs4G1T!OC_XY~0~y
z^KcgFDU7+Bk{;b@Y<*sYqOG{YK<2{&YVUFvv})cDZJD`6Iv;A4&1=v5f&2VL>4l}=
zpWn`dfLUt?r!r*_Bm^%7+@OO-)tPp)G)N=U>xWmg^os}w-_g%>3iP(cIVoLR>nJ*#
zO{a9iI*jg!{>u}CJ>W4|V0N!(HDUH<KxkQ_<04RO<229Ici%!iK*Y#OhoU95vBmH<
zft#g-;^x$oDyM1(9T%JqoB8DEJdMs7YMb};OQUCCnk~v!H5PxwleK~o@V1<GIt*AU
z6e&!vve!GRSdF!SF>P0_=*YYD*7)Z-F}Ef3E>2gfNL7EoQl#qhT2;75O<>=Iv|mp>
zPW@awD6lG2WGW?*>3@pe@9s%ASNfX^`b_T=#!As<_bj<T!3ArqCZ#;z_jq6OwC8H>
zODL8SabdKHwch3XYV_qOzXNsa(S+wE{s_+6zzaV8*jKd?zrIA5;Mf&Q@$)(9fW7M=
z3Oscxv6IwiDetT}zbV@KN4vRUd;IX-E9}vU%M5Gx38I3^$m7d}IxHv0&%eKumZ)$z
z|6;VBob>0wr1L<hs<=>M;F?`KT{l&w=asP|@ETJh9`Ue0UlundRHc)X<dvj}o(jDX
zZRRI_mB~+21a@$UMp(EqU;VrLbw5`+8r`f0YAs@%OaFx>K8O2Ii|m+IgWxG3!oUE$
zfX#-s&Z25?_^TF($@dTpw|W#{l1$ZhGA}`k9KoAF@zMDSd&m3R-&`1Kze=TnhQv1i
z?8~G7mFETiO8F?X`Wjqxzkttg@YBY<_8yus@jwyzi>a4uuTWVU!Tyks#!%bJz_ZWT
zbMOpa0|-T;=g(ws3yTCS45)+6Nu`Q|hGU0pXvsI}BD~MxZ;<L=qtkn?VmNDzADW};
zpGC}nugQoRUlw6|!xY4{AavQUDcPo{mZ@ft%9#~{xvhm@-(Flz2(V|(m5QT<ISD0Q
zXzLX3ayISGV4O&`Q_o)65xZ}aJLP!o{4>R@@oo_mx3|&GnH=v6{c08bO<&6kz1O1s
zlL{;4kR4k)&DBuIxNv2WrTBBjM>gErun_DCp|~_@t5HV2E8bbS@?4YFhBf!?9TUK>
zH5svV<vJRjdpNqn(K-)nzbF#XWJwp>lTkr3%x^pW;Q^tp^bqda0829;CFJ!x>l=6v
z`uqNJ%87$R`n@|jKN5C%ay3kGV~9G$0>vyV*V~w2@g~oF#ME28U-o|4MA?+=Nk*5T
z8EfbMOZ!8!&pQ=mCYmtZ4R4#h>sa5+#VlCf(Nd{xa;6iR3%T8P4|cx3(|0XuiY+8>
zi*k~V6p*VtWVI<P8V@KpJ-)_!n5jvw`Wc2S{^o3Nc7nj>*ERyY>B*aX6W#ZRm_#&h
zQE%mstD|DwU80^1r|_#;XGlid_n_YIzUjwW=-DaEVq&9~saJU?n&E<F(GE%}lNTNH
zg`|ld%5RVJby)4D>zDtacX<17eUhA|wB~z?l&HfT99z%Z-sv<Oc**Us_-Qls-qZsQ
zbPG|*E)5DD#*>k?zIX4F0;ZXDAhAQ1LFdvwz0fcgts~e-YM(zY?X0(qDlQ#c4}IAG
zo`89|mbp2Xc--<$-8TSMYIz>Z(?&MJ?j1Putgk@#?gpiIqZdj*eV+XZbGS*E-=Er9
z+g#d>ccRLy3_N`=?pOLH^A3m3b2<WC^t;QP|Fy%K=Nnpu2RZE~IBWE??1)`j_@6MN
zYX3VN+SWltmW!*$U!NCNb${OKzBSuB2-%FGnoQhY7z?TrU==0W!tv85PI?vesQOJE
zXOXy<MvIU*pJqf-p03U_)3G6N8x<9?H}DSUB|j8v)_BTy{>z&6!aJuM{xjR+0~b7q
zn5>E2Wz%@o_X)bSn3Wx06W%&5QWSQ@;#3r}4sVo`F~TXj&3O7Gn#<2u?(h%yD5qqX
zf$Cokp=QQpDF;tQDf{Rd-Mh`D?>{*t9&a)}^YXje;AC>VP=PA;SybZ$Gx<v9irlC<
zY2{Ac^GmXJ1KpAeflL9_Jj0A*<#pT>YH_w*vGXs|1eDD7$-O`lUleiUD!261Df{Z#
zk=emrOk;5C#O~>FKxY<g?@(WBqbgB&4PV4$`UDMbRlw^{FCBT(+)-2VV}ie0#M#X9
zXL-Vh%|a$bDE2$5)I){88&qW}0a)N~>tk_$0J>Q6Z;D+MUf<X1f0+|uvC!mu0BWJf
z*nOTFjo-4~U1lmPP+`0t{VnTF0iC>w>k_nk#DAqoy)r*xeX=v;r7f7DCJ2AHtH5sn
zqHr6GU%OwFGPo{svvHX-8udb57UXyN)E?-FqUugLp(T&yndyxmt`Vn?2d3YZG=C#3
zYJ8k8gm%0df8One;V!Sy4=<jZI;L_@iMppvEvS&J@OJ+C49v8xp46Cj;_h((?O%wF
zSToL?Ul2H}2anKa+s)nMrm};}X*QnbZo&<h&%nc7*Oi-~BXvUNT3)m|jFtV4mXTBE
z`Cc91N;nZ7d4?^+cYur_HMm%Unb=4GoiN78M_V};9fJK+S3av>_O5e^_x=ibi7S>N
zq~kf{pT@243GlRBQL8)hdOoAWrzZCqygn*Kdm6>3eSmzmSIwZPN87jAX{xMu^d7cz
zo&(L(qPj3#?Zo`WCA(EA+f`=9=eCAQEA!bygI{0=uJIrOoiTJ&VV!C0vChY!5p$ia
zN1q%;JXIq-Y!}Y8OYRBlMR=%z5g?Ere$E0xelQ)icL*ziSK$S6>;rs%<!2V)w<h4x
z)TLA1y1(oo*vZW<3Al}8ARoqNBT{airUlZDG`;unLT|X2r5fruNm@-fZr3r?t%PZK
zsB35O@{SSc+-U#&A)-}0l|+`{>O_NHAJV%F^u**&h?;bjZ20y%hs6r_)64ND&o8kw
zA5r?mVE$cr18YpuC0I93fAbquY9}TTBW5RtbejflMSj#Wdj?;*W<1bpsKIF<acTg!
zakLOzP6f0jubTxf_VdkFYTXp5z%?I0yh4#=oe=mt>%-jC7QnP^(P1q}qOGeTlknda
zx4~Bc33?&s<Ut`#mJ$Kh&myA*4v(bjvehHDr=hL;xnCJ^_PAY5C2)`a%&!9ekzZka
zf8|%YAipC1%C8vy=lp5~$ES-QB*yl6UvYAB@=y<(wy!Sn_uhRPSM_RgCVExt#AKuf
zbVrdK<9!RrYO<%X`>Yet(v7&CQI=S@-ZgmNek8MYRT~kNy}G9iIz5_w`Ml7%B}1k+
zONOIIP<F=Lnhy=`LB35<=R1eEPdAEx^F7D))f-7E*j@*1bY321<^Cgj<>jcdgqXAL
z1!>p6a$SnHe4$k%Su9l`9*a5ozHZ~3B)fNaWY$P4qvq-569>U2ZmxChPgdB8EQzOY
zZN`LJ@Zj@u2_|FcB%{)v`>CkyCp8<nmqvz;bxs+alE|rjF?@Zs9$NwM=NPnm{TR4k
z4}RnT7GfrU5H!FaMNB$k(ny01<Mb7z3>yMl{Wv?Oxo|~gJEcj*v0NZ?%7gQj4xROc
zD&)HSH6r<-$b$+DNm-ZNNjgRJ8?WQ<M^dju*6_Qlq>7)$N_rTDjhSYK;|nW>(cyI^
z?|e?~7%jTs{s~@vo`YN(Oo7)Qy|sVB@>NjOSC>%mL0^3;AVS#5(G!6BsRR&<1rh<x
z2+zdPe{tb3gGtcpk6CAmysP%%O_T=R;1XM-6G=?Deu53GapXJF^1^h)dJ|h1$|^!J
zMev(zPl;;Sh+As6z6qP;8tk5^)als<5!m5zH4Bwg9`RdyMB@>tVz$}Rb}Dzl$4hFh
zlDtjIqH0C}`!O)dx*~ixp$7Jr-}nytFMKCW!cBRqu@jt{d8K>OH<oy7$6`NY+%+R@
zE;kOvVaHIUlSp#9&LkVfU-mb*A9&j%_7T}AttLrpixD`CANj8q3lXU7B_Nt?|B|<5
zfh7RyQgNL}fsu(4@O8lHV&y0$&>Sz&$NdI`h<^e?7^MIAP2gW+bG}*NJQ_+Mc?)0{
zhkf5hFAhQ@*bg;>!(%1!(=!Hz_Wo3}GiTSe*dObKbIQhFj^0RwZMU7~cE0$f#tpWC
z_@=dR)Bn=RCzl!;8W!#Ap(%6n#lq^o(sOJ1B7KU7Y64SaPjc&P`hMk%;W11%d~vW*
zLPWl8T{f^rfFP`^<=Jak7C&$4l9SF|Hm@4zLUaES&93NYjA+^R<VN+K@zy$hi?h@4
z!(`2<hVr8Cogb0eUpb^CbVr5q*o~|;z0c%)HvN2;@v)^dpPx`{gYQuSHF`RStGc>x
zroeRfhmDwPWkh(wt@dS)YizIYqoZLA_l-V9o_XPQ;lvZOe9g%-nw|%0yqbOCq__{H
z&fB2_YkZAGyGxE4Q==<$JZYbW)!N53+3;GayC2lJ@SV-6{Dd1Se%1XuS7d5SK21}^
zbSmiAR%40}Xx|e`m3eald+{Kvs{HrV?o_+DvUl`L>NoHmB?r7KY47pRWOY$BYqHEp
zw%I6BfF5HSl2YiBQ@W}ytdnlQmG$U~<L2$vuNHUAlh-?+Es&4mEt^rS({Rf$y?uoh
z4wNT%q2i2Y!5yJH<}Zh@Xd#^I&&|E=)zDlqm^h_Jo>>Xqgdak?wCqStf7q7MTxO^#
zOJ!AS*K0mntUY@zGXL)N7R$p*QE#+oH=MVyLC+fPhxNM^yw>TK77I-64=`64nO||7
zx1rZ@WV(3JAO!wZ{Y|E^JozTs2Sm2D8Pq--Ff6|sx1RtgToAHf$NmNZ4u3MZxS7XK
zH3*pIFH&dQtNJJ1En_+s>a<(A_QC3)Gy6sO#*pa%ocaCdA6cRnnf~4?IUhx3lBE_C
zLBXUjsR`P1tH!><O^zUUbzAFE`-~GHm(Aa(14>l?FmN#=veXtQc4%qfM;*w#0~`=@
z%5WNJRUA}sGOOER)Y`m%p^z`oHZ$obOvMLw<pcCtX@yz=!pPf1vN{+E<$b@GN;^*W
zAt>eCcgVGkSLYb<%KSFO8(5N<EZ=!VV5n)sa)N6=*pnx*-4#_sP>IUEMelpa`yzO=
zF14$UV?b=vmv=c~;!&dU%cY$o=AHqf6->YbRBEElCpPf9+rzjuT&#LyVC{>gfiw#{
zwbANoi;i;358(Y(B<@D&uq)PIMe9ZB%WYuAJB&VtTK&>hUs4u>LQ2yVpzp=Nd>XL5
zQNg$)r&sF)(a*R@5i=w7QQF1&4i1x@C0Ae@!n?PS#VM2SkCXQXr;Ve2!mJRXzTgh-
zyG(UPmdu4J@l<r@D@imgUXG5+@Et)jG<lS%!@7h3TB@F5O^C}F7Ah~sSHzF=U&KhB
zFBg67ejZ^mq8b{(q<?F^f7#9XwlI?Ma<WaQjf~IZPAw9AhA+aSd9y(_q6Rfhzt0~*
zG)FeVzjygFk;k24FmkJv3*wPdRrn}!=ra`MnFhGmp;NvLD?7XiVGEHc4sY%Lgw<Pc
zVe>AHxDV%1NnbY%7Pff)`JUahsjB}2NTc8N6PAbifR&=e0H+wuLEP#CFlD*|pQR&K
zjF+X_0f~XzWiMUdKMqV<gf3msWs8I#E(K>M*{dJxtGS@`hHE|e^lTN}QD&~tis_tw
z=anT36yZuE>WDhu3WP8CVU2Ij8+#MU{4R@;du{nEH^;l<j<smSOKf^h2g1H{_e2$z
z;sH8%yK}C8vd>;RqO&m4LTcGEs$Yvv^wF>a)lNBRPy}3(hR%(*{|<YUQtUy^Ru#Ut
z9}HYuK{40=e*ifRzd#Q2Umyny2lMDZ<x9bnpfDAVz%x+L7|QYfH_ye_+`ut9M-9Nz
ztNkTT`n6#GQ=Eje$L?whf-U8~*Do&mA6Q9`VOtT^#?UPFM{6^Z%a?$dRrVoYq53|=
zuK3oZt`ONs!d`CDo8Ces8|mI^ZIP&{q%%Ed`HPRvZD@<cuA{UXzt5goP(D}bV(KLI
z6ZU3{=dcS)ZO1p6P4F|OePI~T6saMgYR;tI4<~OS_ZN+So#e&Bj8~?<TyJC}i%H{1
zV{m*ujuu*sB+CJ*`U4OtA_f8U!vaUE-u><^Xe9%_OQdc=;2+pUQJ;xZwj}m%Lz~@*
z^>?U#2C|%N{luOyjs=1LqX-DvU7^MUWLAK0RPl|V5)vj$Ro2?uyh8Os)H3WXX;FP}
zwQw+B{!g#0n_2_rA_lpBiCP8V3C3w%YXe6F3xDA~G;uk-xc?@`leM|F&3}4aBmR_S
ztbNn+)7<o@hfW;v$=OT(2@9ep@qrSv$5b%&=rI)8F^Y5#^&GdQ<$D~Ok_YpsWf8y|
zVBnRt10J`z1k_o+leW7~0yl-;fiy^1n37ot@V+wbAiC=2_2}`o{fh2sW(NaPf9ciG
z<vGn=&WE$k$;sP_%NV?4Iv5In`vRTRDNvm8Fa#LeM!<LcpSQ;pVuP&M0>RBvyOB5;
zSSNrMZcJ=)t~uqC`6zy%{7^)rMD!6k23ldY!IYQN;UWd4a(xmTn_?y9hL)Y!ri#1w
zvx3vK65gnf>HpF<(yyc(r84CaM7Z_5Q)K<2WjMXJ&wt$^Tn;2a{fuF%lR#(Am=VMq
zoetRVbxi7Cpr*YuH5>iPbvb`YfSF$c_7D%t{m0E&NuzJM{pkLbMz2$xXw_n_>-}?8
z5xhs<FO|2)jJf{(Nko-ufuhh+>K+$G@1Gx8>py3WTkpS~tCrUP@3Z9p<+Zs&e=dbC
zDE~FIFtXoG#wPvINiO-dntCvYpvioQ&zHqpxL1w+Jv!|=^;`GJ_(9FOn%)zY{R-zY
z%p>E=Pb*(l!mGSGCvXt)w(~z{+>!zD5Q#th5J?qZf8;4*`u8$&i*S^07|=F+_cg)m
ztYppI7awDCwBDR1B7)hDo3(jPQ;cjMdRoPA*mw#QeQO?yK|ZzLNuVBj4N^CH4iXKh
z?1ptx<j0KxTO@P;V8XtZ_r<cZAXP7Wh{H}^gVT=dq(;>%$q)SCa9JkGClK$%e$k^a
zXh?ALH$A$$IyO73e)#6bW2)cc`_P!ne}M|N*(f4dfUj-FpdokA4f1~jml1P3I}lL-
zw394>MPSVXV#?nM)L(e{_o+8BoV_Ow#+k{zrGNkX7?DT64-YXpMN13L5HYjH9if7#
z)9@Jg$cc%3o1htIGwr}Gz13l{@omiXa@m8zR@L|Z*Jtr*iIl3%gZ8@(=7NJwP`MM)
zhf-tgt_)Ir-P*4l;pv3Bbi?l8Czno8>;WQR+!#G9d8g9yL(BUY4+hWNoZwo6u57@M
zxk&qR9KSYce?2KVJt@o%sHm})L%meytbNTN!)k_aV;2>eov32Th{-BM2}EI4;ievv
z!I2Uvr-5NE{tNZUL`WSSknUp-qdld!_((7I3^P6=)vmP+Jo&;K9HhIpU%PNx{eHM{
z0}6i|P7+u4!&y!E@j8Wjv!|nzv`Z7rf^{|(M+UvZx<w4sjShT#pds%Dy$PARI9Jyw
z(t)-S2#Mq^Gi7?3RN^zFI)*aOTf`0!i`A7?znn{=4T_hHw33YWuc=+iv3HQg<&^7K
zEbd*QGJ-vTo|%-jf8F;RT+mx<dJJ{5w%?mEJuHv+n(NTpJ0km{eU(;vv=QCn3|)JJ
zEzwYeE1>=t0`Jx!-zNJ(vowGNY8nK+49Ae<`-5vB?B0V@3hJ<tzw`rf1r#im*G%om
zXkLCX3-!jAs`E@zaz+9T!ino&Hdr!wg1|^G(zF{|)INUMu`Ma-S)KZNmOOsf*C=~B
zi^tI5R>Ik8%8YicThWCiDm-mp6SJGB04E<Yg$N34q|?wEFEszC3&LOeeHCNlhbZ~p
zhS_KaWS^SWeZ1<`0Y@E58nP^CoOlj4YQPb3$-_}Eot#Gha)FBg4&y_$!0{OJ6%zEZ
zMjfs_ajm+{)79QBXn0Z!J#~jZMn9P!KCXOXYw=85szF4n7K4Fw2J?jB7nxY-bL@y~
zhf6~8y@E3>1|5>$2D&%3+!Hp-%D<<rpg_-8!xi;Y%Me~mz+;AUxGvG#(=yK|l&>)J
zs?eRf5teguGxt>mf}AH52@_<5Dlq~SA~0a@ZJ-B~-cbweBxcuGs~Ju_gQ1)s8EnNA
zM%8!l5o0NtYO<5qBlcj`gfH&(^~ijCd*Da7^y4Yc@^+r@mk*2{XvD&{o=~-7T2k+$
zxPt;BB>UArxrbYFKg=r{Xgf|g2BlP0`obAQ65~u1s3XR&Geq6j2X)H4Ou=JCJnBNs
zKI+n<)c=~dJ~%SBDlt6fA=sZVmrg|ggvl{Gf(Fw)EusvF2p}J5l=K}{KR38_L2_`0
z!M{e}ag|k8oZBNeQ?Hzt)31v@trn_kW~5o4#(1ys80iymWX{$}hL^r{)WNFN;e}v@
z3FZ-W`_wk&bStvr?%HH|yb<4-w-Rnv4($iKkYD0X3~Cxxpx}S_Xa;e_RdU9boL<Mu
zidM#IXa0C<9Xp+S(0qHD)Ly>eY`0ldmOQ#MXIs)!NHQfHHB2%mJ<lH>eKp9P7}&H?
zVE(rH+SezlPj!9q;0|+Z{^oNLt9*a)xm*Mra)b$n;sdtvcZrl0@ZkVW+OA!902)%-
z`Q1lAF25^!OWVU{Tjt={x$^JuE>=$cyS#z_stI+#$(+V-5RW_mmxQg<$~s8`yVp5#
z_J2E#a^4RlLn#POnBfJT8!^QBfk%$%C8^ziq`j9~c+x;8cQXG$xE?)H$_OC-xmM}{
zfT^0g=j<l7_yMC-e+MEZmWRq;<Q!);x+>}RC7eBg8pa0Z*R7>8sf?vE;^(_D<Dwxt
zZbF)8?7a0uVG?Pa5B&Z|I<s9J*#ya(&8?FIv4ERiMlReA^J|xQ|Dn(IH^#3Ahbmzs
zEI9FO!EPf0Hs*!B*u%A+5}~(7$`W9LG+T%`uK{}{<iSThmDb%`@zx^6eCOIkb`Uaj
z)m!J0Bs+L8ZcE7)N&@OY#ZSIHI6*am8Dzj-P)Y_m=+oYw?OXXq9*3`Vp-4T3>qI2!
zvI27Nz!IE9&ka6}7Fmc_oI+C)MLrM)1c(_Q>`;Y2VNuM`-YjPCP`0i5V(WEf0|^tK
zER~cficd3m%Arwi>R-XV>H+NM^nbITHsnmiZ-=rfh(aSZRL8_dYFr0-!7p;t(ijA^
z1~2H}>CaZYG4%#0y8H$E{nm$PsQLlfK%?>iJPX@F023P$CpO|cOsQ=@z{?r#TniJW
zt>iR@UztJk|C|{BW<L?jKzWCI6m^8GNb0bBXUqNU+U8^F`Lf>Au9XW3rj-@dF>oPA
z4h<bBUM)wZpsnrmaV$Dtrv=AaBR}17o#=4aV9l5qPmC!aP87TC@1iDMalbU?mie8h
zhxiE>`PEbQ9nmP${)mjg{CB=Pv5IA{9LBk+196V@l^T4T+}}KCmFg{xoIfRE?obL9
zkgTM92e^K(+ws#|8wGY!`~}wsjAa~%alsGTYJb8!%1?*t-+0LgR~pk+rz2h1TFH_B
zfYP#*>8dL&i!!tdyI#TZ=0#aOd`$Td?HNBtGY3&SwC`ck1DVUqF1gDwknPAW?`z$h
z^0;h__~%V)y(c}MUdB&aE{pjt)*lp$+cz*n2OH!2Gq3@re~1h^IatQYI?7CY>F6Zs
zguTo^bhsX~<zW=1`Z{~1#hq-kfAu?Bs<|pCMJX%~Y4g4|bU88E{zzF7x8p6b-DK6k
zbF!s3n@?;SS(A*X#On&GLS5`#GE0+8ztHa*>D$G$a$u6;zN>w#r%WzfD2(_(X6vfa
zCfERbtDKzD=KKswYU9mFO3Z*!iFEgyw6Rix5X%L3zwa<6nEwQ^pbXcm+g~22h7@_S
zw4P@s1sFGntb-3tgABxt<=bxwC7cu!IZX4;dH)f~MPrZ;nX2u^V>J6F_0UZ4YJ8_V
zu?rF3!<{4@LCxhbQhJc{DK(%OqN@>|W|p|>!R8=ZmhAezzz*wJKJZ3bCd=wP8XO7N
zHBLgvcff-u=oLB++)*@LGnd}psYvu{Oq(dJ&0X9%b2EOmQt+WO&+$_y_|I;!82KIB
zB*xaHkfl5_Nm>RqU1WnCW<L9!N`J(eiPgcQl#G+3X8tGIvuWO#@!N#<byL+%(Mgj^
z?`Fd8oG2;}`evW>Xnp-8Q?r3YQOV<R(_^2C;3<43!b5{^kc6i$2)6VLj2QMkDCw1*
z=~Eawm^*F}zbIn<iiKSGI{xaZ&%;B<VGr!#0qTd#@amOsJ5?u!NimaS%Le9l^gkRk
zM|g8HFJ3a%=QO?h<WdCE;t?$y@djzflMwsqOj)s-xX~GHg=1@3bt&#LgAbH3c0bl=
zbE&SE%mcV0?tB=vKiY^ZznQ!z2>k5djxU)+Y@Ph^V?gzTn3B=DhfMA*wq%9oL~&JN
zmInP00a_2lVd@byatagf=5%Ce9Qa-glaGunC+s|n)jj>TVD`%V0rz=DYeS(+G%x2r
zF2ZTmM5lC3hBtNk-7cu>Sl=&Wz27hP;@f6kb;N{%wnz+@L3;>4t-l7$$_^?MjLstE
zZ(a`5>f2_umRj-Rv$vN@(upcj==s7?e5T##L>@Cx&Pl#<PJYgUDsy}TELpzyIjSj7
zvnq;ec-^j(yJ!u!-IppZjD0K-`^4fhXSNaDd`XSez7iRM_sz2Ou<NNwG`K2#%)v;T
zqvc$x_Q_C18NbjT+;NfF12+#UDk5K4aNv5?JGf@6pgrmMllJBp)BPF6Hq&p!Tw<X-
zRpHlTaI<;hm^=OYUHIqcp~qOuh0lE!f!9xG<VGD9i<pvSyJKtOJrGaiwW@KC?`CXZ
z*Wi7j(RTiv9)qIGzWWy{Bm=Dj2~q^i^!-Q3@jKKxhow+}tnvTwcNyl69YZu8kG0Ri
zuGdgYXviYeKFo#-h8?$R(+A2?z(V;K6Dfuv4Polp_G!nVrN|B35rmx*>%OkHhVUzI
zWcDj9Xe-;E2&!<0Qh@H~=<i&|>sPL$$FN2JZx+g0`!-Pf+0(dHRbZjqi<tbH#R#DA
zU4l9qc#iy1X}G6Y*!=l7K*)aq{81&~a4wvF2$(DXbadSNdwHP!f5Cu99rL*0og>4x
z3~>lohf87g;)tq4Fm1*W+`3|UP@j#q3#u#1jW;cKgM8QSzE2^li1!621qwT53)t!V
zup^)?#g4q%8R!eB+15RZ946rAa-p3L8kfv{GiU<!EvmGYvQ1t|RN4VN#tMMzb+*T(
z`XBFtJ#Iqb@aj_CAbe+VGi}Wo5IK;_JkbKaYs*d9yzR!Sxi|3OdDl#x1ov4jD<VJy
z;OgM^QTr>qg9oTWwLuQmuP_-m6-}on<iowD{T5VT{;;&=WZ=h`P#wH&W{#13_D$^t
zPejsJ`7pN_ENj!s8~)Mg-9sn-fx+?YI;v~@O^(HdzK2Ek<iwd%&!XZIJIU;w)0tT_
z7ksI}^Z?K)+qgAW>y16;41)jg*=Ff{LXhqY=V(lm*Wije*TQjW76QsVF*GK$KLZNg
zFWtpNqp`0oi<!{I&jVs#q;KhtOqI2zxL1ScvWv%sQ+d&4-%x=bzWfBl%aXQxyb*zY
z+}fg_L*lvrDAHUFZE_oH(eQ@$Z$b^%)n%wdaJIY}`I$VM8@L`BCj<R!c_p9olD=Ja
zHK^2d4&jS}?0&UU`E&VpJ#BAxjbfA#d6m}0E|AunAp~9qaTRRdpQS!QBt#flYHKv_
z$xRf(J}5^gaYwg9yLotgCDy_F&93jGiW#}A)k1}j8>QB-J#WXYuS=w3MxSBG><*u(
zt(a1EB)J|z{IplcOG)w-8uAt+O-vy;><Y)eWG?PxJG;hz%#)9@H7JmWm7j-2_vZN~
z`qtwLFwJb=4JK_`Ff63RPK^M4!hHPWlK%3(TT>#jtL5_dhuB^@#+_Hs>Z#%WgurWH
zLpRW94G)lBmhXfdxGIi3p3ao3z8QC0Bwjr$G9Yy73n@wbZv4aL!6;E<y4uAYtaWU$
z!()$mHTmS4V(Hr-bW&qd2BlLlB@X5yJ0?kh;cGDRrcuXm;l8U~uDkV^MIjASVSpg)
z14Dfjv4ljiB(w}Ryc)3sDyNrDY8NcsSgCnALsu*nw~Ecx8riS@cq_?ewvg<KeNQ$8
zr3h70TaK+<a~j~^6Lp8R6H<}fVSY<d)g>+GI|<M3J*dQyo(!%X{dKq&6EwMvASG@+
z&2?g$T$bD_l)q)Zz}=mns=EXkzE`X1rD;Z2IR=_3B%>Z_yCJcO<Ks!iJvHFHl1u0`
zY70PCS*p)Auq08ZwJ-QiqGWLEE%fH6;qsS1$OZzX8I>hP<rR0<V!xhgq1s~)e|-Zx
z;?A<gMbrucRoG-WXGteX_(vt)&h!G8w=<N-xA>MfG|7^C<YbbV**$>|qYvtQKywhL
znJ2|6X(~AQ*lp&x;FjtKul!ZA!)H$L&s1U=Xp$eI!_^TC5&4ypgUKby4~BPmZOcj=
zTvxqzgOI6HgmWy`OaTiSm)QpnYwJwtD#Z4S4_21$gIacjLy2k%ywMnSKtWfhK~SjM
z#PoawHQHKwws+R-kE@SX&xl_8j)r-Uml9gnF6~>RcZeMX&9H3J9<^1krW>5et5sGQ
zIr!Ld>W?ESp1=iZ8zKp@t<iXV9M!gYi#GYzqs{Z~dCk?LKlD;L3vU$C;+_S;Nhc=O
zj>Mi)K?celhwmN+w9Qe}mDmSpRhhX|!P3*{@t)W37xGt<e6iV^-v_wEi%&m#AkjA)
zhvho<cCC1B<UImJ+hfq@egJU?M{#>R*l}<Z8OZ5Lpnoa=)L5H+Pysmhk~bx6FHP1W
z>h+ziK8#+HFdC&z56@!2oy4JWli`Ss7$-l7$nwiSoogGCG_viBHUCaAzNC2b6j5u7
zMuXGH`rTh4oM96Xi1bJIL4&r_e>Z3Ymh>MD+Hu=EWKQHd^*aun(F^i}Uk%@E|7`fy
zV<2*gy~!GCNwur59@5Mcf>jF!jAE{v`XG=sm%Bx4KIVVEe&5eZL~f?ygug2LZEtAG
z3wvxyiAYT7St@Gw-~@30rBIBbX4|lU0N6=9ujMn`CP__quF1&csTqDew3=BRH>N0B
zx@mDYRU_unt)W)uMu}7VZ>w)Ij=d7w+o5oi*>SQf5Q!mewMTd7d-+|TEN7I|v-Qt<
zO%5w5>F{?9wJyG*q|(VKhLz6DWtE7G(oxZ?jcx9cLj`n<4-HSj>EOwchb|oYpw8p1
zK2Rg;4h{lzZ<ARW)j6<YZ1N^rx5oLjRSMV8kIU|<oR$Y`u+wa-&@>x|w^40vSxqml
zXj|suICJ(%ZO6xPO`i;zmY;>p!lk@Fojd!Shh-?%L9k;Q5<r_aP=$I+l9u${WDIpi
zOdIWG8jB9zJ|h=l`p_#ybLZ1+q}_PnwCrJYwAj9Ab8MSkp<<Kler29_GmHP75mugi
zmuURd2Du3~lNNc?DW;!_&`(#8-5K~j5$0UA;t0)gu9%YqiOa&N=Q%Fq@#9Wkd;E}T
z!wZ}P6}a~(#8&X#+pkPZPM-Tg&r99QdeaMCQ;3xh>EqFDELX6?X><&IjG05)XIlzK
zN}^|;g<GBN6)t^<u5MO8j^`SPI9%*;KTCUB;F3a~qK&HWch|)q1=xKJ%cl%Jr7hlU
zlvGD5#|l;I<i??`6!&xST%lU2r0XBsH*5O>Iz;>{E`Q_9megE(j|`tEzV3Y&?-5jD
z-2daNuVAg$Ty>3$vwKgNZ4cuW!v5#^nDc;T%|x$j44J3gjGcj)R>r0JTy^-8OgoTT
zmB&2r4Sa~9Ou6(a(R)ho<gbOF@f=khSgU(;--D@*(|tp8MsmsjxEJs4@FtO?f4(Q*
zkDyz;%p0Tal5JL+^R{1Bv^>Jb)6n$gTr@u?!(0fFwjTQcpC2%dVnIJ0|I~}bTPLvA
zSXq`9YFn21P4Y`HrSXNi^IL|``>E(q#D@7at%4M-8t4uu4{~{d0+>B$$JvYB9fY1$
zuf4p$2%|p0F(7O)Bx$xa`6=uO-!$C6Mrc~f{ttx-u4P{9xU3P<gMlAYGm%sMM|@YS
zUwu43i`T|}oN_$cV$&~a@aekz6Jzg=45t{I=wzEA?|ivbA?;07DNut`iW=sX!Y4JO
z@Fu9?k@|AR!{yk<v<~4mUeWazxs&dXMjnUKUOjABp&nGEMdl7BzBz}$CqGKw0yLCk
zD~245vWFjZsXYCtKYfst0d{CXS^~Gs&2LA4)yGAAce+sl&y>mB%)}1_uBJj;s#GsF
zBWPTwl7o%;`!&lTMOl#-he#TF!1<9b5kxDtNlK<4P|VF}fa;cGD?qbg>w77iYBAoE
zK&6+ZUPKYti$+i}&{I&_j2hqjOxTGk0q52;^w;Q2U${P^)ukY1T!X8vc&z2b5s9o+
zgQdlb(6nJ2b1)<s)S8X0dIo3R$+A#g-m{8(<u6tniY~73*dp9E{C<SRj`^)yxDh6Z
z1j;+e2?^5%kcq?YS$U}1`Lyd*fphs0??mK;VIv}yN`&x_Q=#kU=s3>v@J*@ld`-Di
zV{T`cGI%yT$$g{dR`rs*4XViuUhMlRd2~-K#(1;%@g7?f3U3HL5TYz<%{KeHw+iWb
zwzn8w!M#^I%e2+Wan50?{%*d>rRNH{E6EjxqaV*WV^|3cWUe$K2EYDNkyXVhyiRh{
zbtT*3p%}B3Xxh`@fWul+T^myKpl*&X*2BB!9ZO5M^Qbc1y7%%&?hg~j+j0#weF6T5
zRW=QIQRlyhaX-+u78i-_i(NrgO`)$yy`>~S*&0*ijCm5~VOlPhzn-~D{#54^k+WV^
zH1ANpu26TKsMQ0<lh}rxsA1xv(0V_hn|Sg&iB15LVX579rzvT^g0?D{W*o=3ZB<sN
z!WY$QPvNo=wKL{Tk-_Y={<&HVwceh*3cVtaGG^oaPfE18i^FI}V=Z#<;`JsIpC(2E
zrq+XNv@<Lg6Mw|cI0!P2Fn=ajuA$Znlm;zY>EKO<mKBhA1Y<@}dd3&A+RrGBx-kVZ
zeNcz|k6hC{Rdb&#s?8Umnd;oV0sZ!PbOmeYfN>%D7=jRtW5fN`jie0rr!`OtY4rsT
z7D}DJ94x$K8=Q8}b_V1A<dX=Dlw-1M;DbrvKzg$(fB&~Z1@sSpicL@touKObfZ6&l
zRtfqKQi+p>qHFxdTZ57TP6NPkP2tD$Y*mDpvTntbVQowgo^n6>BHvt%Kl8L5rZ&@S
zpF}`>g0rGK&8R*7uJ)??6DLePV^2M9QJ!Q^e&`u<Z${Yb-iAGvL0Zk4T9g!#Ix>-V
zUcRuYoq4(Fy0Ph+<A?ex(CERMsph|<r{de}&gy2Va9N*6O6-%tyu?(T-(tIl2DGnF
zq6I1=w@2{`Ri>bJY#qxcbZf!sOT6Kwih>zB{!P;a%mK3ShjFt`=eM>y9Ok3U*(@K-
zJl_^O>S;5_yIYpPbU2>gv=iD#pcS2D@((_@F8(gf=x{RLsQj8<`n4DExC1dt;k2=@
zT+E$4ZH5i@XQ*17@%BV>L=|e@4QCZa^~|DdNbE~Pn;nSt=v(?0+N<o8c*O2JX6JL-
zD#)KY6+lj;p{)VaBHjTt;zVfTWK<D|0cyR}T`o~h8u)ihP$9Pkhuws#e}R)Xk^8f^
zU+d99{~Y?_|EB|=(kQw26PAPApT}sxAO>J`B2G?TXaY9B+X#weJPyp6$&dxAlIT7H
z%!$8ha-`?`x1hFf-a!9bhyfV5C)<99mU<`+D3W!EzJP61oB)>UfLr{#Aq(xUFr^rp
z;{ojqf}k8X0`Mp1dIy-g8U&?r96n$1SIb+zI1#+``XMOlJ?q?M+JckL1}P-~n}+Ep
z6`eqrZGfft+HMU@LRaTiqg{5QDBHue%2%Ibu7_i$!jG<-?GKM>$cf3Z<u{ne$8zs+
z1W`qKj^_#dp<(}kE&vWi-L$j6Gou~pyyMbgZQpV&A0K|(GTG27_5LBz-EsQU#tyW$
zd<mb9WI2veTi%t1o<Cb#wr6CN-y<x<qQyVi&zH0`?RMa@9R1BX$8WVV_Z?vjTnSKC
zj+wH+xoon$u&!-oq&9ynvd`F|dk5A%A4EK(nV4$h((y<u({q3<ac)LnSt<Omy^bzu
zIQ1=Aca~DpD=N8`KSOhIw;quKDS-&&CUbLP1{;3Qf88KPTTKh%ch*n~Oo<qMZg^Wz
zdlDwKr&so}4Qj>LAs0~JTApt}4Hu;eE$Slq7jV<|D8A;9Qq2n^6t?i`xvw8utD$#*
zfaN6rU#z`nSX1lP1&X2~qF_ThQHmf{P>QrDh=>RX2uN4yHS`Wq5Rfh)ptMj$YNU4}
zy^Hit=)EK;5J=hg#r^HGJ^P&RyU%@|`@;u}%aygV-pqH-F~=MOOjL9FAi=&vjy*LX
zKfrHNUsYEZVJ$uvC?c?pA6B<dO(IkFcwC*5cif+IxahoHpyDTek{QagRyoaEeh5rW
zWNQqIuqaBMWXW1eHqSQbimkdn-IpFcE_B|a@0KG2VfY8*-Q$JbBdtal9sC6H0;x-e
zb|ji=orZedS0vhiPId4nK2cg#HA0fk?`fsZ)Caq`>n;<oH2vM?+uKZ{G9GDO6WiKf
zFR0(H#bOVbE&5%qaUJ~~xw@aUOt`S+u?@ISG~;%P*;OCYzVC!{<S*UYWBT?cMZy&s
z;7w~hXT-X`$0!g)tjJwEjCpHoQ@|0eSg0QsAWy-8vEBkT!hK)ZMmSzA^6<4e*uDj=
z7hyQARrb9)4C_E3{_&_x&_;>&uEHzLWLD-D?MGV@>x<udyKy^_6>&QE%HLPTr8pJc
zMi*7IeYj@HfrDeOv4<<&63L(8W{y^Ir(O1CAMn<gnSJTvjJ*;kqW84ESj_e|)VjiZ
zGfsMRI*8(|Fg5Q65=a4aeN|<^2`b{|QuynD7|hJX2^k@bVVdW_TK`)6WqE5Rdyc@>
z9jDg2&qe(jp<pb_FO;BwrD-u5XFLaM7K?i1qDr%x5SaYJE|K3^QZm#eg_m3V)9CPB
zs^>7<p4SOPAT*l$vIwE&pr!ajjN(*g!PZ!n!CIo_*!6t0D1tW8<UQsCwBUwhd6jxX
zf&<)Y^+DHz=&}iwy~UBAN+e24FX<7&Md^iTkA)b#?*`0+N{ryc<>+Lf5^wF1Z+QA@
zoa~}bhh;fWZde>g5*gXLemvn~1xf895W|6hf~vn1c@O85rEe`UHF#zEu2c5Z72%>M
zmmjzpll_SBL$#tmU7?-x);`RwSqjt4sHxMf@j#$c&OTk38K;FjEC6BQVq8|*TJ?Qd
z#rfK2dRyIvhSv`zqEQ8!16zw?-${qCT~J%`(;$cIc(rklQPfhL1=CHrM#S>QE2b8S
z9bv_j`TC#N&Q!=vSEA_HBIz3&G#`H-@5DbP>+WM0`Z^!2NU%Q02yxe-jnPnV&ZaD*
zYhTDR6>zRw88gIqI<C6pK~)-zSLa|GySnSvwsw&tRRnME7f`I56o_>%yii2uT|7YM
zPP_z>D#rUbh<8U8639GE{5%aI7Ihf}N<*+(6{LMP!QC*N0!_d_$iPe(-O)@KFMu&M
zzreRJKaHYrw5s6<)S#NY^Si&8y71dT4NMRPz`)VoIYFYt)JVG##x|SqX?{kK_y(Ny
z=ZJ@q5zy1~-QPs~JrsWxywN|V;>qBKh7tp1bxvPXv;y4uMNYYQL?v3^ei68<)iB;{
zPI0QzD>4vr9wwr3yPiF!ODn9C4P{Y3RIGj=|7@?B;b#6RC;yalo-K7H6L&u|pU)uY
z1qFBZW(<BEY*L_6wL;!~Tksg}z-3BQS=9h9UrQG%)yP|Nar0#DS2g4AkeR|kvtu_s
zm(nqjep0rx23D;-Wx~#5NRwLuF}+WNx}#ste!QG!({f%l(f?ZSqg~}<xDR|AL8@ai
zAsqt15lZwVTd2S0EiveAWFKjrKl$uU`T5$1MK-l;@-~XqT+b^hh&md*x=S25%lX7j
z>aAh?lad<C?Io9;-Ovx0o4=ljLOHgvFZEP5bJ@2F_2z<0@A#ifpWxb$AsqmW^Lr_&
zc8kUUkP7)67<-!}L6uKs5ofh0Tpy>iT=6k+W50>yafe)z#>xM?sexm7Or|#!+Z^Yp
zlw-x{UQ;pnslKeDcnBFy`Q*S%e8FuJuXxeazCA5)sIAK|v0QbViwIJxkqjHev?_iX
zP}vl+cPkDkc8NZVkTVl#-IbdHS&Ke3OO|gmZntL^NotNg{X+JNQf(l$fYEFWT8r54
z1uU@eVz>wN=#wE6-6pCMDB&NFOF{Fh5p7LK91l&4t=ev)H0U2Hx#0Ce6MKY}9}Pb=
zi*wKPvtZ|CS75uve)-ya(R=O4RnLcpnhh?k_ke$^kM$4ed?bNMdlnUrV)Qnczf;eL
z3sp^QNoW~Ha^`#9rjF~8D!6vHrQxbwt7?`nVis|J@uPu_>R!@;vHBU_DaZA~4iZmW
zn?s;>SZibC;Jh29SRLxAuiF};6xl$O?Hp-5H3Bl7H`M*oavdJG-&7Csb0w;mr7&EJ
zd)dGFEPDRTmaq1i*$xr79`Q5jOm^7MfXJrdgouv<IpzXYj#ARhwoc5Vx0*R*+nFq?
ztu1wEFZG<?K{fi0f}%-VO7IUd`S@luj=cg<{eS@)ZwlzorgzQ32p2$Rf$bzhiO#d<
z>dR#6xN3$_LGWAi@S%;p{XL=8VQC3i5tf}ah(3E8O@k{aEidZZJ*RqqxHR;0zLZcU
zF2XC1zF^ZXdUi;6h&Ikh=y)pUnBVyYK?cn7d_|)&%?y88MA0m?%zf<~kBOL^io&bu
z@zT8Ph2{4Nk~va43e%;p2xId<B}v!xF%`rsMwj3-5ojR0s|Hv=h3-bAP{CjnMji$f
zZFnDI+fKJig<g^#z?u69n!3=sAPqZg@*h_^NypS=uoTpK681qSU=SDD0xd_s*>FCm
zCMCur$2hv?X&CiMb@szqdyd1p<PFC=rrez`LNv$mA=MEw&#l8T3IJ~=TlHnZp))e$
z4n-ov%JOWLniO3!ru0EGUj!>Z1{0>wRC73QfS-rlG`*_50w>5;&4TVt{dEvaSWthE
zF=rgz0qXZVpcbD!t>HZTHo8WIP+T|o9u-r)KDB?j5+?nAa8c3n(|U<f&lpLeDTSVx
zReyT*hm|ee8=C^t+ApDM8lP8XY>pqATZ){MIz2S1hdpawIT7$+NqP*)gzK0?Q4+MV
zZWA^zTY|_Z%R}4bfPjGdfD(t0R;Wl)>w_h)w5tLK#<fD?b13jR&e8T#!TU_HVx-d`
z#Nrkq*fYxjky|OoC4#u@`Ue@ovAhX%DJZ{xUTdP2tP=@C+al>Eus-btjR#ZD93O?*
zF3h2>dsE;~lg3g`5QEET-Xg}QPbAKnkgiuK-%_sidQ(~+GJVJU`;MLx^G888SzP<o
zYx+CZVkAc0{k<BnD@S^RLHF$0ZEBpg21t-n+uUr^+t~D!Io#eMlkSIgo4g2bu8@@X
z4f@Z;IgQf+@L?y;dKTUSIg3kyhNiIB#x!}>eaes9PXC%Gsn;F-hC}8qr%=jRz7-aI
zny1X+{koX0gF{WYN{6kTrWfxR`y+3WlpT#UaY1uBFGK0=`fXP@NYVeJSS<EFDi)1s
z;Oi|Yz$^#{5BHzUf-a0P>GAUHGSR()6lO&-fPy@0grw$`3;(MK1pnzjsRc+v`j4kz
z^Xm!v5%IqaS4n{C;gb<Y8~qkqWWFgU=qDvMi#~1T`O;FfV$MfV;4FSo*bc%GQpt2m
z9NG7X0167f4Jjdb!^2tYaFm$=-6PA2vyps?0vi$Y3`h;`j5B2iR=jx-nmKCYkOot$
z@{4vCmqV&Iwp^aT8=BCJ0tMZD?w7tg%2ss;TYI+)jqq`{_yF3#i9}+Zw+7zJTO8|J
zG*`fNuis7zn%ic4+|rs`@j{voB}`~^nX8<)vtHPD+^A@Um`qSk$I0nnTt0oOK1uu(
zZf%@CsrM%3naTM1)3Sd3Vj7b>))b_3CF+P{z8vI(?tYUH!ih&4EgD&Tw{suFvn$(q
z?<t10sefB}VPzc02C$Pw%gp{AnHpRGcE0)WKH|Jc_>J4Af6@d-bGQx17q!Dg49fcq
zREzJ<z90^E7A-=&a=xA7b(-03v9)eNpD){lG((O1k@?**x+}}7aW_cq*Kg2vPBJh`
zzHy$Yd6^SFVNK?cD8q|`W7b<)p>>00O42gx`rqe5ymn0NbE8N*?Diq|9c|i8e~{C*
zv(pyM7zNf}#%z^2%$>V33@KkP`pCF3sVJ$$RPo`y=~($Svq{aHRSj*&i&A)xV@Tg_
zTDj_u!Ls!>y=uk}v(go&2O5pzxW*q@Hf}4`m95%tnp#gh*oCPShuB2t%PpB2<+N4o
zUIt!I&*;=DP8NHbf3j|oZuqI8rD@JXe?{MfyuC-_)tTSqQh)y)>JM;;7?O(9oES0e
z5J8GnGO7ffCjl^fWmK|Fe2x4yNfm_tN3CiPY-|uaQG#Rpq^~3JUv^#Swcp+X8m$Tl
zQED-6Ad6dvt{Q?g@|2A+i8W^q<THJuz{jFO6}XL;0L~~K{8y2>g2I^9Luc1~xq6A0
zY*qgtQ*u5eBPE|PlOJzljWy#PyGlPBbnnT@2k*Q`rSGJsU7WelmbU&_;9gGg)TyY7
z>lA7|nqU38MU?_={I%2&8=JLGD^|^n<`cGURHd$Y%Bf|YVw-!ZiIO3`gE6+9{v#GW
zE*C65vn~5iu;kX((<?4<Mt-@IwW1!X8;vuRPS8bY=!`GrV%DfL=vm9EURdzi#tDrV
zf$=u40{O8^JPti96#P-LK3ex=$X%q)lw7I0t<n`0QQF~s%f3HMAu5I1N(-~u@$t(C
z`uPN(hl95b?DUd#Ic841K=@i8wBic#&^YbAFsuyn1;=oF0z6c(&}K^$I@HTDUtJu1
z^U)UyW+LyQbiXqImsb|JPxaI2621)ApZD!fxq|aYF7E|ld)^lm7*0;Ewly_cy9=<+
zrf8ClC(Yu%c?#-lw_`QMAKk86rnlO+bRFMhW(YcCHiqVN%)OL5o3{`ei!9rm?#6^7
zar~-nQ(m)s$k{q;qdt)-sNR=E)i}NI>*9rK9I|1n9FjNZrI?wSwZGMi;93ByD%kaj
z9xkROg%f-E3UWz~H7BRXwMa&&>VDW=@p-oTIV`LJGG^VTb-Y)Tm{IHDVpl>;<;L`X
zf-or^FMsv3(1}F9z9-pBNTP@YA@nZ%fU#cb!X3?i_YaC5gWx3&k6nVmyj8X8NnNFH
zpwMB@1A$5i-jNAt1A72{pP(AY8PAF}D_hS*M*f7-TC867EPRKyDHU^Vw9uzD;f$(u
zzWPNvZx=zLBw{pX+?wF8P)xQ`$FN+@DL1~0*z#q+-A0xUoT$Eke0Wx=xn3P6qxW#M
z$?=tO!a+r&g!V@KESy>)`x$9KMl!JFsm%jSs#6&AxgIkW8RJ&3k)I$*V3vQ~xug4D
z$nXy`$(5w^k=m3Zbpux!rm)(ZbNWv)gBG*PjPEZkX_aPh30SOb+KR|nK+2_8WHV-a
z8|;G^)MmPDL?ukjCrK{N1QT3Sp0^XWYNYH#X_r@;CF}(=qf5fL?nDFZV#{SqMogO8
zQ(xL$&E5^*ba!!Dzl#r13XSOMTpW$0ZWmVUn9+Ut5lnY%<1fJbn%qGOOt}g_xQH@M
zYb8iN@a<1B%PJ!#{Xy3C9jCAGM&HGd^;^NId9U&H!!;jk5UoKG`2IeM7_<%jS-_jY
znF^nKKnS-Ybsa{2MZQ8~9<O)R(ao`z<a+a!4lUhs_ghzvvQu}fmKQo;JKs!srqI>x
zo7adqbS4c|!mW(LRJr)K3VTaCs%9INn4!91nehR4wizAD^w+O{T2zRYhq_4q7>rSV
zq-L#npOiHt!{1q{&5;qa96S4<_F}CmM@omUC9%zjrsbULgnV4fR>Cv8OLhk_POq1O
z70-GuzWU~*Bbd{hZyoI9bS=)3L%I7d%S|#edor@KXO_1AAcF~x!PEm!B+gTpuuTZG
zH+;7v0j&J1RmjBNG%=RFGCY26`pd)TcS(&k3(KUsJd91(3UN+LKqx~iDOdIecaCO6
z97@Hk)HZA3(8k9_@QS!V@*=Y-2ij8Ma07lFP7hxw0E4QH`|!g%>-$cm(>;KWavgUP
zkfLh<9R&zl)3r?Gd2NTXawYW3iR6!$O*CE8r<1!CE4~>OLYx9i`4-5PPF}~6|Lec(
zlUS)QXHeQj8@)atWM&@3brXreGvEanJpNOgq=$=e8M;jx2in&EN2^nN1dVwDq$Kbb
zf0wh+f0na%A)`J2O`zm|c@5G6(mT46e-r51K%asx^pIHLBQbCw>3j>^4Op4K%X4`_
z8xRM#;6d=+IW$moKJGh=*a@xEAT@~|jfRu|b2J<YB^E#z={&QEfi}>+WKW8J`XK>T
zl_76AycfKIF`ZZmx40n%vd;77m@ywwv?~7M%DOYfd!yxPQ^T4=<1(K*BLozq4#n|7
z!{9Gr<7P(W7AZ8C;j)(rn&qhiutF|HrAJ1*Z|2FL6V@xp@~TlAXu7Ul8S_xiSOs$L
zS;Kf?lI?Cq6Vj;{<i3of(3LL+@L6#LA<9S(q-J2HBLH%I;t(Si?EDn_G=&G$U7>19
zKW>dusj}P1N>@@JtR^jJH#Cu`C2`T64{@-WbP9EWtuIhUyfKMV5AOqN`ikYI-YeD;
zB>zl{OYUAzBO1AX9+*U#Y6X}~P8@tw5l70gFgK{dpZRWg{glxN<iRABoaW2r*D9%K
zn=lHVFrM6n_;-EA)imoOCP+PWZ=FX57X79#CXPjE^uCX0Q>1;u^DZxdgJse<*l4sy
zrObo9Y-pjZ#Cd|*((Ls{(S@*3w-X+Z7C&Y_q50sD<Ob|&Al`}@O7nHvieLI5O{jAV
z&vv=D7NTGx$B#0lg{U`?Hn+Hy8!9T<7wJXfxi+PN^Mn;%DW&OQ>B!dZv!6X&4{HLw
zJlG<1rr2uZUOws}e*kI($J#p=qUo2u1S$n5dCbF5)vAW$w<pF7d(d)Q*(onxa8Vi|
zReA~}*AkT6tg~#DE#W4gk%fh2R6RBZ)^6J0(LPoAbVT~L+x_o@sos%$R5sZ`u5w)R
z<MB2l#%&X9=j!yDMJ1B!rZ#^noz->OtPT}UJN{bq)>3X#vEMPRI~`wX&n<6WD_q^z
z)$MYc?aLz8d!5tPw-w$4xmRp7ZN%`yv5JY3{LJ7?87<k!Iod6kj*te;rpz@L)GX06
z*<Ig-PcAxp&lZl@t#3>8zDz_wXVtAJT@Mix%U7t(y7?Owg@|MPd>^kHe3DXlC(2H{
zd<UtR9<m^L{I_}B-+!l>0ni<QsQ%sjbPGbbpiNTe#LECYixI@|$8NDWkN*VzX-KC*
zyuNV}T*t;akXixNBeJ7l!TlHbPkz8bEC!-P^k5JN0+9csq^g<$I+L5iMNSH?&jwWG
zY9Ei0&3MqBY6X?m7b4;(5-`;KMH68JS|u==pj@U(<R4gJoFpZ424uYR&aSYMXUZ1O
z=AY-Av9p_6Gb%Hk5SMmud9t0RJ}t{%>_yXGRvL&lp~(^XSf<rioG89h#+gzWSMF}m
zW=U90d!Q(-oWLt0(#k{K;NPEV>&e~QO>biM5h*-bCoga5S`lTZPZBwmRv@4K=t9%Q
z2kxnET2(G8jG0lVzQsm?-HgMQ()5A2_~+gb*_O&yhZ;L>%a7%S*4b!?F3GFbZFY=c
zj90L(md^>dD}!C0(vdY0zq>PCEigZ78fd+L;H`RQvNiK2Ivf@5dsfFl0fslr+^Lqo
z=)T_V=6dFHhFS+l3K@Bwuj!oB(>Mm{Bm`+3F6U0A*{btqw)zc(6z9VZC0tO@`7R|i
zr<ANc2lGci!)zt;6RK4b!liPxgxia671IwzoSLg7TLL=VE%<Bh%QFhEZKRaum<%qj
zBqXm}4)1%~mDql6-9MAx!}`Lt;TV(59Lhinj=3Zk)P$gu@)1q5&g&|)WK7Uw@_3>*
zp`&bi{Bi!;F*9RWboZjBLj|l`^((4;Ia2B@qR7pkKsPI`(ewkTXE-^R59>C2hIbc<
z<fmoF_AB&uYYGDy@-|P*k1f`Q7nYA4BH0zowhc+Uv0DhGjgbQ%^AiqBu#Yd(9%ZRo
zWr^qbZYo5Hi*Y0X(8o~C$ID;~#5i8mLO<Lx5>E%#X+KpbVUPGx=GeMX8BHq<HIAmK
zcokzUbCsW^HopJ1>uT}!s8HcNNOe%E)Er6{J`;=Hv4obk5kvdot0xz|GmbEV!K?kK
znRE!%a#f|@Fm2olgV{T_8=|*fN88`wIJTzj+coPwDej^onZ*UZ7!MCvh4OfGNS0bm
zg%9eVzVuRUiNsxnhmxoX?A0T?G;e(`)eObW^$(A?(whYKrFisTHLY@bf3Gs>z&y*l
z1g}DBOA#eTm9bnDq?606s|e;#*;cCW-yYuS-#s7TQ%H74z3bgmpV_bx5Qrn;X3DC2
zuDEk^{L^fusD2kFFuh`_ylf-!vcXwuNVvVh8!2Hf6y0R?Mcr4;=rp{+ieUZ8-Cql*
znl-+jU|5v1;>o<~8y6qy#F-N{&%<G2cCW_Tm_mwq4_VrU-OU|(60@XSAGZqc#^uM0
zH_!35CM{%NnFjMjs*8m|PMCR;W*ZimQGm@R`x)<|;As3FKbCHD2y3?9D8o2d>T`Xq
zO~psWD_k-2LcS7*!@D%vVB3B{=CkGrhZVDJguJLZ1fBt)(<<+@*}-Rhv1VYNnCER|
z{dsa!uPq11v-M4+rUoxODLJV}!zU_d5=KOSAbYr~Uy|roz`YHoCFBmsTe?r4g}r_H
zr84;iN6awV&PO@&EttK6UAB;*2tv&=-~wi0m#rB$yZhcf8MnmBU%a@%HFeDl9njj>
zA%zV&fb0bklL1OUW<9r1e;&&_+L1e+=_ILBQ!4-L-A#iF)j1?)*3@_RkRy@fxAr_k
z(0k4}g&8Ph{R(jHf#vCE{;(KtTz#T&JU?2mZ7=X)bJ$z<$(GCQ*ll)^gK&^w&=nQ;
zLoM~JS)hiMSlYUX&=+J?2rXsxhwW#*GbD(csjrT8kdv30`!%aLmL~77c+;@h4;#hL
zPU(x#DdQ2gb^01sy+#PJ4oE->AE1TgX#jk<>PSbf9)fugd7vov6@otrn8zW9C~^V-
zjM%k6s5AoPkQFnOH*_YP9fDDZy@Kvhfu;*!v3U<nlCqirPgv$Hk&qs8gX!OLHOXz?
zap?bhuC@(QH4yIqYCZh_ldJu^nCd3v6l$Tzmj&SBq41SfBpt{<0gL+IJvy>yMhG9X
zn~;ZC7?FOEtap5Xq~-?jC^K+_VASQGqy$=kt(RpJ($|mhsG*}#m%Cv9`1c|BU!yL~
zFq}Y>EDED8uKW#Ma*poNEjx%{{E||Q%xI7A<VYg~^CS|-ZkK_Fk@_6nw<g;5e3?U(
zfloc2xmwQPrV!mhMQ}_Z>BFXBiiTk_BVm^%HZo*>GLP<qX-FV7^N%H!5hZ!wO$H-6
zlqGC*UYVHWt(J}x)5G~#e{M^)x^gIA5Sv-_2U(`l*+kj!S62j@PS!-}gM^mJ><r-~
z?j4QV92Ec~X4tf;Ksq_P4*jX^j3#gy0eKGI4I|ujBf_P<Z4%}FjNoO95#JjXSS9yR
z^$4PA$k*}H$D4~bueSfn^bD^TGKyPjWT|zOR{;0SQ_6nd*3EAVxfA#-8k0=wruD2!
z`xH^^gQTlKDhKu%_i0}Td#r!Hu2j!_@P2iu+}X5e#H1-%W`*mgC8dU-Zsb|oL-n+T
zTU8@=1-q9_U2@zb$vCGA_y*3K(4FDmZ`ZxB#2w{bfD-nTIBQL~hm-L(%2&+MLAPY1
zqil;(zALk?JSJ3csgLQ5y3mhjj~7YZ!b?qAD5p^jUriZ#T#eW4$uAGQ=i2usVsM)}
z>+#Lj)Z+|p(YSWn#eCQ6H@FAm60LgsO<y&3RPZ>A_*}`PLs7}l>bk4<FRg72{j|)E
zUQm`nNxieO(-AA}He*}<Fd$=w5k2;GuI`u&+sZ{lWjm2NuHK3SUJqluu3dzpd-&<z
zY4|LQs@2RE)Lf}AQ`ywAu+5zD>u_Abp6r}BXQjuMhK0+x$vI}P*w<9_t(0><bbI!p
z%2kzupBta+7<<vD7gO%Z)A?cJIU}|aJlWyFuYWMdB<suTmhTnYO-=2KWCUhBAa$M*
z+lZbp{(c*F(UQa_26+zXk9dxr6Qswl2|0ARq7oM-HP;qp7ziTppo;2sVnt8+(00NW
zlXz7BbQee5D9hxQqmt-p^~nI{<-B}lzyA*@oa4wA7vaKlU_HQ&mj++zE1(uV%HiDp
zk;7G4gUO!LB_M~pKuiJbAgaHTI1oktGl?7dpCk^BG213&L0h1E%0R4`Z(zL_sK^~W
z;9n*Nfzm6>la9bp8K{cmi46YAa5UwRYd%2~Q~gvye&`&2uL=?%je~tl<l4$MO3f6k
zBLNwj5Ah0DB7f#aeR}a?J0W52@iS<D-snNR=+<S^iZf*<Z_6`#?b)6Mia%H8Jm?N3
zZSox|cSp$w;6F~uZzeYdjJ|nw$~|46+g3E++5&=I#tmzSK4Yrv#Y+tr`ZKkd1{r)R
zsny6<c98I}(6?=9vx>9WyYZ~zkSdCZRTB0$MSvKTB{8B@iKmS0k_<i0qw~{axK9Jt
z&E$}$tlQm_?O5}oOcI8p_<?M$Q*9WY=ENdGytk=!)=*gWHK7B5SOP(<kHMAi$iDiW
z3A3k=R=H`t*J&%^<iT{Z_3NEp2mLT;kys;(?$+Gg{w(};c6Ex}?c$D%#va}x&JWSG
z(T<Ay$e1}BzfWd4xsFP4_=Aa#J*XmPJKVy41ADQ6QfZufB6fVT7CjxhK1nbe_P%F|
zDMFR#HSSkGGH7EDD8=#xd<sXos>?C(Xe`3szaHtY-8QHxsT*33YwX3#^h^lpF+8q+
z_?3RrLmGIL)$roadoz%}kAXb{`Sn>lWapGWfYQ=XfF0)las^4?={;ub3SFS0IpS!u
zXf!3+D$_oj7$8JLpEcpIv1)FI1qxiKI#fpo0)fUn8bFM3?R@~0AWv1|)mr2?&`Kqo
z86l{qu8wF0XDh-yjw{tGt)!pNVK})TH8CK*;z5sG$-YZO)KX%myL9@0(oldwwSlrx
zLinTcZ;j$FQL<UCow;N$%04{bGhWx<iUGOA9`1rLyn_|z@cJucRFpu2Uqb25EbZ7-
zi%Zo1&>pg_@$pgZzU3>G7TQyECtSjor;wk^Y=rN!%Sh+)Ox8$K?^{NrAXL%vkU;wP
zU7g{6rCS9DaWOX!;+=UGF6=CLXJ_{p3!=<{UzUX@U&W^pRXiURU-Sp$jN}z)tvwUM
z#w3B{CnAXBLVW$e$6<<tVisuCAKYegh$Ofc+d!YgUWaKzDe9Twc@)smn=WnmvR$RO
zX#~{Bw1a?XX1PB;{s57JqUL~LsTD%t8)k5##66>nR%o(X)hx?PRu`W&a0b*>)>zKh
z1P8r;;C8IW4QVs-^A-#*;Vo5!Q|9tx!w3c#V{E&ZJe(i?Tp4av6wBKdI#!zeRn%dS
zTz@Yff1E&-yf}slo!#-CU?Oq6^KK#?tQtByiRY+jO_jsNa8X}l-4pM`nLo0+;83ix
zKdqYX)4Lo8WE3Sn<zy&i8(4XUe?y#2v2iWYuYCu^Z5Cx8`9}y-Jj%966JY=Pby5PD
zQ{9AOR3l%%&?E8FHPxej9<KnngylSmavQ^UUZD{h<m2=Q*;OVu>3S(?<WqeYR083r
z^S++%vCJx@2^k7quo^_IZy6EKj%-H~F64s{rHUc{<tO^G9@!Wf;Ti?-3?``;CoW{(
zyjN)0#%yu(bGjSZv6Yj)8}J4u_#y`y#4Dm7XaoSdzfAASxWl4fq=_#Ph{Ij^n@WMe
zJlRJ5-wDkTmqM<7|42sH82T1|WH9hwxfI5?f790d>mB~LpKy@VU<}a*kKKM_ZI%+4
zAlN`7YWRA`Q6nxC{;Lm%{#)O02;)S0+&0_$XB&<za<3FXSo&*-J;pB}xVWr9FlH5m
ztP(At><e0Rs|Eoce~@j0mC9W?1m6((lhO(O4@&2e<=6}i$DIvGqlUz{C`$$@s%-a5
z53wh!0R|s5zU6X<fAXW!qHDg*O;ML#Pw<5ToTHigc{jpk>J|848Av+s<PCOmYZMqo
zr&kwYS+AN^)}nY1TdBQ^m%xOyvezfi1W=)Mrf|EB%Ur>kR6IWC2_xMy0*PdUAUIVj
zBZ6?5Viu69U6NIsv{)Hpn#Pk{DQOGlCxiWEIVP3ZW`2ZeFYgBftp^B|w;GOep8p)d
zZDuL?XOCk3U}u8Y8_p~JgUx#%;%zJzJX8vG<tLkLy^fM5dnXL<oHh*i`8lYY41*1D
z8~mqdv&5TXKh+>^G~HP;*A~wRM275@E;B#_d7mPzH`jbTu;laT;8KrTuRKf9Y6=27
z`dsF-T_!KI*k*N<o<(8yPSVYX4wpMGIo9t}Y=tq7<0P@xy4dW<-Ayh-rE_d+%^m!O
z?}jzx-S*UOacHxdIk7a`r6~%1-We+wV?$tR8h~DhV6CQCzWW<X$hfZKczr5It%=sL
z;Bv8>c_(5{u%uX3s7O5B^W=I}%QepwSTSf@ASE~VFyTaOnOMTINoGemL};Q*>m~h(
zV@kF&SpELy8AHg}XAxe0n~H&+-I}_XA^wX+hqrH5;^w3?KPB1ytQp_Vs;J;8+syE+
zaH5!_Xd^nd&18potEH~mPx~ZlG8%?F82&NP8!=R<fBS8Iy77%C^mdwtzBVKGFxm5u
z>jiKQ1?$yYu`aVK1Zgk0xuYFNh#ZejJGOS_{x>oiJyS>fdt_f4_~LbOE*b9U-3^yD
z`o2Y`O*CE7>#;vAA1MEnV|j_~zW)ByNC7YlB?x9(#iPbj1cDU5)DOB@jq9J9UZcY2
z#R6Ac69p6DPtS5`Ph7Dvi4$Ibo~_ugw&*>gK1`^#%-S6&E9`nI^gTDX>W6@y_^O?C
zg^w+;8QO?&yH7+SU1*pmEq8#$C;gy?DkIA)J(rp)>rk(WxabGBJS-ux){}u+?QAu$
zH_*~6iCCm&O{l_vi%UsSX?a!L-jeuys5dr0?=(|aye2Ghar|`ae9Mb9L{Yq7p`Ej_
zsky@^xlcx%3tcBCNw(u{)()_<hHf91*dA1zE9E64n+RjvCO|Mh?qiNWt`<$S&E{{E
zjppNh)pb_svN2>MJvZ`&?tGqUbN~k9-NWl#GKSW!*536*n?@Xuuw<CHB+{9P(i&cy
zUK^`{a;EFm<#MOjvZH_Rdj9qMukL3&Nd*SFpW%$4``Kkw1u8<-gNMBvM1au$nlS~$
zolT`b$hgF?Or+LuRbWB5h@1qa3ow#0|3$%-29z{F!QG$xEn}ovh(FTbd;bz({-eJC
z!>{!;0yb#bbA}Ilo5CN1K7bJb<MxjXSGb!&VfhP;lLZNZ*cm|p#x;}7z#(VQ8mqq!
zq_T%*>u{OYhn?!gs93Vjn~wVjcCilKh@%u3*-w0CI}=gH(t=8Kt<jaryA-zLIrRE`
zwL<B;T5sc`Y@BI2Ue0DxTJGsNbGFfkqA@?0l4m2QCPla7Pnb)2_A{%5gjmGtWzc*}
zP8wngxcs_8ErCq;hS;%HWif6erl94!uO`x<4nCghe~>|DA2GAe|46-Qm-PMAOM}lN
zVcyI3pBDxj*EpX0FBwC_Z_?m$_0~}Rc|EQ9@b!w_0yd}il6<a@pA|R04%J<p;oaEs
z$Q?%#-f$ic{L~;Nfr${&^1zfr{O#4q^rfN#m-98kAx>8|jA_gAyvLoJh%x&84#L!p
zG^>gX9`T79e(o=?>4-t;x3!&LhM9~i5|>mI<n-6x@fY}HLcdi=NnRh|!fRa6-n(aK
z(Q!wccd?#w?W9!u{oEQo`t?<XB!@@HpjI9}gO3D80w7RFZ~v{uh&)28z(b4oCI^qh
z^iM6uj6dCUz+?2pgJ;iyoC41tMaZm~p#wv3@Skly>i6)QzYih*0ITKXxplndQ6~oS
zi&zNxXD7x8)R_%(5+vZNd&@oO&jB`IYXJ7*e{(Da18lc`J2jY=d-8w%p}_ipw+0~I
zzYQqB8&wZ(K?4Eu4ART79`_&uT@6Wt1rOHR=){rf$|k^Bp$pyhOaLedB7L(sPBY#`
zQiJ7!f4BOD0>J-6@b?&A2j0nFW`sZY48AF`4fdY@X23aP1hi2I7uuR3<=dN_ToI*c
z=9OtkxsL#-@;SdHa%`QI-<gOVe7?OJF|<GA3m!*<0&1p6hL;!&x3rWxmw~(0G`^T%
zsRedVq`*>$dVhT9?1P)4G~a3f%njRwkCAxcdI-T5^q3K7eg%Z$1x(BKhtbq^y%zy@
z&6WVRYI%(&BOC{S$Rb9@&=@83C^={e`oRIYP%Ata7q5!tOSv{Uk5aVdXPtUMb*8N}
z(5z$r4)W~;iTWXSu6_W6Zg^cso#lX7G_nTQ$A^MV!S+ZvuemyNJ<MM0?5ekPPTPyi
zuD3dPx(m*9RK_z<aM7+9gRu|k(8HE0U!$}geLkEj{sDCCk>U8ak>yQf%cr&~-2N;b
zf%CA*N_0GE&u5RHP$AlAa_&N6oPPMP(!CL3HD?Dk$vM6<qBXu9lWUQcz+gDxxyT49
znO~wGjl({0J9WbDD)0G5=vzcta$8g6TiaBFRjmRJ!>i@xDMnJc6DvCnOf2_`p?)4G
z?mN%l$xVR}vk7YX>k@E8n&r4leNmQ7Muwj1GNt$ZMXqQ`cLDLhJF=OQ(T|I!yECko
zs)iLqorm;zMO<<x;5gqdZ4;mMUVE#ItnP!DlD?H~Sg+l-yjxlyn$#21<z>xTUSA{-
z#Y~x*S<VU@6}_qhT}-7}O8&NdEY$Yk%PY-rr9Ha}AF2&4iI{PTg6MnBFR#z_ZhXIe
z{8_TW!w(sd4-1a>)TwzBFwjk!ImFwX%$4ycm?rmhqTLoUpr>xCRF_YSBrA34?!sd`
zsfjoAoDa~5G%~zl;$Gy&ip<yo5!qz~?dXk1k-JX*sJPSW(c(CV(Y)CkS4c!rCA&-c
z@I6|}@^V|9MmydA`dqzF-XZy~xzm4sr6@4)qoLi7o+Fl2QHBP<!9nHDMLOLD#xBhF
zz<2D6$WhGa#Z2sF0n9oP2T)4m2OxdR0!V;1;Q}HO$KAUD!o_oI&=v+N1>0r6wOAn?
zf}5bg;%=<@74&y#!5-0&?05ha!cdp+1o6Q(l8WVSqwg4GCyWV&rw5SbyTWzS*=<Sq
zOb#nINJ?QjK*QAxaThWWTJG}j53(s;=O7Xnk558s92}P<d((Ff&SM`hF)c0j5}A7b
z;|EKP7jJne;GTIeB<m6vM+x(F5_5MGlt;c8Ek7;A7ws_!e?8ZjqxW8Ga3l!&GBReU
zsz)yc-Ax$>tCnEw4%}s&W@C~{DD%kK;5pXTc_VFiaQeIP&L$1VkLld?&xTlghn<BV
z>Nvw0eaizDF;=VW;OjfvBZ%3|3MSvhzH`mbN~J2McR$N~Yi)Px3uYe3tm{d+M}j`O
z=SK3Qa{2+nY8~aev+`v<Q!PHUy<33~izxe{SrJFg1c%X9PC*a-64&7%-MLOfIhqS4
z%Zrnx9i>a80e-}RHNvjU0lL74-VWh}{oH}BX7A=2W)>fHx~?%mr*lf5IXOeVKb1f-
zzCq{@CDUzJRM39RHkMOo$~R>`o5LWTcj}z9zyEvqr0r~VlGavkR_Vdr4oMXu{pENL
z;T#i(P;XYrnf?bRj$;qs>6u+;GU2RT)tzRzd!JPAz%HG4(rzJSdXU1QTAfDPQ)?t(
zi=)oVUyx9e1a#n@T{J5>Ykr`C#djLBjNP6=)v`b(V&rh5IN~2<oak269&0^VS;4&f
z=A_eDu(FPJ6u<4G9mVJk8iHD=!HtlbM$m_9oW20(X<)4caV!2$5<J+NwsRl%qIG}g
zTqS^LYcx#+wamY~*=YXh&4vVf+)SDQ+!l&wAjtn|LqPuDYzXiSzd=%e^%wuQpX4}j
zCw}|D{TX#+{%j7!moC;d%?c7eMmE6@F;Fl%4z`|u9?&)m2FSv0;%q@d0m0u%J%cWb
zB&3gk@cau{E(CfX|FG#QB;NxC+Iw9q)c;g!Xz;oGJ6-bE(A*rD6@9@5hM5%3Oxoga
zStO|URL*#qDY}{L(I0`&4e%qb1diRe2oLk^+i_p(YD<6xrN$_g50Khq;`XVJ_N6x=
zH{E`=S^eBe__;E&{COkaTNPsJUfaa?^rroCyo77DF7LjD|J-yq9^x*zXNgq~^4~=S
zo=1=3;7>^16&1tA2|9MH3}-Okdf4OHnTkD+g=zDHjdX0m`y?(Z1%-L1w+!7~iCs1(
zokL>J|3Q{ekOrR#R3%9pnS$FA0#t($P~57b$#B^Z2BnlO=iIQ=SuBT2Fq7d%vM>2w
z4+X|nlST}$7l1-cg_b$d+AD=x^>t6~@>3!Ad}a$-06&i~0r(jjwGO{XVkL-UWwMad
zxOA3_N_llaYDFu0X}jx1_T$Aj!ro0UYZd}$gPB=*_|0dtUkOU-Wbsdphqli?bl!yG
z?Mwnr2V_J%ENFgxBK`XFVxBFs1?C^xzHHtsFuHZ&HCOGpa<^`N*Ms2{8=LPRTTPC=
zFV}LUU_Yt7s=tWXz~)<w8-8T@gv@?)=pAm~H>F#WKX5;oHfBrf#A)MjUv+vq&Z2j`
zT@hjzE~n={>gqvcDUk=pIL3-ktrs(SVJc>Aliy={^WMUoCj#pc8nBDss*{9;3u@@9
zf7EVfsj>0s!P+wzj@O+Lq<4ommEW)>7G*22B+8oy!{n+ZuNyz$YY8p(ZsOv*vs~b@
zmxC8EQueag8~>KV)@K}W`+emXOPOxXyNT`>$w=0At~RHpN|FRc%b;UOv$y=tJ<7HM
zmp0g_T7#SSY;EoKNS?wHTkkUvb+HXs18Hd;L~`>qV_dhk44C;D`KzC(p-hd3xKr)9
z^UpQ@RuCNj?e||SfdAY$j0hJ};jOK3b2OgZ@RtnEIjEJ<!5!3F^xkbN_@Oqx?;=<j
zjPONvXvy;ba5L{h>PvsaOW+)+as@)h@oiEo6?D~Lo50Y^;Q(*Y@K#-l17EBFSk9}v
zy-=Hhbw48LjV#jbBld3UfM98WA~0+OfY|W4o@+cSlE54O7z17Xp_*p3LGg1+%DyA7
zS-xE(KvKs;M0kQ?P^u;2dV`eRQn4Ke?;O>OwewHo+DKepDl$K2d|k4+-^3^<jT+oA
znE1+WO`c*oePO__O}LAa*+0mzERjme(`Q*NfMT}*a_r$g#NurCghN=$`^9v|@ntph
zth;Ls>2js-PThF^JuTLWPbtNJR5O(IF=AUYB<5-C+XBA%;!qRoGS9iZo=-lxZhV)+
zu$7wQH)3BVdEUO}YeJFYpCw(I2-5gCW562?Io_V>%;bvisu_^Z?Y@#@o1A2pnf|I+
zxI2$n*u*Z`#*nUfcd&gDwJzZ+^3lOP$~|WU*A+(7nVi$Z%!oUC*DNt?e<?xxrp=LA
zcDt-mfnFbz<qPzk<GEG{EK%^&_Nuz2&8g4QvQMvAuC*~bqqh)^UtZR~XQL6Se8uWf
zu=&JpU};~DkoQ5M%UCM(MepoGKj@~m(D-%)7y8<X_p9v%;iv8iz0a4GE_vsgQs+_V
zp?6c~#`1o?6E0*5(^%y3R$R?~qHgW*oSlAE|Fm9%z<fmx!@Blkk66#WZJm-f*Znsc
z7g)DahAi@zpD1VV%Q28j18WeC6m8oF0wfU-P5*SgsWHMRG(_TVz<)J6K>`tRh@$j`
z!aLlsNMaBW@lJn4oB&Z;2HvSuPX=;-f&HT{#?T2wz4PxY>^2JX1aVNO`hRX9yz3yo
za;p-ivx#9OHqbRKnDTxNg5Nm2(@y3%IJwG^U$L^=`(wngKKaXJe_2iZzx+H#03f0l
zYEkGHm<NDKU{<n-`2cUFBZz{YE-2g55-@0-pc~<n<S)&?@*~Z^$@)tmn~V1bpT(bt
zkmcc@!8`eO|0-X=cy^8!1jnnDZxE|M;GNQl2Bo*47Hxy?Fk~lGTAS3Q1-NU~M!4IL
z%}Hm{^5A1o;5+A&Oa|9PjROl!ECrE3i&fnOAKyuJY{f=07E55C?R^uUA~v9{;`h_a
zUeW1GZNR<)zLLe)AOly@`)Dtc9ycL}b4ioQnPV{qf&-OP#$Hn@JG_$4X5xUw(U}_a
zm7!x(N9H6ky_O0~qr<2jDCIM=>7~X!K*i5%SXPsiPF%jw!Y)d|ApUh*Pc7&4qaTsN
zn?=h@?)nedB1;;FowMM<oPx0_K^;&GDKZ59(+()A6TnWrpnKRxq8!27gMy~q%}+`p
z*FB@*A^}?2=W?RNZ+uSC$u<1E)72lwVHg#0ifr9Yl{9h4de%Im-s<$WO4bR-=q(mG
zfgjPwmdXp>W{B@J#`A8w_TCccbmE~MdaNQc6uDC=Z?shQ9nl7Xc;CxdW4%$^f18RI
z2s7aL`vk*A1X;E+@86I@n}l7{-kFcO+d-TUyccFx=1W5`Md3o{RL{$O*0UVH&#2rr
z(PqisS<z1ZB|>33l!>G0bJSy-ucsRBP%s-*G^3~uaE(8jFu2fr@y!y-l{Gc}18M=t
z{M4CXlQ&`?nc+7NKHfbDk{Yh7oAeAwx+TZwc4a3unt|OO+g{La`l5ki(B3L5IDOTT
zM^R?q*NET6M{FbCGpcb!vo0fdd_;-Y<zO{^y~51}-i9irCB4QBv`B2lr>TBc%33oT
zOE95iQsP{_s6h42m>$M&YAFHvXxx7Frbr2xUwVSwe(hqbZhK4Z`*Ob>lCN7Lyehcx
zTurgZ=T~vuct<jhy^dB@5k#W&q1n5rC2kHob{@)w*Q-CX_~hwSqclqDw%y7Td@FwN
zh<mOfCG%XYb-TRk;7T5La&CBi1(xl=^s?`}b+Y3)#HP|pY1Qy)(bax~;%260VN+v+
zOc%#0fiojn?t*hNvGbc}tt7mA_r#*+Lloz49yF+k<(5;*-fL(R|A~|qP+WsUTciFU
zb03q68B9o$x4IPabae-%hlUHTH8p)lQi^G13;Sx7Ps4h*CwIZS!47c#B+?mZ8E~4N
zqru~NJ6vh*9jJZrr0J}pZW>1Y^*T3cupH>MzlCnkAUQ{+DHb0ztU!6lc9H+*DPBoi
z<JBifzMwgP@{9b}p*wP=Hz5M5_a?vB7&wYX4X^{>6adWq$F;PZeq>AFVE?E{^?HSp
z6np)jZ%L<K;Yy}T$@Pjn!ur>BYbIY%*z3tACpv;n!{P}AmLIRqOd5b+05L#L=6{Mh
z7~w)5NnHpp1OFF6PY?eH-qGp~veZ^(1yI6dBBum#>_!lbTIAR^>1zez&#{O{zo+QY
zMiUT{8XU9}j86i`c+kgeKxjMaz#G)09%DsY!3OP=6Bc<$_);ji*9J0OBSZLTgE=9<
z1&y%~BV>^`qxMwFphP}kSi4%T>@cGK+O4(Y?Y;?lN2^E9{Ls6#=ND`v6PLdB*vklG
zhXXM4vbGw{y2FvPn?eRJt$S4VcqQ#O_n&sK^K3~6I$AR|Kq1~Iv4Xm!ZVWoYn{JL@
zsmrpyEo(ilBA!)u-s!-hMzk*~ChTlT;d5zLWpy-OVxg><ICP+f(Mt%rkG<^aQ(An_
zZbj!6FS|K5zg+Su;$DJn?cCDz9XjzSxwE?s3>k?^$NCYFUc0yVEk6oBr1-?MF)a~&
z#pu1Lw$z1I>mFNQPIo(eOG1P{&D&DSvQ5@wE}t!<)^3(<zTtw@C7hp_S5fHxO06I@
z+)~%<=GxbDHmc|B3P;4lQHh6{Cc<B4{3I?6hXzdLM=E@;l}(8KbYRGx2z9Qc)iwZj
zshTs-nw?JRW12!{&n%ZQoM~`B`}JMb!t24;3PSqd+6<tP3wl@H-+x^ZKvkWXja!>r
z>+Wp4E!nxrRp$8qLk}I@Es1p$a|i4W6FDJu0ZLnxzFvgZql<p_Zuyl7vv#s`CJ&9(
zo!4Ss$((&UQdT>`m&`D3cJ!OmS;HKc+}|*#sfl0RV!5SXj<ym~O;Yg6F_hhh1*fkQ
zu@4fR=!cs;qBeKhzhNWF8f^D6ETnVoBvW$WpY;??*@)@Pw9?Fs%RytHK$({JhgDES
zwpNyuJ)?Plshy>V=iT}{IhrR<^35)xCgJA_yF$%I7ZB6Orb|l|1HuXm_#PpJUOx7Z
ziY)N>8N;V>|BaK-HTRzk*_*6>2+=t5!EYHh&j2?@u4DUZwog5c&~g2{itJGFrP{pb
zKOwQt`Uc_Fx)|sP7tG<&qSGy02#(-{o%pR}g^^C<LCIP%L-DVY6~YX5mU8zdQd2zY
zP<nmepL7}&x;F%VsWs-Ii9%>~4&u&lRVDcW$btRd{6W^U_AkylSo9d%8t|Im1mPsd
zD`@HV0T(IFEq0HBaG9M1(;&6N|MaR60zkPdeDOBqIDCT_e4jq8SCf(2;r}i4FpTVO
zN;Z0O4rk}0pRIb@hM8F>c6IbmPmfV(c`yfP?sJ@3loG=$dEdsS)L3V&fR41(u{^8z
z-o*)>G55f4b90N><Q&F_IuXZaj=QJQWd7H8;T*m7-B**Pw8Q1fBD0<8g6BnO7MbV%
zURDKxaPJQ?_({mWGKJX+#CdPYY}{~flQ!dC07b9}eS()Vn;uS`v?bDE9&voy`1AM}
zPv*Jo{?ZK?f0>ee%CNQ9XZqs&FYU$GcpiN@OUZEJyu!=VsWe7^huDn2qh@XV(Nny3
zCd;YRPEs4%>_bsU=867qm$FbpkxKY{6r1m|mJxG6DGogkM>i<^eXNJTQ3MqQ0saX^
z0o)3hk2gd1F=~GwYp8S-_{06b`#uFU(Z6o;^1lw%j^1GP-^n<-A~MgBzfb)4=dlo8
z=8&8rb#_0^wcMd}-algS*gE{boao);<G9YOplO$TuP2kv#Qa}p{QI^b?MFilMHTP{
zW4MLB(;sBCHbm&;qkSk?WILvabMW=AM?AmUOC+iyuv}je)1Vvn)g&dueM|=Famg%_
z=nf&C{eDt)yosb{dW4DF{ldhRKsFl;?|do(!*d-XNs%RmuwUTBvo+Kn6F@1(UHah-
z=|(%T=YUEyDen)mjExoY{ocLK>Vf=Hc%b9jjwNQbkMOYX?6!A%`PwZRvG{|#-y}wY
zz@G3x>fUTsp%l$$cfsaryF{eBC)!|erV3M-bFOaEmL=&f<+-ZK?@904(Y($gyUXF;
zmomK{V9K^a3s=i^%i}-a|K4lsc3he1)CqIz<K$--m`zya-Bn^hd!rR|C1}>PkKYB@
z=iJNmiIA31vOw~^__3*Bch%!!pDDL2Hw?iap-kq(<SyF9%}kRRf}9=H;j@X2xSW1U
z#{YQs$L^NkwXx59{5@G=LKi8+k4H<+JfZL>wV_WF#O89geFd!~Z0I1DMb-<<<wsm@
zP_NDe!@7;e!X!?oD(SgAY(MZdTj#xk#+^(%Qm@*^LK~)8LnKuxEfuq@>@6`4w(01p
zHc9;n*<?0_hnrhcS&e!6LSz&Ls4KqRhhlG~OyP6q1og0ye!D*AFNVx8!-X~)S|(5O
zIIy(t2~Sc56D~h|O7`rPP#-}Er=8}_f~nYh@Y-T;xK}FP?P8DQ<do6mLnqFb=AA3i
zmiqGo8>&b1L*(h<-fiTAbG0;DU$7Jrzz-Q$+}l`fQ(^0C=N$gX$Aohj0W(<(6k*l5
zQQL55oSG*2hk3$&i*4BHHEMYWxf!ik+VGZ4Mr3FKU!ks<wY86<`>c`3$ILUS7)sX}
z&+n%S+QJR-v&4uRW2>|>aa;31$`5nb?2W&^taA<89HD(J);y&?(TP_MQ)k)gEVr3O
zbj3aUs50YJnR?Z0KBa7Y<?tyZb)@ABs}zHRunQBiZ{o(^rad*;u_s%~|4u<8*jy*e
z?Vr9f@}wY1TV0i^-8igE?ENt*48o&VpW44v8**iv@8kZ&vu{zEb7B={FWj+lOz+Ka
zu+mAseQy7i`E?3b?a6bVSDvpVzJJbrK>OfS-|O$5KHTIzgnRShj@B9cS;GlMmPPtS
zao5=O42nz1#Ft}_KcMFb%aN}9(K|k}S20pgGl>hj+h58#Bw*AeCc`!W%P-^%qf&Y(
zK%LquuXUm4a+gKav1GK3tU{;tO4;3<Ql5a;n-uh^+*Dy_Jzu_((Ha4hWc$-6u>vU5
z!c`Jex&MQB?Z_UzZ1<OV{(zRD5b6FB1&$GAyUv%#@37yIeY45GjUun-k;i7tW(B=v
z3n=L6aQ_sL9xZs?V!|XRnCvBO6WM4J+39w+>er^n(~Q{86>udqb?V;&>J-@hy2HV$
zRBAenz;Ron<^t&Z{?B3eO`yUAbW;i<z{=f<`zm(nOL@KSS2g=0$kc+(3I)p=DSJj)
zP$xx4z&0#gXc7!uJ*S*6cNo<SXKxbKy_~<-Cw!~0|8dx)xpWVik{3W$s08-`N_qEo
z!sc#keA=}B_-I$ol-}2!CiBa|OjFf4ycbK}g*<z8>?K(*7cGBFQNq$x1AV}UsP$O(
z!@<F0ubt)!3>i2nXRQzXluX_>?oE2+iAwD=*qtm_nep)UPRz^cs~j$Xu2;iXWOD(;
zO_CEu?2bWyUb_ov4%)l{8rKZ-V04f{1VZGAMmYnBCmg;L^>>PjZ0sG^AgSB}JMW&b
z74%S(6Lb%bh(DleKSG&c(4TD{0A+gmI|jgkE{77*4}YOd3%mfS^}mN&<Ywgry$P42
z-h^p@BeeWZFX1Af&;lUpzaK*8`;#;puWR}qeui_HV<2rnWA4FwGq1gH+d&U8_i2*@
z1@ZOiS~=1g7GPMYSb)2vfzb}WJtb*?+5A-YxyfPHK%HLTN$yzTm~vH@Y{Od<cx=tc
zh>SFbIvhx$(H&BwK8;z8Yh_V2NY@Qg@|^F~wm*CN>@jhhqiE<03Z4_)nCro_&3&7@
zAR5YNQCZ|?mPhQgLQ3^opX3WGvZS}SdzViASS;#DrAaU2q!jr|PIiTiddiB1CcVS_
zWx>9#c*EiIrxnz8XWtN)zxjSjFMc&XCdbeq)cX11_UjNbjM3=GEKOjok~y?xO75}W
z@|;_Uo@RfoLe3+%$GH`YOv)}&rwdw2g)&WE$i{@Vw^Y-NEz6hSys+7G@&2_?Mm=|h
z`|(QkrC)+b(xrM6m7LLQ!?df+CLEUz<jw>xej&5b>J5RL88GQ%BQlVyy67+hZLYNq
zGEZ?f`T1x|p2TO(IE#>4Gg}ZAbBoWD@!1OvcnjkU(g>`W1dDn|iD;a!bNnr-66uzf
zg&mfDRjGau6_a+pZ9Kz%15q(8T&jZ>Uh7~;o}-KNZ<S!Jo0l{?V_7^^b};B%_sG_Q
zb1JqVk>|rx4|5BL6QHLhsroA}F1-9RE<!PBr5}D)ZM+!rHn4r+uoPJ4Z;*UV^L>d#
zu76|n=GWcSbIRszz6wovWzT8u3_aYY+5IYS4&FPF|4(z@9o5vf^_x(oi6BL4L_koQ
z3Wy34ltULODj-p!(iEgw05N0(iXe!nDA*_pNGCQr5;`I(O<F($M0!gQA&_MIRy^wU
z-gEAK?|$RGG2R~zhRNDHtIXf*YtA_lRvVMj@ob2m7o=2!i{+WmaH8fjiq?1PxVS%^
zP1B@2WCb)&cGe|YJR(h0?LVD=Yu(VbXZn9&a8)4>eXxa_XKQW*5?X3$OZb%A$T6T-
zz9_OXceq%WQMcG4b1~M5W2eGMknA(}*GN+vgy`-IV^xaywi2>1e%+C&X7PAZk&x%U
z&Y@km^NXc*93hXm*;)Rfs&@jGhocp5A>Fy2E=t5<b8}{1X9Ra2ba!`fw9n5^yTY5T
zSgM1hmP7+nQY#jcgw^^ClM5$SBqDmM<l67=-b8Tdw~e73{h(1u@cAsrXB9oIs5+*8
z(<0LEUUIn~xM5;!V5U`bxTrI8T;#~a(^K1B%|Fa3Cmar}#BBF*KJ!jAGy+|;MPoj3
zt8BBpIqJmb&DqF<+z5mi0x{0paZfqpz*a3mO=oQpjde<oCZpmjW;((QA)9_lhm_8t
zu8g)|ZR2j7o%{KVd9P;E7i0BLt)Jf)xc!~LjCWq?sAz400#cmVE#i_x<s7zdYSg+U
zFGsWf5Gb)E{WY!fqPJd<)rPlFdvDdc7Ri;eZM<_Lbk3MbxPdou?dwa&HrL>as@0av
z*G=k&91Pz(h7i29pJ$tmQX8*Owz1FloMDfLe{`zVD{e#GGiBn+#<xy5r$}C3XAqEI
zKuCOg+}tUC_RIVNXUwadU}4K{l|-vpSH*q(sZ04tgTVLt{4X+sy;}F)Bz12zJx{W@
z`QX}E*>IRL$eg)xC!Wy(jf;`jcu7j{zjX1u=ke`%K|Y)<+_&vB>|J(n<y+3~-Q-%W
zZY1^jLudaz-<i)`Cq(Pxj}&h9Le!MeObOg?vr{CA_Y_NCL@Hrg{FSetzR(edS&#WV
z%R7q0h37r#K!4T(-m;?!%P|B89cWp=8RSa1!6(Ad(b((IJjMV7{ExSgS@K^QHGr|;
zf$a{eGy>o2A$F)Pj|x#znTf6IfcAI>cva0_;b~9}s)>2}1>1mP7g-1eEcW*#M@WZE
zwY{ENOaT5<g+KkL$AQKP0)cN%8Um#CI(z~C)1LE-5K{~_3zLZ8#tBdzK_O&X6jSB}
z&}7r-Yr&i_tt`ExZM+NZ49GwPZiIJvr}Ot~yvn)z*67;$s^aF;v=X_q4gP4VtxPLN
za8tF5eCNXMi*?2287VqX6Zx2WxfqPs4Kd7B&N?Nb(MQ~-mW%I$br%{RJt0j=Y$JUl
zk;u;bD>jytMS5IupDnz`|8!AN{0kflHldv=d6|-;A#j+M6;&{DYlISOUHUY3I%4Sa
z1yPmlSN_0$Dn;#FFUuKjBwxVTHRXs`Vx=&V*^`pnK4B;2r8|8K3zdC3j#w@})2@)8
zeruufp~os6Y66VA@HsT@V;ihhn}|nJ1LM;sS~g6O<gQ7dfBc#;U@Yh@&Eq@fbuH!V
znc7~G(ZL(|K;PZHsZ&Psl2pQw$`x20-)X2z4<FWFMX0<;oolckCyCcz$B~66$bI7q
z=26t9Gf4;DlE1V+T${QnaGLH{w}=vgPEQr6)%hD|^#&7a6TDa8WG@bk$wj%(TlzmO
zyN+1+idtO`L|h<xaD9HH+sXWcm9pR$ZKx4nZ|5biL@l}6@xiI;+0aMx-lIn`9EXoT
z^f@_Za>8;sx<O!jN7+sy^~GRS6g5K5;$=<t$4Tdbmb1B&q|7O@mvcr;h3z~2<oXTN
z=n6Ze!a=vsoOuLkT2fSzU#yEB&F|(=sGdVf=MY@osi~!VoYU!Ou9VBD?tJef4V@jw
zg79O7YJJ{!%IGG?HH)B7o}A&hT}Le`GeIJ~Q)@A`9d{0Cu94-~s~Iq1BtlngTH3W#
z6B~;6woht5Z0Qj`@<q=E8B88SxM?@;4`?qxBrq3!|5a{_+`ED&1{7cEt_;TkQ7JvQ
z#rjBm-or29U3BBxKs*oiV_`zp)yU*DpOkY2I@b>O^}Z-kx6&51DLCcI91h!YiM9(i
zSGX_ZEfBw5E$^O2x~F!(I=}GkIyj^_pbgo|EBg|6pyJA;(#eJXQiGAWLiLXsYb8wF
zuj{HPKkv7~)!>hWCtM#os3wZwdU%Uhsbf`FK%`xXvcKVM$Z(j!EU5St^1dq3%2VSq
zv}^x7MoLO%`xndgt`BD&Oa}Bn`|olXV{Y7)#8f2d+{BPt&*to|+&G@PVBfJx-N+t0
z(qtT8aDMY6Uc~CN)pJI+=?KJbMA~YO*5TR5#Q|35pJ0INq=vIm!BgM;p}9ibbNy!d
z4yfNnt+J>TbC*-CN#&4+)SFpZS^WABj^ziXFE4iNd+;tJ<(zQ<Kj9jW;v+>BsR>d(
zGTcZu@s)TbysM1ic>7Jc_wtDYwZ+=i2A&h|wD-n*5|)}Ed(0;VK1?|lO>J^TJ&@ZU
z3Ia;lT4{WRzk7LjMxbrnRjECkI|gNgbne?+dO5RtNVzCHJ@`W|OuMV9D96`ii73j0
za--lXMRw~}=WIWpxDHb!r(5=zVc6)CwAD_*WS3o%B;pWX7kAI%0W2$)VcPkYVH^6m
zDUg+N95j_}O}Z}N88az1Vzy4nE#A^um2+7FcxTvr=ooYoT-MSg-s-8ssiJ6+kP!NZ
zEiDWSusKlpFI$>LeUREq7|Qx#OQYDfwCgWhx~rA0tL0SM26WRb>HO|#QR6{tyKRmJ
zQU#k+XRtu4cm~q0^#J>OIcY=JO@Qr>g8ON)K+hbXvP8hw&_l;3$zMoXj0IKTK#j_S
zT2B(^+VU+`Ih`59cNUXeb-TJ|GK-4Jr9AGtn^PhY%^t4Ri1QmWu+imt*&BkR71u{6
z-2}OrA9_A*{{RFxmT%nA+2*olm9$HPOt0p%yd!<2Dd+JUw~JnF#k|>`n_DTeUG$Xp
zt+z3ErVRPJ@XAN&ack>IlHuy-9v8Yju<D+jEj;vWK3q2OSq>Lv=kf5Vj<DUvu!MX8
z=#TjrxV87j)15*}n2WJ6i@*MH7zkbc+a>t@yT>xIm4+{ouJx(%id3J6NzzTx=j1l5
zI`H<E)zn>$L><bga__M-JD0?xsKmt@D!Fm_t2tAW63-u8v|x69w=qM0UZ&mc{kpUp
zjpp3N#XI4(*!LwfWh!+Oke@IqopAyiy^-b7W%9Zq=c*&ap+7q4;mpUlG8h%Y@P>t4
z<VEGV=$)Xu%_Evr{LG3C30;(kI6Lyur*8yRcy{Lc0&;}`Zlwr2fKt2d5c!cAQ++oE
zzG(6dfsZ_4XCwm}0Dtvco{?m&h(Wb=UBt1M*rjm?P@T8rKRhK!k7QUnF*mlmelV~Z
z)==F0{62QWCe6jH)Qx<-u}jHM`D!El`6e83n`rg)FF=M>UClpLUUerVb7ppi-%7Ar
zboIJ`8+*9UbFH}`{sk1#HdLv}#P?Fk6R>;_)7x*zZ*@z?WRJA+jY^2m#m3<5h8cAM
zD}(iX5^^1;SEc;L8_q*7h*yeatT9b^#fo-K0}Xe|ZXaDWAqmQf0nB5J3FpAuXv-$u
zmPR)>uAB3T`Yj0LH2K$3#XZgFSM!8idY0OuLYrkbbfwyZJZUsDvH+TT4sA6;HTlhm
zj{1>!oA!m2M4#t?s2eR=AVv_O2fZ;NdJ-8N;EpQjj>89?JRTp9-wBe_BG_S6OE<zt
zB3&^UIAk3cfzA0;<3~nv)$d6MpC5b=DY$@av+pqlFW_j(mTqW_1VKwxnpiO#c0wk6
zYAHe>!_~oNCJq4aRR#MuK>G44pnK#)Z_Jp+;OdpcBarD9co4|~3dXO)v-|zvoNn9l
z0Ag>@pV`>xotHOdg~7OOv(|ZYvq^My{#$>9{F5gr5nX$9PXi!`#HvHACv%m4x%du4
z$+p>rc;1h=9pzUxos0e&=REqp$GJzmMc`tq<|o^IUb)o0pOpxu$?sz>bu&eBndX%=
z(X6WrXpY`fCbE?zhmxS6GbofQpK`u;L`ZU<{FSiX=zoWx{~_?QOyDB?<FJi1t)}cs
zNl)d*7sDF7W)Wgvly1SJ0`76aGFJoFNhziVI1vSi-gB#Q0Y3YJwHje@TF|2U)zxXF
z-2-}g9<zKVf!A*E@z)D3>M|+#-VU6>gT*#hE>tu^ztS@mlq+xp)HHBpoay<Fyb@n1
z>Qfc4Q!hD1Me^3#TuY_Kq>8LV7cI1+8HbMxRWz6Ozi2@p8S9rD=lt6Ae|gD|!xZUJ
z469z8QpW}&Xw$P0$KNrG-5{m8_$Xzc=Ls$Knd|1Z=CTU~!U9ZRKiS}r9*1@iN_FU%
zOL$vS@p6;8wx+qhlfVBS-nIzg4OKXrO@r#W)P9Apa_G9M^|XSlE4Uq`jafmD`UD!O
znF}QXJ7Q(RPi>6#yZdxDxZchWdBhRJ*hzP_>nz0i5nN8b2zKdgbYAW{eeQ5E-!w&{
zt@aDRotbX^O`Z2)$rX*1(jvq~t>0LVQwM&7SKYy4)&h3Q5k4$zcVxsS6M7B8jOBzc
zpg(v3)9b8Oqm9I~$@33tp*cp+oE}q@7q)l&aaYQ<icph!je?S_1j#bTAGEUd{C1$?
z0{Gp&gZr-Mvmuwwxm5f+<VGLB{KB1!T>wO>_2`xJ6@+N?U|7iIaz~~F@8F$!CG}^M
zN$wU>-w=00+X#U54W_ZsKA<8v8)jLUaykgJr~yHGmJa+l$Mp%U^<`<oldk{ybWeDt
zL4?@rHnT}FSL%k77Ykg4x(dE#b`{j}Dcl#gP`qQKa3_jOzTWX2wq$=1MMjyL8JAob
zVJPhtB)Vsq(a*9Ut~;e~QuK1ZPB2dV_It|~RnEtX+Z10oUKo-|y}Gz7G1)zI$nQ#s
zM<mkRP1>U(c;2}>P0(26#UDFtISNN)&x;|afVurYVDSH5EIi6%x+c|8FO**)WS*i8
z7Bg}-Tt3EO(IQffNLbK)L+4%Wrp7lwk{{_%EqP6)<gm|~+JTQBohEigzWUrvy|T(J
zKt@(`)GlElhG_seYL&%c7WmUbFVbB$@MEP_$?d=#_dR_G{Zu9>X;hXqFjhR>J;#)$
z8mvZp&qbrCu_y@{BHbAC9`3>fNVFFBd-^2?`M%%%EY%CaPMi6qcclM*I?q(ogoyu;
z_5aXR)I?(t|LG|{rYmg()D%4vip6#>yppjjA}Lo?ZW1$h8ZxzUPzg)F6^!^Gk7T85
z;5Uz>NGZ}Zo;!u7h8-faUXq4)^6;6-*@dm2IktKg<vtBXQfcz<#o_6o$Ks>O6ul1y
zTDsjYa>vUL@&yEB^jrJ3)#Ple*z9Maryel&HbALhoxYF{Q@OK9SezM1^SmA(^%X5}
za-}%IHKTzib5%)I_gI8QhWEsAuDi7vdHj<4eTS|h_qOqt{6muet1#f52f6}x(W?ZI
zRvqyi7m{KxZDDZu%v+<z{SsBz=r-RF8xK%HKX76AiuWkU9Mag*#1zL;h^#nAbhGz_
z*5x{QOV&^ddhC0wCQO^?HMeYXB@ck2LYS3x#D*!;$*>OQU9@3U5}0;0RD*=PD3w_y
zLVRj9Rey(a>T_amMsS?e^Syef1G+2xNENW%@jU29Bxj5p0okWg8R$M^I5sL0O_gAP
zyi~9R;TNpi=<(9v1K$uxKO(&W(m2;+(8l{!Xc+WR!A@VKK&wAaNCPhk_hiV?l?y=<
zB@&JV*_IooW;c7o_DrtgIu=uf9xR5Qhh(Ful?H0nP0SE7M2mr)RRN5#Fz5uR0?Hx!
zQwcB!`*ZZrV(N2<B`M4gIDrQ66RabQWC-53zYCIDEkS4A8MGVdN}(w)4r-cV=HRVn
zOvBDauy>D#hOkU-kk~^JXTG!p^|FY6`9ci(%hT8vd%+mfbvj5Enw|>tQy7xLpSn-#
z5@Jw7U!x1xG;PM7Op@d{xI-Be`t0><S=1gUB0qXCllU~L`oh=41|k%4<fk=0=P3zx
zaAUh~e)rdO!8PTXrCiw_O{jYB<$I6A&^Zu2G;12%y)db(CDH{#zabidiXKJ6H-qZh
zM+^XK3o9WrPY@GhK*@-tzxgKqFVCwjpJcxne33d0)DZCE)E_TKQ!(g1qxfY_Lvi_G
z5?uuNg}~r<QXo}=QH`QHqI=0hevujr*1QzS%ja0z`%+Bej(w2JxY=8I>-7xZ1*Jgc
zdjp9l&RC!RyS>_f*5c>Jg4E&PcHDIzAn5^obK9iDELpZvRovY{Wx8YlVaD1*7>Nw&
z9OulW_vMr5@f69}^8!+dqi?<;oGZ&p?(OMU_tSs=v~|b&ORWX?d7zESqDMABFUa40
z?#&mlt?8j8_!4^XIw!~}LI21pajQ%d{zUqhoDxac?n2OyoDvZ3tf@qSB=9<L*+(06
z7p}CXDK>1E7isgw$z9B9xEOq^($9ZM;@Y!e9gk+GfrX|w7YZvD>wzRY3bIY=K(-0q
z9}qc^IR8rjC@RC|PmDl+V#IO2$NKC$1Z4YZGuVU%d{fm9>P&Y+KJEn7CF_Yx_TiaA
zbwbL{Ej3AsuP4`WtopoW)%qABc=5~cz@j_;0+yI9?^mtwUnBstt~B`PH{X8}&4%T#
zpX}hV-n5S&0cS#gflK;dAobrsEr-WMQBWEIr&a>MbNjMlac58INRz?NTp_*H;~ROK
zL{e_3zH?@EH`(jVHe}5#Z>Ad#065|<z7|40I0Q<;p_<5o2J*Vi_C9;gg-T4m^OHla
zdY|KqT(6C6I*Wb#3IN&a{{fIqz<c*Wb-*Zh7Y6)6><51^CsQ$6eS2=i(_LI7q`2ID
z=E9{G49$3mi4WWFgLN`F!8*^g;$R87Wsh+iervGt{*LJ-odD&kw2|cA7q4gA5--SI
z^#}q*6D&3s0W0;d{3&Z^#!p_R3jKqXrGos<h<>=a-D{0D?hG~U&`k@pd)1&PT<SPq
z|LW8NvW#YPprjjCreB}$IF!;ocd#r)N=()~PJ7$aR)Yv3{1PDJ^&mr88I3?si?b6v
z^e16l|7_2K4A8qS0cyRCZv`PMe&GM@l>3UnFaDM~iez?x$M=-uN#tK{(d9YtToAo^
z2<l_N{0FF6jfOhiKDgaOajW5B49j%n=;I=X7o{fZB8SU7?5cNrFQ~x$0^bmNgn!&u
zj|GN2ItTk#-UC=yAN&Rdcp8As51v+Twgc>pAp;h$W++W2t|fiMc~L{(6@2g!q_((+
z(B8>#<X?M2<~CPa6TJR|vm{f(b@2~s<5kZm6W<WhIK@-PvuYE&+ms97URNV=TMxlO
z1Y*T;egrg+0aBC=#ouwk7FRD>{|p{TW4&9)bTycT<6nUBce3Vj3_#W2obunn>V`+u
zI`Co{3^?a{xXEQ>tVb5juUh)nolUW?HjYBKBUUXJ#B+%XKhu4~+yw^3z|~}4rhCvZ
ziZ8fjNGr1F<KF)1AV-pEcz~yFz5b=;)2_u*N8e;kazi>g|L5GG{lD1`HkaA@i~am!
zGMuo0Cqq?ux$qZquq~!10bjGJ5(YCb!#Bc+&_fHU*YKjn4~`N;ZR{S_WLxOY)KOi`
zPFk_su<6?!+#JTE=E>gX-(dhdpS=%URDZXr;IqHdOn7&ykv!X^=RQEs86pD{9JHv2
zg*B*&1%8EeKP*jbDJ1X_M|o4wTJE}R|AOoKVct_(mx=R0F%Sez7QU-TL~R>OmNwlS
zP2q!qY0(o7e1Go{9{8@*`4|=kt_uXY%)}jP3(#UdfRUpY`A5FWa*Yu;mq(1ZtTf{2
z!}g~Kf~57N5rJEcLrK0Ai|@5ah4<gSzU|b@N6(CS>P&@X;$-3wG8Spq>`L4ApG2wx
z@;OszqWR|Jj`V;u?oFn37NzZ_ZJc)ktgIcHvpm8?s%D@)M5-BT**tz4;QJVc2rkDt
ze)&ueB&N;L6_c15X5ZZx%4GPS7PwGd_`59y+!y~Wqa4RUQ3eq5P%Q&2;Mo=6q+kxF
zaYSgF=w25>Xudz$yQzXbLH%`);2FJuj5PKQ4BjkD(<4ROZ*Nyc^qy?^-!Gs%t}#qD
zFUHxc*jir)5x3;MvKkP?Ug(VlyKo7En|)1Vg_tVAC}Qyfj-wF8JpEu1VuyWxn1i{$
zFM(|i^8Ml{M0N#?SV|_o4XW9L9{mcgZF$m!;bh+_T39Fvp{lqc25=BgPo2|Z9~;3u
z<avY?&>Fv1VrEIvd1D*EK8a3KiYdj2r{koen6J*-`v`W*skrH6;E$8&`*9K+xx>kS
zo&;wHaUU!SHQ!=tgSi6c+V&3bA%ADZn|cju6lHGv`60p`-!V=iGesX9zSSpfCy|#m
zVA%e~6i2uVx`r5kA-r2*R4mG~9)Bfp1<PZ3f~RVvS&LB@ebqf;=FCdHy~npk3I?tz
z6q{*YrzjhteUyT)L%nE<_Ej#uR0}HIXq0TH`1#I1-;-h_<*+`)t&MlIVCzcH#1ZsU
z)bz6dgY-81rq^X^W&19>`J3(y)M<tWQ_(M&&u64j4VQf?id9cjdU&>-<ox0s!%_t;
zhT^N0?DxmfPOC~OMIca1lQ*Hk6f{!qOu1IW^Hr}EY!qRZE$?W9_=+`XbvI96<)+4p
zqj~yEsa?8Zm~u#qsZSi#V<8PSz~aEa#%#_nCt_I25M3py+KHAdIb1yucr9XEDDP|z
zH1v_ofgb0hdBV$nu&xp6fsW$@VEqw6xK*Gj9I7FeF+!wwf$O7G8z?N>d>6XG_F&lA
z6uxnESJ2E982`a>0$>x22O<WHk8cLURhaq}gPvdp>d?;#1jew|qo_8h@Y5rvaWuy>
zVU|PBkrPdKrlHN~p^rpPBA5gA=NuLs$G-q7G{EyTnx6BEi7lNuGAk3G#_Dkf3Juo`
zT><2w*u)SMAX+YhIrx}p#>-sWGI%ke#FYM|e}8u)<>d<Mqb)R;Oy&Yg7$5Dxj~72Y
z=Q!R6CL72EnnjvQgU$EFfwzI_i#IXD4Z+HPPB?j2XWqhL^k52>I~@n?Gn}pOt}W1n
z9D8$cOmWl~EhbQyU#BvC!_Yey69)wo+W6rs#KCxHxh?`zOlDB*d95qPM|1Ym(E*<X
z#_FY!6)L2N<qiflK<L_3N2jRzEp&9F<Wk7R3*A$>O*&5%2@1tr%h8iN{4zt?x&e;$
zr1Ai*6&CQL3R{#=i;0=RW)`JAg|mdha}$GB&8<;ib@m2jlVU3bDsH`N^9QDf**|5a
zs<84!isI?YR~~7Uzl@bAb2qq)3Rqpux4>vw?imFQWf-FP_WQ)kl}Nn^+{M9A5bQN3
zmPlyV1!Wx3eYLQzcBFVsq2x&OU|3~@S}D*T#aSu36C)|Yf;j6E!M-g<^UrHi_RfQz
zhTz&0ayic$U$k;ac$$}Cc*Lw~H}CMn*jsuEH?NrS-bjwyhNY`C0liMW!qJ%i^qQo;
zWMIJ5B`F=`a)Al{Hk!G%X;5^NYdQ|Y&ttX5h!bYnYq395)HJ<HJADbzJbIZw482{I
z(BVf9N~$(iuuI1s9zZDjpFu9pR}t_0XQF@oK9=U@t8cnT%J9<C(Nq65)tfaK?cqOT
z!?l2#EKm9L61n`!1b;J?t`byDTtPCOm=Ayt-X6vNf9nbd&I$DG1L{N^!03$liV>TJ
zIPUfRB74yE^-Ve~*H6`l!%~3>JeLRz-h;?xq6t3!`$n90^E9Pr>&fLM*99z~$}`c_
z{p1ML0vA1RSr2GbX~OUM)fW6AfDhiPz;Uuz|0z;H>5O62($SOOheBXz4oD0u`E&3t
zwT06FP5O9#sBP^qXgWw{dfi}uP{mJyjZy&=e$L>1@~N&B^;D{jR>bQ*xR#zaaPAnm
z*}IF4x@9`Ba`%2i)VDHY0Z$p{{F0_{W5(8MYc*$%E=vfiQ9Osq0~dG6)rT{qAMZJS
z!AHRrbRjy9O(wbsfA$_E2;o~$JTTAH7J3Z12G%0J>g<14ES-PAipzJW&{LJSW_ER<
zYU7|L#n_D6FyT7jI2dx+E;mC78c)KIoOEc&?C|2${uHjt<VtkT<E@|4y)>s)eJ##D
zWD~yCKM{TwtKw!+OMJhJ%)wJn3{_~FBBoB$U4B6Uz)VBm!E0T=vl2zaF2>SqstNSX
zs2RoMIdn|DBwntPo;jSl0h-PkEiR3)b{W4rkc+yJQ0BzJv)@$6eG>hwX_`h`d+32Z
zmWOH7;a<sN^i6y^8KItHxyk;}+0;F~NT65i=pS$)TBftYz9BrD57&;P#0DDsk8mpV
zh72+v%A1W@gNpuN8R*w<h`o?F#p6AKoYds<>^_3o^_XZ0m?4;?u=U#EvF``<0L5I}
zIw<x=O2;pDe^$Dx5~}G<n(({(Y70Pg)fm9YC;`Cx-LyH3)_<n-1Cx9wTOSKz@_c7-
z#P19afj@1B&3Fz72Ii=(cwj<*n!78J3km!RIX29-6@x~=ZL88i_&K&6n?a<`&V{on
z?!^x>${qo1?;?&nO8+GklUEd!+_w&UfKiyT@Fx_2DOdq>18RaK&>Pv*4AoUsaRYI@
zcDU*LGQ!Y$0J^|T<C>?7DfNRXJ6_<97<z72Xg~-sW9pX-1_5yaDC{Tu#mBJZ6JS0H
zb(_)vNw2{K>oCBZ#hm|pECj)F6skcPU<n7*OVx?n9d~at$TbE(HcMCeE-F%&TE5E)
z%3~rBWkB9=vt{0&V!;B)&{;Nd1Cav#7&nT2WkYBOhHykMQ^JgwAv}C_QDGUd`-4C(
z0Vr%nk7DWfKm}Ha{t<yc3p9=>>LsHJzuwrP<}J4+R!%f;I$Lt0f|)VaqxhxJqiIor
zt~}WP`s*eGWl9CjtG`~d_JHr_bE`S7#h-?GN>lqWi|I7K`Z;7t1XF6Tb?u%f@6>&Q
tLU|I-iY^Ci*;=!vceUQ;TfLkk2*I<U_WhmTiZJ{v+4}$cU(~n0{{@Wx{yqQz

literal 0
HcmV?d00001

diff --git a/windows/manage/images/aadjonedrive.jpg b/windows/manage/images/aadjonedrive.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..6fb1196d5f74532035cdc58149cf855c41cccb03
GIT binary patch
literal 84125
zcmeFZc|4T;`v-bUC0kNtZz@7b${sRpNSm$5I+aRH2nmHd36Uj)LY8bPOm^8Odr0;r
zl6~K1tYemY&S&a*zR&voo!>d<pL1TXGrC_i^SM9kb-l0mwcJDRp$|ga&T49FLQG6d
z&{gmQ(TAYD8m`v2An3vc=l}#kTfk@AA!hIw6ZrZ0qW3|kpbbn+jDNqqm^U#qUYj>=
zWZuNGnT3UMZDD0+-Li#k3kwSyCmS0(2Y9itZsp?S*vj~u(Fx;r#$Dha#}<|?j28db
zUi428_ZDWM4b99<d!Y^7Ow8O&^lAtN=DG>2h_R^OUQ8R9H*VStro_e$8su*S(`RPh
z04BR><3`Zh1AGo`<leM>&yf?Gcj#SX+3Ua~>lK=~Mf7BL1+RW9K}_zt<6~B~oqYTP
zg8RfJB=;YXS5Q<^KB{u+w1%eE8SS$Mmo6I`T`@MXym9lE)op7Vr+d!#U0mHBct7#+
z^?T|c5ElL-A~NdbtLQgL$tkI6Z`0r9<mTlU6c&9fuB@uAsjd55-_X|H(b?7A^R0Ji
zcw}^Jd}4BHnz*>Myt2ARS|>Bs#RM_`TGoG7_P2F$gLQ2HXRwilu`Z?!F5qJ3-nePc
zk<Hsr=&@XL*s)jEYYWfG(8TNtR#7>90`GOlR<@mD@<aQGjHUft+5c`~kN<D2>^}?p
zV_m%v2Qw2mJZ5eP4Xxu=50g?T7u`>hF58YYqmXutkn|nrjY=l>W6NbreFS@~XnTjK
zU!LsV&cpqwUTwI<8XnAgKAEHN-m~L}^8H5<*Q4jC4LZ4_^W@QPFQi*=Y{HKY4aOLS
zntX2*tar9d%{C}h9F&+RO{U%cyo_t=g=n#8!j-4!$tg8AI^^wf@;O{_eZ(R@9~F!z
z*u$8>7rHF73siLtcyhAT3ADg25K`f)Q6e2uIx&Ky3SnR$PubSvs9ZE*U5*ZEX^h1G
zd{dqdRopa1f*;nQNlN8(h>d#t%_H>95b93jX6ko3#OU4w;pw77j~g4{@d<Ya(D}m!
z0<O0BvQQA@`MHp~^ZHeI^tTVDtwF;t->r~~*g6bJxg1v~lZ#)wfU<(;qaoTed(y$N
z%8>P=co9#*vNe){4t1yRB;3^Gx<H3EchjLEOz;4ssrpws)GyCOVS@+rl;CBjU8-Q3
zWps$7iyq92@<!}TLGMa<#&jQ0z-RZ`+@xt>lb)anCZ-GIqZko*@CO~D?#C0zSUN;L
zssr8_25(3a=K~;`w>?Q(GZ{TT`g5zE(IG;r5_Km|AHC$b>nIqh28?7hLgQf~Q{ln<
z2Wd26zhIc)1S34{bZAp%Cw_8-%Gl%>a3}7wiX`*OAh^pW-xBP$5ZG-IOaK<HuyKaT
z%FSTlC0*R-XwZmq9&FBgQql<L^duQG$4lg1m}j~Y)>q@Q>hzHgT`N3fx<ocgfh%_7
zZ^OO2xJc6W6&Q9BZX~KkN5oy3D2KIHe4XX$J3cKS_Uu%L_?d~I7|RIPHjO*Z$M3Rr
z5A~OQkK{Yj%n`)XQWU0S;A_aT+k2YR6Uact&Isoa(tiA>k`k|RozZDN)u*FpdbcL9
zdtMxP4Z$bn^)w)!-!52DU7qAmIp=<vR*t{@tP$5MG$P@Hh>%={VSjmBma}c81}=8F
z`^wWD1grSDo@NeTzQm+;hr_n%)LSsprI?{PYVU=$xpO1&1;&L@D!8W$^Q%RJ-s0mM
z1D%>po~<HXIJG_RJiB*TugRG<Sq<ZO>X{RJuUR`kY#VcEp-x0ouL`pPfd|5J8nt{c
zP7U;0o~T7tKcs+`nbR7<)fwS&wP4p*oe-2be)*n-3TTnPM$!iY??)5i3PuxbJrG_}
zy$0m@C7yIJ9<_LHm+~KN`jB96hWz{#cdP#@?w=Xr&N${@;ttg(aD79Q+^YwcoqjNS
zV+b%8b?2=SB-sAH2z&o0)S{E83RMAgks42u=4_!uG10^UgcC=HD)A!aKjqxxH61Fx
z&AiG3I=yX2hbG6>To}Uw=}JOS+Td?3=@C3t7(<7AJdgcq{Zr~&SZ0Ob3Tyi<bSON6
z*o|-kHL8pTI<rQHmL205qRdblqmh0dCd%dkf=SRBxT)TCf)26p0cAT6)W9Mc9v@X>
ztdgMyxH>YBQxdq(W<`g5luH<((l|qp(hzpj_i$?+iE*zILs6gK(`A`yWVHM#_5#1e
z{u+?*j%gbH_Mhc`=>m8+ixfZHwERFlhN9tq5<3%^yx)GfgmN@C?sH$1^yE?X&S@0k
zjD0WHs_!#|{W8I*N?npPLNutua8l2czdKD8Pdv@C8*<y*lFynH?E0-heV2Twkcffu
zCM@9xyT7!!vE{AcGd(IQu{@&BPpsg6$dLAGBLKi2hf!HeKhnmkOfY6q$J}dM>?`cE
zMDQvQ^5pHC07&w;3$b;_j?kfA(_wgSf^rJ;!?R^TKuw0QRz-()P_>g>VXa?suVw$v
zOf$Qdd05Id!tgMU)!3&`W}W7z5Vp5JAbhxX87*DSd9_4yag2Rfl~R_ay!*3&mndEV
zMddLtD<!;Mo3lL@^rc|Q#1&Va%5o~N@@8jNV?^CamqG<nxiUB=<$=H8d<e<i%*GSb
z8&Zb}#sQoMyFNPsaNY>9dsc_`%>>x&hp>yu(IJW7A>C6}@4w(YKOJgnW*p(>wSgf_
z5D(}p8|+Xc5R{nspYnreh)+%%+}g~Ll3&djL&j6puiKN4E(il$rBL^SA?1J}&{6`Y
zE{ri6iTXA`Ney8jJ>*#fEP~x2*Z%{M*P}yR$t83sDH3SPRvCt-?E0&waN-B^3ZKCB
z4Wt>yEP*_p`HR&50`Sh?q~7Bc608I4n=->-SW(q+`k?RU#OB}nMolJgbuR&6f8WUj
z6zS&&_P-P<zc?LiO$ehY;~o6&x1ebh*s@NWI>b&DXuS%aVLH-`M3IYf;J<1eQj6li
z!aT?YjmllU>-dgLMdI_Uf|1s{eWJ|OYpW?Q36NuBbDF|%eE!;82;~xWYk|4b30iWw
zve|9fGoo=qA$&j73J%qct$PQ3ey~CF#HXWQu}hzpaV<F3S~VAnq^l0alqNT4Vz$?E
z|5sX8iMBdkGJ!q5AdQ;jJAqUwV%qR3b9cte!tWfem$OvWJ16YPOO~QogC%YpET%&r
znxd8&Ti`8w-55XkUR{#oT@}Jxo>Ij@hZ>QX<EZeu<6x)arErwRfg!C`&NV9O2Rx7p
zHV+|her*SjJwdO1N<o?m=}_EZIyA815!%b1q_xmYEduQ#K|A!&t`77>?Gi#QBpI!>
z(_+BxsR3*#-z2l@fu|Du5E2g)l?`m^vA1w@&;)JW9zY%U+$qG}9=*^A`@kNUZ>w}@
zsS-sQ)T6~SZr{VW9fCLD2_ZJ9r4cte<Y`Kkq(e_0>VnA%H8UoQ88G@!|FBgb9ctbJ
zFL)hCeZo;id;NYc<Db*({8Rs^|BR~3LXe_ETUHb4kh)U*+8Dkvgrt?vwN5OhLwIR~
zm$vf909yYU^#5PfA1B3hC&iS%Lgd68rVJ*W_CyaR)1eLcnFb0SI&aiT@*<LKNi!q%
z6fO)rbvlCL1;q0V9eNS&&Ps=HLJPDb7+scS5e*()rr$1>B>+^L#8k8JchD3;H4QqH
zhJ8oHp0<v$dEC^)gvr4Z^kt&qz8y$y2sb>{JB{B@hi(G;!`FRc1ToR3LvP~BINons
z`Ev8%zIC_JB#*iK5pyYXP8_#Hdvsqv#6(K>l|_8z&A0^wTNWM=_qut64n^w21H9xD
z1pJWF({cq;TX$9Yj#hhxrt2%6dkYGlIS9Shl`HH&{e7A}n@x!$G<t=rcgL!1G3`|;
z*Zm*6OCC>D>zaKN)v~5TyIRDEc`=U15B8nCL15z8tffFv&|$f|JabUB?&0D$M{F-0
z+F3V|P27<DW;#QuxOmBW9ThrrQ%;8b3cV1ny()m82*j_|<GOI){8sHgkfPEGK4vAi
zTaVu_%*%Q7LP<k$JxrBD<WbIB-TI>Sz&6cLxy!bqLl^zrC}&+uG&<z1GxIXpx{xvX
z&ggRnJF575GMb7tbn7I<!dQMR7@w;YJd&=0-PspVvWDh*<~ULp?hsh!8+PAfjmo?T
z&&t8g0{DgS3l!mRbjU!4wuoIlwdzHSE8pdQj8NyF&@z8;Ma1b;`<o8Ib0Q~=!`hw4
z@|bRLnDeV#tiI-@|G3<t2J1zzi94{XjXyOiR=O2Ez9h;$yzy;w<UNJOC@S;P8e<Gr
zuvV=e#u;n}XMjJRttpj@?6#tT^B#?-W&2T2$CH8a35P$S(VkUGR6;niF7M%Mzdj@Z
zrnJn?b3KIQ6~Dqqhr;013Od9sfyBb20|c(-fe%eUJjDQzTtHomL0o}ExJT1A)bJ<$
z(f<dy8oZr`T37n-^8u*yRDcfY!Rr!q=njgw9iFN~0Lg)<Gz!PSQl$=Mw3TsKPvXI0
zwH(w7Ko4(*J1_|7xR2$J>8nGOjT6X~dd4hHTvMVF!9o<sdxp4EaL?`~Wx9E5@_l%H
zy!vDKEOLFl#ADU2#xtIJ2pAS2>M_#9P#sbJ$ANZtc3$eN^zxG~!(nA^=;Y_c1D`Ly
zHVZj&xhy+?;DqP6>vlFU`(<sCbaa}>Lu)C7B_)cO;*NDl^fNL)nn^}A`SnQ5j56jR
zs9vRX`v%w?PESBfE6(Gu4R9jWadNHlcrMq+=xzI^UP;8vojdH9U9mT3lb+8m2ZQ=C
zt+T{|Z*@aiF+}@epK|Z?XDN@#ior*vlNWy+)nN_kFV2>J#9Odm;?*`M^Oxu?lh^NJ
zMYQ<83*sv>%Z>&=pt|V?x%kGReq0>j1N+U<^M&Q7tRMdn6aW3^#?Y=17AjtIs&QJT
z+pLnmIGRs8nD&~<Ddd-@^X(lO-KH(Z%KAypof5N0cSYExCVtZ?!o=`AKB4bb+`yTR
z8~Hw28`g1xg$<_m0#e?6lPa83B&D;-A4Q+J049sY%yG+X+sD78^6R{HgS?|@fcQKX
z;D9SM)S2l}k1Q~o=Zzu&iQW^ka~iX<CWH85*Nl)YwsdI!HWC*dy4u)GJ7Qrp)Dz&@
zkdeM>i%P0AYt^6s=~Z3V)zjdCz{Nym?CC{xmuC-ZRbgg;>|BJaeLG^E+?$a5fQ<&M
z(&HG8!Z`qfmKK1sr<n#&(`ZpFRLlh~+7!HO(481@)$?Ou$`ibd+6()#thTbe-U)R%
z-r2)TIP9WEiA&DMN_K%4bSRyn4ei!P(9@&fD5aJ|hA@>n+*CVaW}2V7#GC$^=%(eT
zp{Ax9C3X{+IOf*$lvEzio(!rIFM*%pb5FTTk&dZnztb7Vp7Y==4Btj;D$ag>SORrq
z-6-zxiJ30^?exKZ{!5oElz!ZA4>yPB=0cjU4Reg~DfqTJ16SdZr$Oe6FZk)33?-B3
z0i@w4lHyI!w@}~8tA=g8XC6#9DZZY_&(D0ZF|qhY-?-|BiXQeiJ{&Rrju!I%z3+{w
zQY{m-RJF^A1GjTctyT7=Cf+N)er{j3=Hu_hqN+PXja($eVqF%lG*+@5NS?|twL7rz
zovJR~#D}_2D|=5qJZB9*h<bs!77I55yz)Lz;i*He09OU*`U}z;MU|>bVDWR;#=iM}
zWm<4PBsu7OesI#kMk^!=%jVC_r@1v3uep(zcgarbJeT)9;@t_~{V5ad@La8H$hLi&
zX1R&D7hr&R{C^+>D9%q5QXp>%IAR`8WJXWR&>?^`bAj-%7;YVyp#Sfq6&g*4a>p%^
zR19Ub&BOO9-0@34nV+1N&{37zIyBCsdqv#y4wsn~FWG}&fNZHJw67)-mg6J~h`do=
z_g+!+KIEw2V^&|T+V4PC43C@dl5J?%P)_)$%TIFa_9;4_%H~>XspoN7b+vsMZ_&@C
zB{O2v^G&%WA?6oU0d=%PGfZGbGSVD_p8f?^0}RE&55A7$rTH$GaZ=I4FWt2i6CJa^
z%(#Z{H`2bcNw-w?rKe>{vVV<xH^HD%#U&Wof19lNZl9pX@(jlUPpbISBg~#-0s2Sc
z=Y?Z896u@|06!_ZW4B`_??_M;Cfh14JTy`w_?<3p<-tqmCPaqBGLGxHg<7lyd(m?6
zKSFM#^T}M|L~E(ep>+FU&f<$ntL*GeZ+MD78i!hZsTOtoB6?^+<;dyv!>GF~VWcGj
zxo#+`dZtO@qIGh6O<87VNyG5TdWBL)Lf^KWvCsOS1CMWf7bo>5%KOE;b7A~|Za=zT
zxK{e*ovWAR`{G}SB|UQFqv2<DU;N2(Ud4fLaut|Wju1L@3g-{sX38Bw`=e*b7hyrl
z!yzSVwBKWRmOq{>;wklV$n(8_+^)6J@F2>!-ib+9n;*S_Hof2L(Pd`26dSlfX&yhT
zU`3PaL=S#Jub-U=K+ne5V91!%?nuvGcrmCCN8vQ4LuXgeBsnfb|Ko57MZ7l(iJHo<
zy#wpz{VAUGdtB+i{f0NAQNXenle&?r?g6siKF=YzVmmx0h6iM^cI_8gd<awsIfn~^
zXODT%p_J`L^ITM5*Y))XGDxWmyj<gP9MxjWqj!AMZx`yz8kOhSvyk7(VApgx1Ta<|
z`9k#U0g(>90biK&X4ee@)l>3gX;A)_IiE(;bwi~cM1h-}@ly7BYq`B3J_K$Fh3lH<
z`~fbbpW>HioH3GcMc%+-%)lcg-mU}0Sz0~J`OP%Uj$JWIo>R_ipKULGF!k}Z&EfQm
zmr`*8;_*q}X$1rfRp^K_Va5;(TwBl9UHe-WlAl&~3wl10PPyGE#d9!f_uTh)4%10(
z$wV!x(5bhsJ^0n;If3CO(=P{_SDUu!6uqqsFCJYM<~o6S_vEVXQ55X~d4crw`>EzR
z^=zEy6$~BHR)=W@4IkY+;^K1XklbPjU?kp_x7zM_Hd<3ox<+^PVP(R%K7RYsw$FFd
z*Q4J7iE|})z6BwkUXQafg66KF@a=(}z$epiZIdUzYGo=dlI6^@z~s%_R(Xeip258H
zP+>bVr%ifREnPqqqC@vl)TbkrZYI4^BQi^98Fx$Ii%*ff>xxyad(-AbhE;=9P6r>g
z<*V9OwW+p}U;b(MyU&zI*Js(~IKp%k>QN*G%L}L_(|jGO_+B6Z0W>>i9^v-1VKjHU
z*@tRlH%)drWXnU+IuKKu?kUSyk`}VZs2!dxw23F32XwHW2d+LqcA@Q@GoVAPPx0$}
z@n%YT#d(09#Z=>$K|GDX4=;+r=^wSIWGZGoK9mj-*~&q<O{3%zSm<>b<V+HyOZ*>Q
z@{)&&gF4{q3&R*P8%*LruWtin*D+*$g@j*1i_)QCUJq5|+5L3jc~)bnp<2|FxHP!c
zt`kjo`3z7_sg){cA+V``p1~d@bquvMLxjgYwdl~_rW``@!CVBcN&h=|=m;RKVn#E*
z(@J`Pw<`I=ll#H(03Unw6zxI-dZHV|u)k1&em}juyg-)jO+$8Y!;2cIzb^{c&Dmj>
zgzUB7PKR2+-h8@7hd%p}V_v|`xEeb2Y8`0YwhZeu1baX2w{@6nfGmL@&bTi_&$Hb^
zF<74Ru2>UVphM`(<d8i5Te<1OO5B%7M81_k^!oOpO5;oFf^Z=I3pJG?u@Vj=mUg|}
zbDYB-rn8BWTm`rH+KV08^mzWGay_&1jMrs(97$pL7;Bme(57uyVqOOB5VGfb8rT~5
zw$Dy;>{!Jx-dL+_k2321J9RM!Vas~qi}6E#bZ9Tv6UWr`*U}z05vwtCkg_=Sw)X_b
zU8HT7oUgLkx$WX%m#;f~y18Kn8Y#+ng&you6?&E{A1|!npX?%gW?`u4Tk>^BZSe`Q
zcmqu4^(c9*>R?gR>llQY3ptJM6b6Ubh^xhn!<*xGQN_z4(%6XfCOgiy$>_1UM=w*W
z4hIa4^cPA9^u=10dG-T4!-*f;i)O;l^10EWRMiIR6<QWJoLNsvxTo(uJar?V0uFAY
z0&ruWQa6E6i}?id5+^nM?vhjZi$be54axVSWUe;>2mXjVTHyy%W6^Uy0ALJ%5kC?;
zvSo%Mt3kO52Gl|XsR}VB;Z;P^8*GQ|N!4qPUC3phraJCO-EWHpEByU&oofK<x)(fq
zFuxPa2zc;YHXRbelX$0AGmQX*u64HhR9~*T?DODa`?Cw`O{!^GF|WE(*z(5C+7QF6
z$;X=exWIfXa`|A+mHXv{g*oow%+2c~izX8nTYT~|Vj>D6&pp3Ce_44&_u-`nc&d<y
zBHpHDz_TSzywoT5Olxz(!GJ4PoZe1>i*9SU&NPoV;Z02*F4WU@dz~i8wPouJ35;VQ
zCq?xBXw)$Rr>PhN;G*_ia*s!3_o_EhA+w+hBQCOW@3q{bt7apwo8ryux-w;`LOSUZ
zL8(L;s=Ujym};YgbBd|GyRr3+S=}=GKYs6v0?0Iszoa&MKdE^&k>p=};ZM*c0HEoo
z##9hts?hskE}_ZHG#fb2&;OA8y6BnId>xJ|4y8R;4qIQA&=Z}9qTF-0v5I+_0krov
zyw^&H6n?=38aadOs!-hjJzvFB)Img{QHT5H7z0@vpE#zgevLpJ|M%d8`<qsV{=X6%
z-cJoI{{hVCzhNFGOXzLC7WMRxeRL=R0LY^%Iuy#aq6GZncnknRxkdEfQ1#z|I)vn3
zdX5gA(4j+23}r`6+X3}a$MYdpqd>vDFXy$PM+<FW(s?Za_PlM@0|eXg!lZARWw<%%
zk#nx1{AWg5SKkF%J~~tep?o}3Legf=T$ECY6D9IqIB?yb4%sngc1Tz>;?z(Isgc^;
z5WfSi$So|FFYpzyTn!)^zUM4?wKsU-)DE%p$2YxDsE3|I%?a;RWT=7*DBlH*t{CD{
zwV+2^`iWyWziQb{q8sf@pWoH8z^**su60&#ISsX4IrzwEu!IhQF%s+DVEwT#Q`i|`
z4-Xs!(EaUUlS<=k7ahv83Y4C!(BBiHCB-illy<wgj-P+|({je#IfV00L6^)}NhxU|
z%fkG-;<{CQmA_b6;d?o=?K&OZGbdwPJYN8_BjzCZ;5xi`1zy|@Od`BELyTIFud1W+
zydMnnY{C>4)`T!=rE6zMJSo+3PR*S8v<I6I6g0-P$7w1YqvI|vKntgCgQpq%&vk;z
zCxz&*Q#9b7IhYP5cIUWD2*Ec7Ho`qe(90^M-j#QT@1{FkUc}h0ml-c#nyQWERlXgT
zv#b%{XMpIHID>3u33|!`oc(5?*bPQ%;M{KX>C>S$nqq10Y6r+PJhn53du*D?MgU|h
zUc!qJ%{=fo#SZ*3{zArC^xIy^H;>r<mlxU_1#I4;xjPn&JF`HO48z~W5BkH4VfJ3=
zm7#|Ki>0PPOoYML_I20dS9byG*5)s@#)WK&J_2Hf`$*h$$bt_~zFwZdHF+pNGGW7S
z7uWbhgbhd+3SA&W3q$}9Y0vC*2Ml3zD_GZEMhKvL6)ZFL*)+KhVLR!fL$QQ=nuld*
zD*Z<FKps)lH0D7x4Yq;Fw?XGKR;y1slUvn!Y+SgfWvA@obounA?^<W>yrEaU^j`DT
z)YAU1caQEZzhfWZ@)Af49Rft8Dku>w@0f?ryD7!u{ut9Ard7@xU-t8~`g4D9l;sk^
zN+7(juNJkDEQ3HbfI)O8KB+ZG*=k%lkHAS<TSeJb!o~wLREL^IFs|$xud)Q^QgVE#
zs~>|Wzno<*YUF1Xe=x7hG`(5s`r@Lhkg>$8F6C?bi>ksKb!D~HUnb}01y_FC<E!Ay
z|4HMt?z>0#psi5)%Ns@;qiyr<*BFa6H^y&)E3`cikSK;k%O4kp`*)ln{>V?9iRZGI
zId01POnaAD!H42}U-PuN{nCM5?YV_t@VB3HY}#Cg)+Y@Ru{HP)aD`BrQnisT$-9;g
zZQo5mKBhOAuy<wKn#>=2Iwj=h7R+;!;<zKRzR6>542O~&NfVLmInv_L9{j@B6GJjW
z*kXw6LpnarT-(kiPb2&N4D(wK&PuP8RG%{!G>$Q~PAw{097dH<gt;HzfAl3TUa1q6
zT{qXB>DdNsyUSpcQ)QPrUwmbOp-b25>KeZHV(Zr=m)8#47Pp@eUpYK_M$xWHiWzfG
zd!u8b;pLllY!RR3wb)J@M_fK9oXsp0QU+=NDHQ#CNc#8REQC;s1zg`l1-XdqLPH>Z
z_1M*T5F`Tnd2UdK_ILrkT;qm$hRUCyz7DD3q6j(L(+)=BZSaGB%qW5$>QVeE8^|oQ
zi;O|=i9fqfupD5q1{U}N6fMYP4S8)RHHIcBVh{r#;QEy3V`y>%MxF5l1HEtx(8Qij
z96Z%ETn;#&_f7nmGQ5Ef&CFZ|9UohP;A=aA4;*Pc<YA+IQP=Roe44zHrx~_=qeGZ$
zQgp+3$Kco-`K%khUB|w#d|=Lm4*HD=xqiip97@A~yfP38QA->GI@%LoDo!awSDCfX
zlHXWesQ4DrtURyM=|jmk$9ESFQQuY4dQ;CGurZQ7m3LYoX5sl}R}s7*pZ;cx>~+(}
z^UW7oL3${!%~q<;ASC6aJtQ%<5O6vIpKn%)YBW=X>L<@m#E<D?%<H*BYzmJ57~~*M
zQR&cuIMbA%r@INq$>Xm#)x|y;vD<nyf$jPC+%F|JWTLJb1oOqB>^fG<ZaxqCsM~W?
zZL!bwy|j3j+WoH{)<G_Li$&`NbV!Dnu*FWMmpv%XSS{GI3~kmfy~6VR-CSihdzho+
z2{5mmZd0B9nf7STF24KieW)PF0Q*YslAE7PQ{f}EN+Evg`?GJbuXE-qrk;CPZ=Z3f
zZBwy|do^`@hn{Xs{?;l=22<K8rP!_LCnGb*xBn;bcLlC+g2!YA@{DM~z?~(FJd~*f
zN5vmC2vasoAbu8rE^Y#W=@)p<R?MpE04M-(o(2AlAN9J97ajWPu|vkRe0WUA1+^-a
zi$qLg2)9tw6sH>0>V<q6noK*k5pN6RMDQCUz1JVVjMD?>58Q?^sW@Phb8OS$DNm5t
z>-e*W{JW?8-+rSiLh9(y`k`_#y$>sE$O~;uQ9R-F2;i0bNIQOqQ(P7P@6hak9t=P&
zhQVH_RW872+j)WHow)R;h`>*g)<>=23zU9?-26^=1{?e*<TfH~=r4?RLAw~x{NLI^
zNLA{`;BQW%8I}nLdz!Rp?}6<{Z-WOaEbJ);93&m!3gen-shvy5)}F4skLSfqk!>Si
z9lX!FL+<<8&lgvkugx7t-Gy!XK+3QhwMNkUqX*13T5e7JGFJ<l0O(F-IyO#{sN^^3
ztG(R6!?t?LuEb85`t`0{-C2l&qZke#p1VPU@NtGwbvbKy8gW;+eBs>__73*W`*Jf*
z=iJ;X%Zkg-#E<mKtZ6MKuu9_4q#)u~G!s>qQ1_(!T=bGIQMOTD|5%6Nhl38KHq)7+
zT#8r4IQE{;zU<Uuq&g_m=lw}tjs)C&*3-So(Y9q7+jQQZ*q70E>~Ry`Qn5odiPn+O
z@G+2o;GkkG^pKZ#d@VjdzN$=pahSDK@7At1>Qp#yfZ>@5Gy6@I5xp@{4=1kMn}1Q_
z=x(7ySkx9$)Uf8qgeyOUo~j*7YRte)?-8+mb0+n6?EV94pV-jN0yo#UeAR#+`0$RC
zo9E6AzE(LMFi>q`KG%+^yV_ExZl<bbzaN5J4hKxLu&J-TeB|hG1!f0+{K7`}OGKZz
za4QFwTfH@}gT^EF&1HP>C^grRfBHn0OPa_$cvOgRf4&BKxQ}<N97Ri)m&Ojql?}y&
zh+eSex)h?ZG%u65bjWV>Oq~1`-oSv&@kd#Mo3DA*3*4ha1xi&yrf#D!zx5mThkC9{
zOnaWzp5=<DoU@{hT3rt#g$nUsJ;U-=&*Gs6MVGX_?qq()4dO<1jpbYCT-$zFeT=zN
zyYup+Juiwv&ClNX&W1)wT`xuD*Ht}yZ8RH7DmgF9uJ_=EYBf7|A>Z*=_t&olqDt9J
z9dzqZ`#-Uy=$Qc%zTht?Q-j$`hioSK8sVGcWhF|HL^atxRhq;iBTZEQRj%F3dyCor
zaQwETvCZqMr~uTe;`9L7SlY7_@FZ~m*j^N%F|)kCd6<`IIP_l}OyJIKRAulhe|JDm
zK3ryan3Bw7jyD04&~F#>dII=7nl{kKh18Y-dUUan7v$H3q(RD}iUeW|7!w@wYT^C#
z0BQfL2G5@O-yKH~*ZyX|ei8KvPbPQ5%grFF)^nP+=^Ez3=yYIR&In2`pg%t0U0ZK*
z+QEPUy)M6<U49w@lG9%@4_GR`&FH`Dv~D==1Wb;Cg%tm_=PK2SWv2vVzS1Gpcb1zU
z=XH#^CfKh8t)LpxFeSRX%;HU6d(Iggx!PD9vw9DiOlv(MYNBA-5YpfisEL>1nU-V{
zP}1k`#J^SvfC4|2zjjUIkBH(Qeyst?*QOQb@Afg`*Q-10!2=EKhl}@LKDo@3_eZjr
z2r%~VusVlgQ>KMdIYH8<8bn5B0GAs4h+m9a=#@h1z&_EomZc5pP@~aazXGMu6<QuR
z5g|UzFWg1{3+~FSYvy;;`~cfec@RPs@B@2nM%1E(+XBz#+;T63B;Ec~ozbs)qrjHm
ziNoK2vk)wae-CxaP`R~0^`6ovn8E_88m9ut_^st=;1M|!aWp?1e)-K=8X#4V_k*OB
zb~zA=9(7=6&Kq?w(Kh~Og?^==ni&BFe7EN})T+GeGlp1PUbLqQ0s6cD6C;y_>5WIC
zW!}%ANs<%ffj-e+dGxON^7Fu)+y)z=jA8<ZO9AYnT?3%{6->SaHNeE4<_XU!;-aal
zfPPC<$FDSW)1l)E%V~4xnx8BWkbwdJCRmOoOwyre;ln!QF)VN!1ygpe^2w^49alf_
z`NM6)?Pu=S?M%BfU-w4RQ+t`Wy~{pG)L2dAov*Iew|#?wA;q`HqOOi>Vk)N$J@|AZ
zwoZ<A9x~^@=PXmPt8<OFkor&qnM5uV;m6w~9_KxO2T{bdAUH>Aj@=Ro;-e(3>sx2m
zJ)FIZ5k$6H!vf-Mc{D4tj?9CG<ErtqjV@k%x~^i{p@nL;2XbV&qWLs?&onDc#L3e_
z$^}We8omu9)kdoyCLgE?%2z0;-q*VwZ*zJnv^D&`-B=ZG!-tbaQWg~>&0D^^`efK2
zwCEBsI44(@k*gIe|6F^UQ1K)7_rlISQa(hM*#VdLU*1Tc?BZWud3;Pd;%4v}%OFkt
zlYvS*!)2p3Zg22T7-Ndb^sEPA;#-~a{1Y7;%&lFb3L{(1wXu#?rUe1mr-4qIgNcW0
zKfUEhbiK2~Bz}wfW)gZRvXGXUN(x)Ll#kSg>tq*{;2&epNh_PlXJpUm8uRwqt=-yl
zGF{DJ1@}lLEnxX+rh@dvTKjzY_JPmWEXAVsoxXcMV@q?CV90Z7%E#FQ4;Q`>^I^{K
zr;ha}yR3!wv;OGa9IV#lz=4<y6+ZRyvlgiTQRjVJc;GSmdb95jR*$_SI;9<AwvpCW
zV#Q(gtGJy0{OQBW>pidERXbkyRTvbvS@40abT*J4UTn>Zsx~re?fYS!T08Bbxgl3Q
zZeMWMw#z5WJ40W1Eh$!n$A))LW40uBmvSagJ@8Fvx3ETTV+UmJC1`VGZwsvc@aZ|E
zE%rp9Ucry$(`#*cd``Xdn|gZ>50UYd4ZZck2Ja*<2OXZcKE@q<)Us&TR!L^5E3_D@
z(8xobr`weR@;A3qG5d=;Me|GZHQMbWuGUl=v7=t|_>XEf7N30Qc)$G+Y#Hz8;QGv@
zJowD4;UZQs?guI-ttTz8cinW~kylASqzBDoRzFz!tiR7BqAF0NvufPwx1FXf^s&7$
z7B)FGb}3m`WkMm&2<FBsNn+j+h9hxDaip89hvxT2FJZ!_b!5L{D{YS>t&z?3J9FxN
zDU+g(4i#1gA<x+$Tq5$B*fiX{-8F!sSJb*Pcdi=lGr81zeh9c0t-D<}q`ej}m|)FH
zjyTIZaF6u0rBghevYEtUOyC^wwR_W<B_A{Mq$EzFq(1C&dvBG4>ciTa=8V|ob!_k3
zgsqq%`zj&Slk)8$+8=C*{uXZgC<k}WsRcS3M{XH8zbwGU`spk7FNKlYVJv=KmFrJ-
z3a;Q{ghBsDD`gC<)UgqSZ4ZG9sZfe1TbBOA@%Bd8uC2j$>?wjP3pADQMhzIkokD6F
z*C2-GVS^`ImE+!{2UA7Re`*2$twjRY?BQ75t=8efOnP>Ah_N*5o-EV%k&-p1C=~#x
zQgda=$i0jU&v-5gHC<FOu&J`C(9m2wpx)+o^~|m++|rw)ktgcXQ4xE#>z%jeRf#v_
zGP!(ry@Ev;Wdk|$^7V=?-M1RAb?|PBG>+tH6y{o#+;H~5{zHa}Y&sIpp*ej!9w<*Q
z&N^fIeb{k}k4=zD!12DQfE!L3B?Zs#*64KTZhWD8aT8PS@lCu;<<D-bE)_jLEElHI
zk-oRV>&3jm=e>{6&tyo4?5Qb~)c|n30Nok6yW1pyu;QVEm|y;Z%)b~iG+Q0@y3(UR
z+=D#ym|zrURX7(pS#}EHr~>{(mTMAHUyuR}6WP`co=ZTFnEVedpueZ>PADgA9+3~K
zaUY{t0>hz?a3R%BF<iXZrnj!o(_Thz4dpK`ub4D<+_~H1#?8;8%otwRC}gXLkAk>4
zYH+0^(&jGCV|Y`r;jR?@oy=23H0-1-!rSEVVYTRibX`e~PTL%2)a^>f%qG96eP;t`
zh18HPSx3pQQcG#8p1|OQAUxDlo!34P>-^kL5LUHc?k>A!ezt;jeu00x<l5rrHCzkV
zCenZw$$#kCG3<%XgU&%H-KQ6@ZdS5Qn<{q&W+gwC@{_H1=wX!{o>KPIY0X6MNMnC_
zE&IT-c>Khg5J*V6rCrt2y#1eG5F;qWHCQ(SDxRY-g20YGpnw#o816ev+MCb^PC@)<
zy~oS|s7*5(s{6Zp^btkSuwU0kGwig*PdohxonZ5)7#I2#sKy4SwYg8?H`6*@4m^{8
znpO{MFqjY+yuj!;&nL6rJ?h^)B!~vAt9OW}JPALTHd{Zay1+t;Hz(xJO$7LqE={?F
z*ow8%f`<x@=(C!=RbJVE-&Hp^NBnfeo@6?}&Acla8-9c4hMUA9Y@2|_t`TscPI;*7
z*${50O)nB+l{jsA$@hZznJ}&JhA`=j8(KmRd(<FD7KOzS>PZloz#@Jj{ut5@D-hjZ
zq1ZDM;jK5nnce;NLPmcP|FJ3QfsLm_^{bt>{<XzLTJ!SdoyGUjpe|yl+*6qjwOWvZ
zz~sMyO?k&PM<munu?(+OpXAyo;^+wzr)hUUo(ogX3AYf5QlNAY{C9m9$d*wCyJ=jg
z?RbJX;4`5!v*_WyckQWU5U#^gLzroo!Mia)eE=cyw8qb|5G%R9eU;h86^!Cmn<!m`
zb2V|2QY^7ow@-ZOFZ{C6t}hpTXzshwa>P)*pgmVlNw&4%55-%@>h+pDT?(l}mkD{K
zJGTc2Ipxx@<@$j2PIRv#-fBAxTZI;?lW?uJD)sj$l2`SOuLW6dT-nWGG^Peu3mD!=
zhi@f+G>chtyLUflDgV`)uuR0r-C)>sIwHUP-P*FWo(AuF#Y)Bh)tFKtvc<gw9(;p>
z@UuI9a}f-FC85;+NJ5!{vpmj7Lb(IJ_Td6>5f*@p!1@;#ArWj)l*d4y5K^1@@Ry4a
z@-HsJ0%^Y=8OLb#yCd<>R&SXpTV7nV!T0JP-8|0T>|`i0hTXczt(b9Xxi9Y6$E4`b
zlS#Z%shF}(p46Tj=HJ6kOc|Jb_aFV_PK-6w2$Xb2A3SoiLO_I+`QG$W{@2bsamgJT
z{Wce_NUEOR(mQ)h<+4}XdnNKJ6&+zLa^TB1Ly#N4n8EM<PIJpp&ZVWfx*6T95WlZu
z(-&EU9JNQ5-hWNbp`c8%Y)8cwwVFbk&$8~dm0<UgEVZ0pUcY-`!zX{g3mIcCy*gb7
zDWhCnY0>)yzP4BFUYQDTekWV&;@s?cdxL7<j(h9<AyIb6+*rt$;BT1yW?5T=L&J*d
zn0qtN_;_0ukKi6$2&_|ES(!V&?Zoxfu<W2HY}}<_Z!zL}yJefh-ua$}qK%ddE2ESp
zgDuIYuLY7h+Mb%mm#y@7J(7YghlTCe$#%@Kw#=v$WouV+{C<v<i<<W*j-gdP@YYgY
z)OK9B(${!C{Q2RF9&ec{cV4+<g*`B6OZixrVq`AWXr8#1SUWh9h5npg8hOLw{$QBf
z)M<w^VrI0?X3viaTQ*15bUPjDILa)dIlFW*{{!~Qs1S0WpKE>5V|tE<N%NROrm=hB
z*Y@YAso()0<3hjBJ_bkoI>4eL10due`tN=bZpexnjr!f-xTaD0ln{LyBZIK;GlP&%
zl~$%bFJ<}7wVK=j_W=p4%|C>nJ!(budEoa?*Jz2WPYcmYat1;DMvzR1|F>kqqd#W~
zngkLy2VZbE0^k@6r1!a*XBB=^<~<Bs6N-9JN6>$7`;DtYlmq>D_mv)a@ZlgY(_nV<
zo-=3@*O_5IUxeSfa;CZ%2}&@Dor}^f3+^=C<<oNu9}klb`pq%hQ#6o)9|t?~`Y#R`
zw%og7n-?TL-0PrFQYCz%Kk4e3-Hl>?d&~R09C=@kv-j054}Ofd!itrzxr~Oq9#(6g
z?lDZqKQM8_$&K4u8J7~pb6ws}E4i5XCc#o>=H_M%H>1Zjk6O8?<?i_2X(Nf7+ESyb
zmW`I^GWje8-0*#PD$k4=?UARLN4TDc))kUfhMb7O8UNDSyywA(G9#X{i{BM+WDYKU
zgdIB|6>_-ot>uTss$t6}0eb}7bnjM=*=4h18ivpELdhOPd*I^`oso|RNPI&D-f2@d
z4m`zkqlHScTnju;-bl1Nd0@{Cx=@AN-=E6VV5tuACA&x83FKW+Q@uYU&s^fRV>@b6
z%!G>jdK(w(&K#y<(WJNDKd|s|=8)KzOY0xO?%RJx-k@)R$7Qe;==_i>Rm@ITKC^<Z
z<rwem)tln^FSw%jC!ysXw@z1mzp)M5Qf##31rX^It<YJg=izE{YyLI2!-U{6hn=s7
z&q-I;DdZNks{e?)v9Hj(n<*;EXxU{`<@d@Q(alCo5ni8nFDsCu`0jqmaW_fhYr1Gs
zQ$}rH(wa2hWtZJ?G&(PGW@SAbpy^^-(eEWj@IOk5Mgf80tpz3M15EI&2!K0A!btI-
z2_sQt%LjPm#-Cb2h}U1}@NIZ7DgNPV17K_M)oAkl5?mOgf(E^Qk>wLiMmm001Yu0z
z3N3X|{}%z$`dUxn<rx>uJ}`wmcrlg>=+FucB*muQkRPG5;sY?;z#y7TDRyHlmEv#5
z)c1;gD;$$JTCtoZsMA}s=VbGnIlYejK?oknPoe0;pHosnPHF;aw^<zUG1Qwz?VzHC
zTQXW`>CdE6$CQ0f%BtMegxR2Z(CY^fm6#OZLOA&7kbe>ao<T;uo`dODz@+HqwRU;s
ztgimd<@}=O+e6nK7Tg{0szhglhaL)E!s95w`5sLnJe%tP@2E1$LXU19AninxqE~w2
zn}SR!p9D$apSr{P59Q_5k7pL-y4Y`-<H3savV7oO?flIjzr?ghIYGEvgb3FP`aRB*
zk}6Ydpy+?}INQ6!%6gPFD|CP(;MToBVV6T?D%}wSp55f`C(g&VHY`*s@#$okPm2%P
zJ7=ob&euxXr3CHqMIG@OedoV)@KE)JCt+rn`qAYBK7i(jF7IcI@`z-=`h>_*&9#;E
zcul*gC0}TAwAA~YUllpyL79KpF~$9@9C)jsWLP1jL2<Bv^_rKN(rnF$%ud&+k(+P6
zO`EKyrBIvGwcQ-|J*q-pJSnm^jy!2tA9crp+IF#s&BySgN$X?l_enDkq{gIA)mVtP
zAnMp?ix}~e;dBKNMo}3cZPoQx2`eQQCsVsjZ%NrxKFqeB<KBBZSVzHONgd=WZ-)fR
zUYRU@sGZWRfcH%*F6wYD6CZA|Q9@h2&Jqa|+b8&ASl&NW>x)t$aUbLXYq)h+VxI2W
zON^?(bIhQ=$(h>-dfzEGKPPx2J0Y|+^^)H1tM`46Z~2jt8Sz!>v$~k8_i%6s<s6CJ
zecFDz`E3iyyf*65<V{|2?Nw`zC**_D6Ki>S-COqv?7D9H_-F!Gx+E^tlhxgV<e&I$
zvRE@u!F+FjSpSVKg<}Wikr|Vskh5(Ked?xn^v{VEY9vD&S`IV2I^LI;35nmi8)mOc
zKXt3PASun-sOcIIo0W!BZ}W#NUDaCVR-LoYZx=e)w^i$F0_35g;U1HKw1X$<6wX}`
zr3sYxz0_A8sLGY!C0T^6^&OKQH{8I#$M4QFu}5+&jgs6SRN_B;Al7<k)ufV2EIREI
zJJjTM;#MEd?HhEnPwtS>_>w8NQ?=3~{zw>Pyn_u&;7a>lN0EPoRl9-SZPTLOIW@>d
zdn|)qu5-f#pz{Z)ul@c=!-0U*;8V;ZP>o0E)h(qUyv4}F9bf))(n20XFxXrT7ocfD
z4;Fsr;kZbOrig*xA9=Vg6hVLBBjpC%)13wM8|2}10KfgWJe+VqJ-+=`G@;mXoL_iw
zIn#Q3%;-X5a_6gjmDuPci3{!G1!ab}5i{ZE8a6&7^T>--4&B{N`*;diJDglBO=*@M
zT8ru7DVlrw^!KEG>6w;%^Z4YSvf2zs=Fb<`a23K1Nb!D8+8g|=3!V}C?DO17#pj?N
z!Lx#RP!bUJcY|K&egKp$pCEA2ya9TgN??U;QR|u!zlS>E{}X#YDh1B_Z?&T>EGt3`
z!h1p)RB3XGNR7mkq|&H7z384DLqTydL!>$Ta#7cGVQbxsN;PSfc&Q&}@zqSbLFQ+N
zm70`MPl_wKd#MrFpL|k`3sDMT(-~PQvZA1Uk;XT@nsrY{g8N0XSHiS~h`0}f?qP9O
zuO6z9E2Um#k&~l-tf*}j{bKc`(#e37JX>1Y99u5!Zcfyyix)6+^{$OxO&_+knabVQ
zNgdb6&%TL|;JJSp;yOEV$(CQ34cKdyOV(`xJ_<LAr9<l9U5Xu$@9)vm@Q9#n_pHIQ
z<Ly9*^O*?&=jZ$^h-Edf^;XQKf)M?W>^HM|y?h?;o7~1>r~D(>ML2OJT=q-)RqKZj
z*2ao2q&&pDUo^*@x^rl!tN-H3?x~5<(&ixS6mW<nw5U6xDXTT$S!uoDXH`RJZ)8Wm
zI)0e7=Vb0dOQ*h1bG5S`6I1-hdb~`4DUzXXPpcjf_7o#M9vQx&6u-4xgnG0nRLv-T
zn!oTaA*jvtWK)H0X`c6icP9k)orpo$<iIux<dUY6jHwbNo$G261f@#X!tCsVQ_R>5
zKmSw__fl#@P~(oW#cHPEkzA9a2E1;=7_KjFnss$@w5u_7cKI+#xy7%`0ZTnHBSGHR
z8RrDLWFyrP@FOgBH|?KTaOM)?z1`8bqAz3+-fNNvpLyLQ#+QVCl9;&G7#qt4+!3<y
zuARycjwEjG4JgQ382>glETxh!Jccdr-IH5;)2qWh<;5cpskQJ`W<d8^+(k&uL-wpB
ziA!DfrBcH)w(8wFQdy_>c<U9N2~%85<1je*>A7(F(Wz*vNb=1eMQQ;AQn>Hk^(M*o
ztX_w*=*fYJ?8%!)%kFH_I$$lob{@&;%ni_0?5@BQjxY2{7}9`Yy-7P&<tbhkqfg|k
zig^iw|M_40QcJQU*iGfa8)aw1WFJ25RvRxTa$=f{vrLVc0^+t8*6`U|G>_+_%_^=Z
z`X>nzz6HPW(zyHj1Q7Lq3+EeAxv_};1p*&ZQOKxB!Bt^G{#M=MgdTk64Zs8g$^tll
z&!HawOAb{YP0-82{Ny1?)flq#f8ikj{50v%_#y}tSrNIA*I6^8IFe!rV&FwUA^3bW
zO&&aDx8ltxTl|AqP!nmX?tDbmRbN^W)p~GXlWU`H8$5&}EI;VX4_VFVy8G2o@<kQ*
zNhs3j#eoSZvO=wU8n7L0P{S1oU<MOUx$u5bY4sZcQ)4T%nn~<RAH;8&A;-m!NN?a|
z#U0F>I`m8<M*vm7f9c>m!hX(R#po5;XAiCN=Tc~T%W6vY8E5At8s<E3_rUik98~86
z_{@qPOh<7Yq-wvt0KdiV+7V;E>rPH-<dpM`#e@28vHpC|tFn11mslQ9ff;^m=dMli
zA*LbVTM<y(-8I@)*hSp#v1h6qOSGkAFX;;@UA|=m*{em0rXSnn*~ol37SkuSa0A2R
z<Z(-_3xA-jpg*3Ast&SjPyEKf*6g6ngOZ>J4=CMzT?529Mnb`;+H-?fg8J@$p_&ql
z@@qw?SOJ|c$AUaQ+JXoDTH#`JgquXuOZ9`qCvm)8c@dGS@GNEGwVjpQ*?fEy^Or4V
z+p4$=-1ygUszj|hiFd9KD&3M=Gv<Xgn78N;1xB`?DYpvU-76;%#{L|CZ|j3Va@YH$
z-kAa&d$)})+di}9oGJ0zxJ_%A6?N*;f*RMGX}SJ$4oOok+bwJ<r|PYR<SBQJ+(gG~
zH_Nqec%&@DjkGLTN4|e(X=(M=1X-a*eBA4n7{F_7b*j)lGHm;kxMYX=4X>2yRQq>m
z7MF!<e26}iSh981Ad=5$+xMysv+J6c>Ua0~f3DykQJ7>M^w=qiE!1wW&*@*ikG&zz
zSsmGX=5xJRtn>SAuJ$^G?K>M(*%flHL~knGCh2c!U+U!$lvXr(n>n<@Q>H$RgwpKZ
zn;$^#UHi&+LLkYtSNW!6b|Q<!Jq<Te5w{GOgefGrYUJ;~b8j3gt<Nr%<~vz$E2hu$
zCA3@#dVHcNXT<TjTwl9%UL)4@%GKZ>{6hthhF}8wHfHAAlZTau-==vjUy1BAI@8W$
z{NdqUY0(XvH$FEAdGYv*Bf8Y%HuG1IFz&stjqqVjmW$0!l53|`P1(8SZmo}By1n^+
z7_<G?L9T|B4=lVUnBKOdcGMDSskw6=3SRBPX108aOIt2{309=~4t!;bN|)vz%&vRi
z<Lac-)^3~W^SWp$dV>4pTeYswvUk;q_4PCLX<CWK)rSwx867m;rN1J!{ekno6I7NI
z$l_1I7)IWfnRMpwnO?xaH=YJE_}C8tF|FTuiKhh84KLnD@t|jIJMqgoCNx0VABzUU
z6{qMBh{I7fTEJ7miy-u9^5@WFG@7*k?iVzpl;Xk9G9us-{TqL2r^GW7f4>KNK;5kL
zU$e#_*u#FS@4}Lg7;TeQ(3hki(fdu)Wnv|ld}Oab7azBM6Mgb?m375T^8<NKR`($t
z76oHCiub0g3IEx~t8Wq`9itr5ZW&sVEU7kcJ8s;-l$5<Vql^gOK$1{TleH5ytd1?$
zbGY`6pT|pH3oP8_*S@Z=`1XsExMBg@)f*#@xD|P(6b=3Sk}$UyO8q_jgD&+m%_94w
zloqg}^J*K|e9XoinW%0FoNNbTY!cNMmn-fFKS~ou@QJBe?@I$uud8uS1t+Z}uy<TO
zV;^nYd4JQG_XamJOVroQza(W@{xyFLiiAMDcZ(XZM^|eYEUNk+fs(2r8xZ$ExiTXa
z&p>Hq3uww9P9Fa=aY7?{@h%_`()Ygzga~1tz=XT@v;8n3Y4sZ{B%Kl8gXW%nQxq_C
zX&w8}Ua(63G#z?qQ%jl`CJWNOi+WjDQ!XP7<=bf42p5JVRom-U+HSukQXt9x&~UBu
z*ZM?w$hm%X_wy4Q1IQP5G~;ueHu;B@3XVk-=FUyd(jn&huZsg&L*@!ZX`^)NCq0Y{
z(h8!#_93+cJ}R_!SMg&?!-`&|G1k)amO1!K%^S|#yjqgoZTZ}T<t%Z5bkAsRKOH*#
ztQxb1^nvdb>Rwhy`RBYNT;5}`)1y~s{{C%hR+d3v+96|usP6;AA+cD43JZlUbz#?%
z3q%&b6`>}SS(}9Ed#M>?4kyzyrM?E#x|6b8o6BYp5njq!xOFd)j|PI}bZ8_Gu6l#F
z)**{o0M>|K9iZONPk(*WDMW0>0N4dL_|=g{VyH{dQIBS7kbNJh{p=)4t&WheL%_n!
z?Cn0)x=eBXn!Po)#t2h_S+|u$cm}z*HTc#~uosRMlU4t9Joqo;6%mwY!#ADl8M3K7
zGMijXZF1mu_i%ISdXh{-t)rA%F`9+c?Q*Lx<_OQK;k8x9ezd_=Nx*#sv)&~JX59s5
zU4k#n8CVBtU@9y83OwvBgLpK~!=vsK8Xf|4XlpPn1rRtfzv}ok^3NU3@oXF**f-bO
zKZ_I353g(Kr5+`GzT2&T!HKsk<$zU00Dt3wY-BkQn(=P?NEE&h(ULlSvGh)fw$kF+
zxoEwHBl-L41sy5TRO4mvIEN@9SGT>Cg?O$uio1SSOa{hyO7Xl_qpE3g$o^eLa&Kr(
zn0KeV&FnwvczFuZV$^rs_GBeQ#ueLnC-gm)e#7E~)^AgFwifZfW!VvK{#1e5S1pjX
z8hOoNXT*!RIDfJ7`&u)`hMYrpKP2?`4s_0|2T0<Cml+<*zouWBNqZLn8?yg{4S5Ps
zLDVs9W(4#5*9QRFu@M78-r>}ZAmnYk0IFi%GLxD9gtE-*ZvapR2^Y?Rh{k`SGT>>h
zzXfH=^Fgy`v4wN5em?Z|D|qwIW{=Pr_PzJpu+3~!mHanfKKl|XxO4X%`?G{hY-KNS
ziq#C$OxmrEvN~afLmPLUV8JqlRveR>6_jKiGWKM1jU4hu2b8+b;+><X2P4RWEEVYO
z-gHRRC<IM7G(yGBzkVF_I9^WbRatY0J9=<tj^#vd&S4uP@veP=O=4Ru^wCdaosZ4T
zP@JBD%8Y(gL-L!@J^w>Cfl+AkuT`qe$d*um@Y`tdfFp9b{d%tD{NHU6Ff2d6ox#uZ
zPo@aC$S?llBEtmz=4jMU`vJg=QFZiB`|*B;i?rYBF!Buzs*doC=b*!ZqxjFVqbi#&
z^B-AV-Kske_uYNam0Yz&YU}h(Z=-`wkI<=-;npI`u4xb72dg}Zj;%1(f}ZmTwzQW{
zp=1wr)(KyYZfX~oo31F{&UNv-VV9%l+O(9iYUU~KUB+U0EtW9OzH0r_#QY^`B)dFm
z{Zie$p)c39+`T)^8-(Im1!@#_9Tm7+c0$*oH|55_c~j?;M{18U=Wh(n_)wj+1?u<m
zVcwj~{f4U;FLPDJC80M_1Z@)bNXj?Fb1q5wv#Q$)lIIqh9JI(;^Wox;v=Cytnh$4u
z+5<se`(|_ybaJCZiF?{w>{YMFEc`sftr7JhYQB>yaVvWY3})IzZXbSs=va0|!p6l;
zVa}wI4SZz>zOs)9$A&b-YQj-GorRZ}agFWbkAzku20+aRequ3w?~C&>emW1ZCo>Lf
z>1(IGd-8u!_vZ0XuK)k|NTsBtkW!|k$dVFCmLUhpk)@<8O{KDhBq7XQ3S~(VN@Wz1
z#Dpv%ldLJpzQr)Ig^X<sGjpHsYp8QNb>7S8_xpYykMH*n56s;6bzk>&z4q7h^}0kj
zY3aF+UWhQ3W<{Acm>L!WY6e#V@TT3gTpPLu0~lydhZU254)zy!UH=0UqW0${{ahej
zJy`Kup}$NvQu_+`4+-YLVIUx>_xZqmlYl_wL_YpY1nR;$P}E<|n7;py@)2-<hdBY1
z%nwGb)F;4<zSZV8Fn)zhd9VZmQBwmB_#m1%hx+G8mw7=u=1_8TvLF}`ayuXsyPOlO
z`C7OSru+-a$rtST1*-;`r{Q@uR4l;$o8Cfyv7cc7L;HS;xXeB6?@^fVpYeA|(qWk*
zo--c8o;asMf<C-yIGQB@!oREp$FbqKtzk+x#>guGl*vH}!gc^mkj#Mzwjo6;7vee}
zQZfOrb{V3)5Yd9-SE1R$*Oi>t3#rk>LPkU|g{?OmfIbQjgN6drICN<gNXRbM5<tU#
zD+`+p{I9M9DA`q`k7g<p4BH4dU6HB2)T1W3CYddWv|>y2nj5NuP80pZkC#1#?39vS
zRczJF!H~FRl*sjA8~?zh>R#UB=J4SF)uRlzge96;x3$15&AxSMVNSAEe6zlnREYJ_
z-}jZyo5^2(Rz2m}(#woP7xKG&l}lVL%by%RLP>l!;KuuDPsXA|?c2AsxdRT=1d6}d
z_t{LpJo1R@<nY*z#+jkrK~l*gCRX@z()DO8Pobd0(GA&IH)b4H<>>h7Ns)Su*6Q7g
zczq7xEgtn4Hi~0NmQAfO>?NkkJ$UeCz+?C8z2-*Qh2AbN5;J$~O<Vm)+GA*}=oa@b
z$xHmkj|$yJC0T;J<tDWGF@gSSs;OVrB&L>}?I?0vE52@%;lu_1KKFZk&yEC%{C=1B
z@TCRz7K9E|xNiNplBKnS>Jrc54u^r0$u`c_>)zMs9;~d5I+-2uH3ieAwef5m|HVhS
z#H+~aI7X&M))_^0@8X%Tz%=okg3Jb+>!-A37w=wvB3x&ELNM{(`p*Klth4@X(<k_E
z8N3?(y{~IzE^<d&229fnOoJ!ek(ld7fMRw}VFQpcTO2>Y93l9JQKdsv?e?j5r1>Hg
z>?A?Z;O_-Hr0r~=ww~3>c)Az|V50gf|NjCX`KzPg_o@E)`_~jrA3PPDogN7a2AQj`
zgcQv-1_u%Ix0)VpbWz22;7Liw0uW&N(0c<S7$Yr_dWXszZ&oBRZlg-m@HPwFRM?4%
zVNBspD8{(=bozAR)Rs>3&^Ovb!!Nxehu?Yod=2w|pIdW$yFxKjW-R|GoxOU-7w!`u
zElj0N(UF{n3H3eQzt=yT47LsM_S%`d%O~utt`?8q;`str<wJpR>BibZnOA9-yLGca
zvUHn+L<@#8>qX;ML+cG(yQIDPA_+Odc@z8rgUhsc3nndUdn4OS_f_E^f9;=+DX_gZ
z)7NOP7qwHrG(X8DJQH`e{<CRBDZv@7KxihzHeK9pb{gB1E&2kY1<KtXOvRj=5Rqh`
zv|%QE=FjtNMfRu(bicw<^#YvSLzkFlHz>B1whPiUdR&aX1J?20U+%en4eQ;m3Re~P
z{rf6Mz4ZY-@pc-UaB{jAyDh0oztzC=RTGPU$20`H{epc*+Eo7=IVd#1v_<}<7$k|%
z`TvK4a3dX_ACdkyK}cc=Kx!Gwg#20a8lcwSJt7&AzgE{Yp^IXX?&Flq5%%S@?^2NK
z?3Jka4_3ZCtii5ohHMeLubB8a5tLWt=mOsl21Q2OipqtCy}U?Ca&#vb_h!a@N{B{$
zP?Ttk+qpK&w)3%#zSWK7HoRr-NAfAks*dJ%BU^7Lhj1OW6(XOnmpsvyS*9iSs9*_w
z4=mdQ?G&gAL?sM`Qkw*{(vHa<5W8f>^#)5XfA?ioI6>f1VGhr0hTZW^{v`%?bKGT)
zq^_tlZ>y`AwlZIRLNe&a<`6H_L$0st8fW_Ri8<Lh+dJBxJ<rfz8??@PzuD!_%YCIy
zJ$uPpk(1SJloBNKLCNl;5BnTD1lj}AJ=nu{)GZdOt6#w09-q>0$Hya!H53>g-GNuB
zjRnfd+E0$W9m_o`kwX{|7c&WbI9LyP*m0lnK-VKc2%aRK7f}?A>KVwQ$}c}YzQ{Yq
z=ouiEw)Ugvah-{{(GgDV@xM)C_#Wr5AoM_Do<f>iVEzA9w!>4h06D&bm4&@SX-}5y
zmsWD=kZ(+R_=w@W+J#QucVNesJ~ie+^O>+)VjHEcn0<l_+i{9$WbQyr><RZTfg_Ty
zeovAytLD>7JbYC6-lt8@SI>Qt*u_`*av-Ad9=#$vYJBCABGo(-SM2>!<at-vXNPAO
zc3AS?4v?J}Zn;3$XutZv3e(XhzX>ErL$DCa&K#G;Cw|$xqPOJ}>CQ_&6;qL8m$c?D
z*G$_pNH=4+xyuqAXv3+!gKjR{@?XZdO5bT+SIcuw%t)?ferPoBSrN>Fi}SQ3?~tX;
zblxm)X)CXbIg`yVe?O^Lf3I53y38{5C)}6v*b#-IFN~j|qAwzbYVU=ge0ew4e1}9^
z;)&_#sr2};ZP}~OsiaKdGRc>}Dh3COuyFCx?}ZIBG&hBv)01`0+_39disBU>zqK<>
z$Fk4;_P!@)$JX~(u7r$M*G($6Jd=nN()ij;w^b8UT}H9MjAO50GmiSxs`uBgp;Dbr
zKuO^%%eQG8!yWDF6O47%NH0E;{nWC2s=fNCrmAE8i?&7QopyJ8z_u4dq+ms6l<L7_
zeBt_??h-NKi%uRUoR;=D>6ULd@%G7xoW#p}=bqzb=iPT#sh%jO+RZE8A0#SEmh9+D
zYP`Ka?cS9wcw>iK>9<uij9=W(nE1SHBeC|erESXwCTU~9Yc)O_mejlk#lqShpE}JB
z%f>1m&t<*!^AIZ-Hwl)x{5Co^Y5wF!;y@6lU~JK7_`>}QjSlSjJ!6OT^Gz2ow?0k0
zBJ0`NRTHq^HN<xMz_a0)Eeg$V{Nlo>Z$H@0YXEZxTN?Ot(khpw1oC7j0|Yt8wylZm
zqWoh1_R&7t(swbuznQ=N7<L9nx2+;_bX(*A#5H~@u6mE0Ay4b7Q`mveI3RzIUo&4n
zg8btZzt<p~{#M{xHQNCSW1{P(Yxie~24nlLs!b1FR0XcsW(LHJ<}{mmmq+<eMOb+_
znl7LWm0x3-3px-e2Dqd_0b%rVl)29yOP4ExDJq+dRS`Px+@7>z+w(c_w3{%@J9^a4
z(+=-F?i;2ooi&|`MBb&nj9&2U=;p&=j?T8;kVATk<L@Wck-#^*nuT3Ms1}|%8fN4A
z#6dZx^u^h>wz8x8%dm0SyXu!Dnnao6NRc8WM*@kER0!Lc(~y-_a?`#*-~Pl!KX#%k
zv|8e)=N_Lt@7c{q!&{_^9kEUn{Mue<pxrZg_QD1mja2<{na!UY!pT)%Jn=&iCY%4Y
zNkc^``z00sf`PnA4g5W=Ema>Gh#}?%GKW;U?bP-9!-}f|*I?fuyq5ii*gB_)DusH&
zR}sAf?RR32gk3nH|JBj`fL(Wx>j3^v-w{+&A-T$|RmLtgdYZgrBIKTUanHxBO<wAs
zrw|%{Zy3tE1$s4u!}2{20H*h^fdB|7`CXsjm_9>xoaBk~;Ai4b$rJM+Z$0{^|KN9X
zeDCi+|LB8L&_&=1Y~f?a!lRag>&)pb@k>0|1=h&~FxBgr>L8tkXI0~Et{G*J#CQI{
z9HI3MBqPI#K3e!(LlNhA#aQrX&ST#c_HF7mzw}0L$&lAe7m`wr)37b&<){jo$Jbj(
z)+no|H#@5Et=!jqY+$|lpx$u)<Emt|65XDa<!2C_JZ!q_QINvezOuuw%}m}(J{KA%
z5BbA1ii<56!PJ8)YYm(pE@Wxtf;M<m&RR5SF~h=&c0E15DX2s*GU=3P`>U08I+VKi
z(`x2CC$>=I10HU5OnGVX*0IUFnFcvi1G>nl^018ex{2V;*SpM+jxVO=<5o6LHIqhS
z+Y0;p!gcFrv}yQG^MFDwPhE9vvBkwBMa4#2RFm>tS?9=yTs}grvP^Q_1mk@EE~nw+
zK^+}}i`SaO9SqfcZOnt=YBme~WZpYHvf_l>77N1AZXLoa%0$@5jHB4%p3wr|fyoHA
z>c(j>5d0trQ9c*)IsG5pB_gU$K2yyURibcE>u*6``~+JkYFt9!Y*sNj>~WJFe{jov
zSK`r@0n700gNKwRZ&zKc6_3^Bnt##lz=5va&p$LZmK-{Cg=zk-y=>7Zo-D^!i^O|A
ziFd<Ri)XyJr@y}bfX|tDp731*mcJc?+R-oeLn29DTl4r_CWje_^nG@vKe<u49+AGo
zuKd{Nz4Z3;Tdwy#=Ea-cy53VbWs$Bk|E6K@h|?>D?ZXBRC&$_d9=0L%085w8-RGMB
zm?u$D)vefL*T^BMINr_*<kggsi%Vb3Ij?*7H11>f#ROqUd4?&IqG8!~^R#*1-H#d>
z;9NP_yLfxs1^r2S%C}}qoD$N15XN~vJ3$yLF@T=u0u65<(DPHdRZ|xbeuyFi;!d;I
zaHKK0M`Q}2V>!Z@{EI9mb7Zkn-#1z8@^59aovLFg;yBXA>_Ud*mR*)FNj*2HgI}pO
zI?%grH+B5OwyO%ZmAY-0#of!?%J<PDg{DQJDd0gYBZ4IWF7g9gXcW}aRD0IhNKfg5
zROj}kPxen`hwaUI%r>_vuO6K|dw4O`t}SLK#mNGnJh=$M2Y%#J>Cpe85h&_vFT7cq
zJ$ZCFZU`cZ+JAlKIJ&c(ez?}hfY!0jMSpaqsHd8`MyB`E4;3?>`2k$AF}Bgm?c;Jy
z_bxocW41Le$d2u=W_~Qs=>zGhrw8OR1z)&&c*yowIBzX{pFX{L!-kvsZFcjI1(a{3
zS2O%S?Z`|uQEfYvGfW%lc{xp)>AQdaDjvx6E)zl-0`pO5bZ47t0P*fBZCLs`gt{JS
z0UY;VA2oIHq90<ile>|Xb~A=(^i#dA2N&A3yo+RX*1gYBc5>uif9gY>II9IKHJNr#
zpM8yG=9}C$koe-I(mK=D)z3ma5}l|Dl%msxXCAAEj=$%YJ!7G;jGegefwbp=Vq->1
zl~aSeJ``l%-QN9s`|y688!Q?9Gf3bfTt@Ricd8LguAMWvTBJk^o6&*$e6gNPyI+rE
zR1ww>VAGARXT3a6${Zx{@9Yp4S6?we`h3{^?uC6Lf-1omCYI+qb?NTI?C(1A2ZpbZ
z-_zy@E&8f_fx%NpdL~P=adWNW)jGLHw`5BU`JB|t#-rIo{qyw$TA#JOG&W-Rt0_A^
z&BDeTPNE|b%q#5kRU@{GND*V>IJYp?S^=h<4XXFoO4S15OAD9L0*gC%0E&a%j3EV~
z#JII;2#SrW?Cj|t8e;V>Hd0MzE!y>EV|?WK#uLV#gsEDn+V5ZKeUd9jc1NoGkV}#$
z!HK&#?`vjq3!|;1{Ez`Iqf~IlO8%sB+|BTe;mC{6F=a;Y3%0F(_XZWQkZuqiv(LAf
z%8@^L(DR)Na$;`%f>H6soIaBM7oio^1I}7);1DG4)FaOFfs~s4jIbWEQ|ZyyUoaOx
z%#P4+Q1UjYvv*q>`UfV4`$XM#={xl=Zr!U0zFE2_A}qHddeob~f7G@J%iYYlVu8MA
zE?|vnV_UwirmQF%D_&pee?DAMmRI<-Ouqdw84H3St)3$5xPQdy5P5pbz3wv|TXGf+
zz`njmA85>Dou^TTWoThKqvcm!B*-+%wGH+|X<|H=6E%mf-afmUa7tazVd&ahQY1);
z>q%Ie0df^f=b)DMC6S(Tl_F}r&4-V>HaxFKMfRJRcT^h65L1phR%WkxaAZW{-t@zI
z6P>f`v}VKHzXk*$x)#p~2=bss9-M$6=?x|9C(y-ta%U*?VgS$uj=qG00fWMI0?H|%
z6o~njNyR}HRVtd*5eQWou)1|nl>vI=AL`cIP+o|9DT4&~cLv5KT)OlRIoki!4h45L
ztaTjSUrvR`=jEVL2KXGPIKfWu^%$B0@o7M2Z|^Xt;)X$%O4^KSqh;-uP=dON)J9~8
z-zjGas?xn7I4eh)tp=Eyfruq0q~?2j(i&hteR4gah5WC>^7zA?i;(U%I+&^HB#2Sg
zrIyY%OL>P>o<$b`F10ZQj2G`O81#)q*txpj=5utG_E?ax*5IC(<`*`Og{2VAd)YRS
zcSlqSdOf;SA69|;Tz^?=g?#Gn%c}mMNBsUxAoZVMZ0+b8<n3LS3cMM_Za)sb`6VIS
z)K$*9n^a6@E|f<DHF-GMAE`3f-`Oy=;Xj0_kDdajwsN}*Zb%(EAl4!O0>uWD#;wU3
z9J582-K2FSQsq{4#th6j$3O8h-(3_jl$~LixxLj!RjbTvu-|d=&V4!MckNA+LSN5z
zoF5A*i?R_JKZiGHoicQ>rKI=vtv*){fr4{jj%62C;Xa~=0i<vpCp-}<MlpH;4K!0D
z3*=lr7k4#;+Uj0??K7msq;5QIT>JIZ+ajJAya>yXQPkZZaxsUsscBzbYTbgGn00ls
zWv*Mss8(<LR&H=kye<)gCRr$9-{7Q$m2hv!k%VMW2Qg}&D8`}8afBXNiac47RhTJr
z5h=n&QutY#jPx#}wO=|U>YNG;9G^KxY^s_Vh&$!HN&nEv=y%)hG&Gtmd-imZv({=Q
z_2^Puh=rAKO)K)o(stc_vR$atg!ZCwpZ+9;>}K6*zMFeW+hl#R=69YTCqEBDt`e-J
zwr?eTK@S>~+2wd#3PTsP>CktdUqM6l?XO3-gN2D6FI>X%VT97$^mYz*k%SzoYy`se
z41!e_q(zlVTBAoU-wm7jEl|3D|Aq8Z)ZFSoRFV--%iQCntd%vY6H0tQf6~2sqaod%
zK7YrXlh;EOhA}Q7DL(PB3vo}Y<#2g8Y5W$=9`mu}qY668@=wYw@sy4>U!w9<BpO%w
z*7wvvHj!r3W1};gREqFhJ<GnuDBLMv`C8jvVQ)t1d{b>f=Tw1Z!Gal&8|QCx%U4n)
z3TVjTt|onKq?Fto@L2fy#ZDBv{I;bZU;mApfj3mPDT{AAP$xqAa!Hrmj;{=pGoq1t
z4zf-Md(2#QL2+n(WEXSayXEKzLvrk;P4`G}jB|mz!G+O;HJ5W=<}>%$hX;;3AG7qL
zu<_>pX8ai;$3hzQuJf1huk!RZsGU^bSfU&iBdhOXOV&QFXd*tm_x+;{8=sOYpAPN0
zu@FQ0LM!1s_A(T;xg*j~7<HBP@s~rJrpQb@z5qwX?tC`7tOH&c^halK)T%Xj*2<M#
zn_e{(&~ug#xbXzpwW=&<KP5cX6faCLi4i>0X(M)<D~~Ml-j!%sdazW<#a>dz#W8!B
zL5w>t<-KNky!TiFss9;-<<qp|IO&{UQ#o~DbSnXBMIXf=&C=tXg7pT*k<p)v-;-DZ
znW(7|6B0q+uBzu^PX6dnjq8B}1oqm!k06xd0h7<c!Xdvv@-2~~-;mx3+`n|?jCub5
zJ92&KA`pOE_}Q`Kp(SAVa{M^mpL413`TRo=Z--neo<2W+4sATAX}*=~bFpe+VQ}3P
z`iK7@XlI~93Yb!2lx&ahxa7~2pKv|!VgfiVlWsTuRDGP*k(`UKvxv^^rCx(U9{LVW
z`xT;YDT-~ney-}0YJ}lN$sU*2Q_qs!4?M|8Ymb}fsgg2trt0kU7Ju&4eUX#DRVoC(
zxX$&-;p2eWJ+?OiIypdxeD~k)3XQm|Y4f)(y*(tBTE;UtbI>uxIa<|CtoEF$jWa?V
zIQ00StzoysPV*Z9j|BES)zo^iB56svq~v76Udr$$1t+u9#mBnWZS!Jpp-x(~pX4of
z<;9e_88X!iPKL%E5AaeGqr9){ys<Ov^V)^gDuaWX0!vSbQ%dV%HAWf}*7)hK4Iz)c
zUvX}?4X#ToCqSICRl{mq-+a?+)L<EZ(bx02>TTA3oTq&;(;(B)<MWMWyOb~u_0K3C
zQ-~Y!Rm5dtSrWSyn_s=FJMALX?>Q^bj@>bDv`&$WpB}8g>dr&L;i>16gE#rR4#nO3
zAdkK~M$r5NV{v`>_zpKQOVK>6g^%to^Cc|2^13RFp^mPtS;)%!V!MsE3IwH%yt?n*
zo%(0<sDFeNjbN7s;B4drarC8FfMVl*j%pS7>;^|_8^i6plf*^Lwq?Z&kE6wOq{6J4
zp%h3bF+7-Sks{p!Eh_PPtW-LU82D9<2T9WLa$B1r5zX&)Y*0iXWo_gQ?K<q1zQlvG
zZk7je*3F{z4Rr(bpuL>!g+s62=3*mAF_U}}H?vi29W)P>p`hFKSh##TnB<STx+tu9
zufWU|VrADHcyF|wt^Z$Mthdb#TOa+)ID)_2j(_JQ=*BZQFz)0IXv0V@Mi@L`yp%~n
z%!y8@Kqf3%$^h2)AhS-BqgthUm)XpObH0M)$q!$JF%TC{qDJS>`yHp99^E+Bi%XXO
z<twlr=I*yr`!@86zYYEOr~Wx~@%O38{4(^PU;R1je=#&?)_;8kL*s`6iPLiET3CEl
zSo|Ls1c7alLq+Gl*#X-^qH9;PKyEJu(alNjttRzk2dP}SgC>x>*u)GhTlk0X9wMEu
zh#8_-82tMXF!*ly$>7QOJ1SwZ1Vx9&nUOMiVf>NzIl|E~RiA15UY1;|%a`FBuUOyo
zb%Z5AK~1e^^XjwM<=1lN=$;(>WCOTBB+3Y5V>v4!r*jqi3N&Rd_dRIB9R9yTREII~
z$lDelaL>|n%;vhYfudQ&X`cuu#(*uT#Ho>$8Re!I0;grn<)c87Lt_3b&n%WeZZ03i
z(Ni9`xtODWdoA#$7eE9t%!QLidj;~H1AT$cDsrF;er&iiD9_j;$?_(&Q2sQsp;hZI
z9e0Wyc#HFHooMh-7Qxo$Y*rD{?K8MRHGD4`o2!^`&tjd3msCg3y4^0yhxk@GcY0#?
zwZ6lS5F&Lc`);(liodvj@>obi^$yl>qR5LZ-rA6a`@hYFi!yebo%wpsp<>|R`@>B}
zJ9z4D88Uat<x8d!vNj2>&~2<7jv#)xmfE=K^<=fuCP7S77{Rw}OQ=Jd%HaLp#7CDl
zFt@2!pYc9%|JZ_^OfFLsO+HWUi#N8HZpc~s2^E4HsyFR<GMMw&eno?+VR5SdUn$^!
zf}u=xVyAat0|42;Ys6k;?)OWZG|DC9^Lql&Y4aA`#0JgfXbW~MM75g95B~NB{4(?d
zZcP0X(i8zcuRh+D(1ITeSwd!t$o_%3NeV=4vD0E-af5FmH7JoN=Pws_Chk73^oOu#
zMqTYE>Ws7YO1yl2cdNL5_ln<!LPTVeyKdj|<2N?cT5zT}Xhyk=pw1BJR^Ou=tmnJA
z!Z|ZzZ)%!<X&hgNRa#}67$!B!`mxRWFXr>oeN?+~S7?k_M>+gHCxhQI^KUFw7<`+1
zIlS3o-`BDEPD5hs+Yc%~Y?w9|DaCjmSJgEVT=+>rMQ8*!k7ZADd!w<wDeJ+-%F(Us
zn^yE`zPPbE%|9{2P?RgT>y&AL*{MjauHE6T3omyYT_tR0Jfv0`ls1|N?k%jB-CP%%
zppf|b^1Rd%gEc1<`M5T{m7UjR7JMJ$=_E8n5hiT(Q7dG)dq4I(pk4E#?XLAhilDi|
z{x0W7ktdHlUi;8Q+<(J5y-E*0+p<5i65q2EfBsI=LDLB@TF>JLR}E@nWxtTeg!2Bt
zq>)%vh$fb%=NiV?;__M^5)mA@$_$yv{y`e_bEAtUE`Y~qP{;*)xOIxdIt>pWG6(*~
zJ7B#mSk5G8NB`wh-}*<NngZQKrVuB2IQj<^QIcie^hR`PJlIj4K0FYu8-}Qn;VJ;C
zT>oZ7ae5y8rynlXMzo1Cb^$+&rbaku>epbGZX+_9bB36pZXE$%&|%&M#SI`OBu~wH
z)#kHa^(QQ2qX@_kOS;c@`60zU)$xP-%HJD-^6G$bM$AUop)s>XW1mNUGS18!ad2u8
zV=l{ZrU}r7u6RkLD1$O~AG%OYPCkW|jfFzd=h?=^F-Fqi=B-;|y|C!hi?<{C^?OK(
zViq$832qmad$jIf8JHAwSQGB$II#bTPjB+=&!!#=V?IeeityMKcgrqbt=2`<Emn%l
zE^cj*NGBvDc+YY0N$_Wq__s_|+)fTDXtw!d5MkUei8E%W{ItR!m_Ir8@-G}aa*6!;
z9Y?dwajX!Wj)P3=E^T6m2qU$H>)3D(k9RKYl_YrT;e}LoIwamiAn~^C$gdo|&yv?t
ztVKug;PM}FBmeU6esZIH<GuaC>=SG|?w$uf(II0yP?`K(UJbf;P|QJ&!^&118btHR
z<4SBUq(}_rvWd*Wo_KTY_Aehlvd13%*i$V52qOR*CK&yNl-T=^h%py<79UVF@jp;B
z1}*tsw)h?K_V0e9;Nv)sOsmSzw&Iz^f^{K9tC1dYawdg+nS|q%HU^TjrdSW6XG<IL
zoDQSVC^v*McFUz@1bv+|*N2Dlx1J<1c*Yif)<r@qG@^5y!(;xelki87qP@88YI+Um
z&rIvNu+KeU(tim1NUlA23>_t8L3O|hN<p~8CZQHx1(jWEPY23ubU54lvA$luu;M;n
zCgFDf=N;Snb!CKW+sQ9{vYpSKYxh2#b>>WCO^(;)J0ZT(HZotNZ%?m_O1RVd+3fEP
zMzy8C2#20~oAWi>CgQ$N5^0R>ASLH4=tnRuU#2z0dwGU?x*_@G$w(ycV!e~%-EL;b
z?G?W@p4<0yFS}E3kA5G|*V=oB!W(tW#-{c@6YLzugfK5CDQ4`w(Y*HLvF^BT#la)1
zshjfp>IAt=WxVg)vHALB7dK{m-&pm!+=TE(>fsC7^uDk=7jKaLt?u46TDNPsF2?14
zi9G3d8&WF9e9ZZh#7<F$uI_Fzij`@C2k)xhh=(6s$C#77Nh^1j4NjI%kHn~zOR#bI
z=*5roe^ZM(YKf#ysDXr3A0XK)a$R+5KDLZUBI<RDhP}yVx1!F=h6>pS>KJ$U9WZGp
z@=S`iPwVPqY?`>$?RGXTUHvY-qOEDI6Y7<s^ZDfO?vfEfXU^@dm69n}y|H`7c!9lB
z-vxAAzMg1aw;20kU5L3TIe6sMSzVs@gej6p%7pO(1M9}(srTjQNJk0IU>zl-2UlEi
z7CCoTbTu~8NC$+$uOL!(C$N-=HLVRT0tx<*mxledj}bzXWZiWs#xoa4qF1Hnk%l4U
zD)kydZ|Q#3)4U81x+_#~f9*yKAQ8J~A2Whp0n!}bfixFE#|R%~<}TpSDY)h+i1vq@
zww&2=#`~0@iLvH?A=oho0PKC3Y%yos#_>nF<EMGsktTEWG&v3=_vjy(&?puLB)2s{
z#Ya-6(FWwRjQbxLYy5N!dWqZ_Mi~Q-;u4n53(ij6x=A}b!t@W%1rHrGo3=*ZaPnU<
z-i`3lFKBX*cOW*Zp>Ot|KvTVc5*rxg#6b?G&&+zq!JNit;nZ5HXo}a4?7a!gLjAOg
z){1Fi{Vl5G4ut@W^f6b6Nl1ezdHLby-)&;)wX0pj!+(GJ+IMmCGbI_{{aA$#Pv@1p
z<W>f*o(WR1CY|t#96AiLOiJnzr}N<Ixz5`w)oL4srb>Ld4Mq(M1Kra4=`#(T?F+8v
zq$k!FH=K}rN#?SQ>kSmn*<)&S4DJ?z*Z&872}wP_9Z01P*_O<l2Y>`Xt@1<C?Qe35
z3UUg>t2i;UiGA6HBd9d7g}46(9VgRFv5ax{3*68*CAb+D^CvA>m;ukaiIfwELG9ao
z&(kXZ3TvH%s~*}K&v(Um>$Uc6i&hT@wcYjL4X%{<IC)4p{y_8rQT@<}1J*@>JR`2H
z*)zz@z(bLX=<ShvY*Ov*<IWFFlT>pXfr2O|tf#LB%vjkxjn9@v{{9w1)O&CKpcekL
zl)in&&3F!T{26Tt-HVX7Q5<Z_b5o>$PXYHY)!6;mc>vIh^!a|tC22wnZY+4P`nx@g
z`_Y~y0a2ZCBQiGiP&lf!!n~N68O93pz)pUKfcpy5s5epN+0YYXJ|{E#*N=HUo@PM0
z3g<YvloGLwN(w!Ev@o&rmH0cI@rhMg4^nHt^tmnGAs!zgE@gVlrcbv0!ti?R)*8Gq
zQly|ENT?zU5!5|1jo1$hT$33_MHem}tnFWAzvGDLbV)9Ld&An4YXtW&k<%4@Tt*?D
zqMEb^BR7;7k_85-3av+0>G|sR4K49rbmvL9u1G6-Nc8l@h$c}Z-Bn9vb?j<_O`KYX
z6QWZtu5NsqT->VIp0~+kOmC@<^{C*^Lxmg2VTLi54|c2G6>hX&<@j#-34v>qGC_%l
zE7eH1KZ4f0`DgNE)>bu~GhDgGK7bRq!ICud1+q|06Of^p57yf4C>B_x&&}pIpZz1}
zU&eLbgyzL$4&#HMnqz#%|0l-J{>J#T_5yU}{#pov@>hU4@I9|r8jdO%>|@q7yr%=l
z&(OuKuzb7P{;|_hRosTmH^Zk?GgPWBtkZiX(r&ijL7~?kCyCS~F(P(lKYI}N067sR
z%4k9PJr8{_;?j0Wcq{ihiskt6<z>V7B{@+m<*t-*ksgs#kNarQ#E7(aZw}>&MP+OX
zjRIM`x2M_Vf?N1S)_X^fSLbcgm#12oZ4eS{^Swyk`Tp#Sp8YXbAG8|e^xyolRM33O
zM;{#XH&5yDqod{}gUtjiV^xU>DXc)<g`M=2;$<F395SJwC7+6z(z{UW^C28pc@gWt
zzNM(bQt2KE5_a=+D@FxxxjXJeKh!v@4eq-9{7T=UvE$SClG)8OF~e%7nDRcm8UEBI
zspi%+e4vt{?)0s%Tb-Yo>Pw#Fee!<q=O<>ESlya_8Mm&!H>9OLlIeNbw2r{X{THUf
zr>7R%&MVm*VP{=+Bgx@%L^JP{%;|$k0d#%U7J2zhb|33i6q{c<YGHyS)7;UTT>Y+^
zto`^=kW8_<>EmZO>Jhj1#Z!i8Jln35O`*S1hbrli6<>DC2ePE|evjQ%dpxF<YP;q}
zvX{#f>m3F}jjj^~SC&n;XGKdb`?Pr{Kk0hu2}VR$@0D(uYmXZy3?&an32hPWu+UQ#
zkKMcA^6Rvrg$ld8#`h`XYgJqidmP%yY36v+JNO;>N{#wt>2O1N>*Iw6`N?S~H+pdU
zWd6>eQ^GW5>a#x+g!GD0k-CCSNx{}z-&F6<;<M6roL4MjQ$K9H(9n)M!m2qaC{a(T
z;Ztjf)%r&>i}O<O6z#_rhOVyST6|L0pKtj+b69Aw!V|MBp&|6Xx$3BB*W>8X1KMHx
z8slRI4OeadWN0U`MX0wpS8p43P+ZQhf^evnYyQc#4;|B-@*=l7+WEZe;$LoebUQ<c
zs=kG_k}Bt2dQ|dN{pJkv8on}h-=0`}hJ!#y#+jh?0V~qJ25i!4-L^cZL1RTmL7k8M
z<F+rWuny#$tRU6o*RNxY<5W@E#Vp4?yBZaFpFY%lJug-lNp(MwzAvq^a(Kj-d0|3@
zHnC2<y*)K6kT)sCy2|EpyP=EYrpc1+J4&5zJgM6@|0-XJl*DMb=IYN4l`@fbAL1WG
zl(ary8n%?OvpQpV-dBEN)fqz;GFEb~g-I#OZPI>Wa(^meeeA?O{h_OA$YR`21~RlO
z55<k$GHU7jW*|dL^HwIh|J`hwmBdN2Lf>;;()8Zwxil-sBQ)MIRr@zjFB%$^gQtgN
zLvD7~({ubK3~%0ur<shS{!F{?h}quR?tlN#ALK{X_%A&kj`}=^FKGJ%BRif$Au$fV
z;9~vKYu=Ze<Ft_j;CKN%1X-$ofkWc87>hj!r3fD&&jiUc%j0<Q**Mmtu@SUv3GTB@
zAc!nq@+qVFXfrPRYi1WBcDTb~jZ)54d3O<Nc7eC~%EZ#ATRH-Fm4ue>_f5%}b?H{+
zAagFAIk~gJ1{%g=NBP;;ECSKU7Gs_-9;{s?I+&Rc@g;bMi8T_6rBTT(`KUi4fOP4&
zqe_#Lf?T6L(1daM2px_uJDrzLqvtp}It1uHzE{#DP`+Z>v-gKFJjuy=tmT<>=Z&Zi
zvK*Qnac*rw>pVJ?8*uj6CH)>3^{#v^Tx+c@nD^VovQ#%)$5h9l9{*Q;(JoS(mCQUh
zoLgc3X@8%N)*xX~13}`b=k)_6GuX>#6d&C<>Lg>CpZ}6S?DqWdMx`S4{X=2enpg<J
z7YF@;IXyBX!~(b8U#N*u1GShk?0e*X^U+nPpgF!9j|V8!`v1Kb9-wkeSr}J{5e+d*
z<`&Pb9}GfIS9a_9364vEm0G4?DeL(9lR@t5w`-X}Weo7p=09eK5>$3RE?kluR!V8k
zkl2024&4zod8WNcDy`-v=H@faY8yO+&a!2R{F}k-atIstB5cSSYyaZ+S-`=@4E>Zv
zUDv1T;nYU#nj*b|qqUT1PZ;`eMy<dB>P8-V;oUxPM`btUcqxls@Uk7e&$M}k@!kIO
zdg%SU*}lFy7@sTuTQAcCY~~_1Q-UQ?D^4C&PelFgUFC1_MZ?K{+G=+`lvqVwD3_3u
zSa#9u56lv<Dus|!q_v(Gn-0~S4?S?Gb|m6`PX3Egosy65U#=fM*1T)|m3}RrTSrr=
z#317VT(<U?-3W9b?Y1=HW4OLB+&`k7u`0C7V8B_}Rakjmt)Vbw`|(es*B*7u%T3Fn
zyV1(xldKq&qXjjmX|Iw(vc{h__h+72*-|F=(7*5Q^4m8YuZ!D1;8OJnEq8Um(8vr|
z{7^giKjdp<+9L?At+@x@j^9eODii-Yv<ne%vKPcMo}}g34&tp2&X}|O<;a5&y4bFX
zEu)k!-MWsSYIN<H(-pZ_u}N<8HSgaHmXUfp@>+-qa$&w7$JX(g^>R4z?G&0zw;py?
z0YqDl->YVeO){(CBG`=Ek+Y2=IlbgZo^Vg){Vdv6PvM-5{*1dZGSQ{OjbAxwk_90Q
zNiT=Wh*AW3p7E7?_bF<u#?_`)gl1g*lIh4P72)Sp%$4A1n&fE%QV}u(=fZ+n<<yQr
z%qX;v9nx@Q)H@f}!hN`|hXt@dxF`yPFS4XYb6q_85tRyE9W&Norghrp%q6L{;YN?8
zRk5u`B^D2EEAMQL46Vv~v-m`el#OT49);D1&uXpp+uih*m?KQ;UX*3TGjOxT(~~9N
zaN5(y#68&|M|iPBPo&eCuO|amuaVhu=hjBrYCqkfCw(3d8GFX5K5H66(^9&K0W;3m
z1q6OSUv+NmNa`bQjLym<kJcW;B;G!8NxcnSBU*|dpLPPr@U0$8Q8@_8FJYaz!gFJ!
zxWV2F@E<k#0~7tvFO>7+4PgvB7a^p&CkN%;<f>@QW0FQ_$V>81wQxF6vRf>gcSB@C
zft_4~F<;cCiq2(^UxEau8NZV3-kF~~5X;Z-?<5O3tdX_f`p_l5-Lm6VxQcXuk?hU5
z$YVSD9j7OOfF8W<Jc8?dhI_#~c+Ru`i+-YmxXx8eQ5~b9gzAWbuVuTvn+lMkl;Waz
zDt{S?p<{GC7)+7@#2#%tJg>W&=v*y3`N1s)!!Ci>3K%tKp_WLe0=(VQrBu>13tsm1
z$+XQum|^k{8+RKi*7i(65jiq#waoQLmsDLCcKGkFiT!cAsdjNoNm#UX6_)q>_NSiF
zC9PWnPt;yp;aE{KKV$jc->_b7m<LZ6zm{BUMp{H@oQa0MZkCQ~gkL2%t}*M}ESkTo
zJ8H|ey~h@PU9|p6#d<$3(p_|;kHHlK_H)I1skq{qk<jQjyB9RvNM{G1&N=6~ulLJg
ziGV$c0RyM6uRbFFK3S|$T44GM&X&UOAVURb=+U6|OIlW7$fTur{yOn~ajPc*EgQne
zJU>PTSq2!FDjb%zv+O;A;rWRF@ip%4XTZ^1!J&H=wSN7SQt`BS=v~F;+}-K%NQFfc
znwK;V9<vWxA1&|AH1zo`X8%$A$}i3(d?)X{)F*wSFgBXA67=X^;EQaU%|Frd=`q;R
zTW~lddFWI<GVydDy9V}hClv4fhS-vr^S-tA@Ui>hNCDIy=}f?m_WWp9YzMXNIoU>B
ziWJ!pmK<$WNG(ymc;n5xT)qL1AkUeVcw1;tNbatqLlom%M6b#RvRL!MFS?!YBMLFv
zSK1Iyk3P@EHv3^yA(QzRF_^E^!CXjXYI`OgjPQ2A%nx^p05h}x5cUP}T9$!`vy;1w
zXo}<26*`LBbw?|&o>X|=>8CQ^ofLsMTicWgPsOgNOC4f?*~CjWi`lDY?)BtLv@maN
zc#5OFtHid7nj^oLT$d2x+oL;l?Q>3?r|t;VH;r`MHrW&3m3H@G$vZ(xOH9w_@U}e*
zF#(%1f7^utE(ImzUH<PF4S4ql3XcDgqpb`Dx!V5S%eq^X4;wu5JjbtU+VsMD_xi+l
z?RSoeYD(NsUyE5R`F!C^B#=Tgv0g=`1iQSD=k?K}>0O^p-N~P2-D0mC)s$(ele>9J
zAiXvJ+S(~4#wHM-t`SB2@GFdQEpH-rH~JCJZ|I*R+*^786)0=(@e0IwXta&D=7%wq
zN<1aeHNjMKmUt>P-VM6#g#+2NrZ{hGp*IsoqTKFxlSHbsFoX%PJ^tjuU$^Vu%iMn}
zqO`h=TBnQ|Ze1;tVaq)O^=i)NpGeu%K-Cj;cz-q}qTza{)LY3oB~FjnGbyB?qhe@1
zjdESl$<0tfaWnOU;w@91vd_mGtWKUf%w5qPGhIi&JUX-+85X5|6<x=FaP-y4)zaRS
zl!4ubd7nPn-L%sB-1bHGS!Lm|vjc0r#;s39#`7FcrCgag{gCPsTBtDkj)9oavTvo?
z)7PBb*&1T7;A^^i{{Cu2aeai?ii4MxiQA)OZ(_h~`t9HCDI$xd9ckCK#-qIHqx9Yj
zOBFkIkZso=vwc57O7vL(jik+Kb!ZXr#zWreFm#DfIZH^gyPADNnKGkLc%QZyV9HVq
zTSyfpLQ=yYV~aLZ#)9*|<ss9I(4|y%QXv)vy|gup>T+Fd%X8X|E3Tb`?HV#|C6V3U
zfw?bEg$cy(+*j83SmQvIJ26|5_2|nuS|$qS_jtf1T(S|vH+m=@U<}1?5XKVUZ!m~f
zLM0Zk4l<yNawsgoD&#rF+HuctM76LaT^+inJHL2f)4j@XQhn#-o@yu8Q$C|_1NdHw
z=^4LXuD2eF-pocAzDYw5X9p(F4J<Ql{|KIlFnoza5R`={QvP~k3;Gt4sa9%oe?Ib(
zf_>>W=qw!x*omLN4f|ybnQ6QK$>0fVO}7=r@ellgDaFwajWp+!?~Kq&W$kA;Ju5yN
zYxUOmk(JeA^Yz0{^rVgJ*NSysJcNVw*@6s7(pG1=Ftk{{wDO|Cw0#i{OXB-;4mo=E
zFVb~4IJ=nZ&N9^)^i+Qw{}()pwPi{|o!D7g4myv5j0WMl=tu^_Ud6uz>6C+bya=g>
zgI<HZ{rQXdU+zUMpnu618x(tr35*A066eMgMVHtxr7{G-`h54MdwodiE80elz>3bM
zv1*8|8;gO=^?Qky!Ph>U93S@ML<%-0*<bLE*%eMPKKEhh$Y&2b1GO6^nX2LM^(7)K
z0Lsn8wcya;Kz}k#m<jY}KK60H9X#3+#o9Ba5O^|a?#by%NRboyBx7>X>OvLIgVGfV
z#0<*W9e-e~WTsCTy)uehIudj-u`p|NM~O$2n`~oF%!Bu|ia6?T_D3QEygn~?oXSKO
z^8koJdNy^I0<JHl&idi#XL1~cAtA|1h^Hf*NZL2UG2?HBBV<2?AYls!Jg9*#frKp!
zg*R39IZY#Ra;pnu7)QG0*9;yiTt_Pm^zzt*#-B^8v6N~4RF>!`qrCOYE}m2Z<QO?Y
z_SD%RJC4&wH)LZX1~DblnDQ-pum%v#oLdAFXqJ<~zK!(fdV&GX<w9nZB68=O6uH=X
z4n!K5ye-f~=<695f}*F!SS5W`PHs+2<s>y$dBKs@hK0O0_pYC*wa3wpP+G8>wQ^_9
zph}+mJ3f>N=Hy&=B2@$_8b6KSW{bh#cu_0PHvd<o6UP^G;luwi{tyh=1`K~?bQMcz
zimo*3TX4&PBBUYakX{+OGWBbi+u3y@$8V2htIR*Ecd?JK3Ot{^xMLK*HT2}Cp7LcB
z-hxd}99<JEuFh!qyPa%$ay3IX*82JUEvGl$=q2B6g=t6spI~cfbvAQ{GcchN2f_rn
zZ&rT!18IOr<832%c`^=cL?6s<pzMS(&jh;@%a92ha-roEJ0|oaA_bB*r~2NV?|xe^
z5$@G<V$4t?bg`Gj1r^&9`rWY$puV|y2uxWBgl`oS1~b)igoB{cQsKxRmtQ2FbmLth
z#T<4-SAA+bFp05r<ujuemt0KP%yIm?dA?tKG42$sdmC;g>+I;`q@)kght@>p`?@>r
zo+oS<+tngs%d=pw+Kox(OR%0Gs__lgIU76fK{Udq9A}n%H{oy`6Aqkn$dO#ac|ZA^
z4TtNDr;PS7?Z3x{sI%wQEBe?0vw%InK$d~;#)>*#;4n+D+r_EY(8_$BGh%Ogl_bP7
z&wY)*M3@B402i*q^%FU%=a@bySaci>`j-mirw!mJkQgXros?(Dts1)ZY#?W+IdP2|
z*2C6oWs&RrMsw2I(Ol_@N+;SuKP{d#`xtqaup?cU_BGT#shQ<Kdyo}+b&HD&ZySC%
zNRi7-_t*yvh9Jbst$}j~$t;a(I&dYR2VGbTzya(A)ZagBlICi~;rq~!5|kQ$CL5v?
zz|5B4m>K)4)T;sUY5J=;<Vb>_??&YIZV@>K4QTn(kfP&c8=~Nw0|y!DG$@wVJ+wz&
z@!s9BXS}z@+r$=02=p7Cn}f_f0?~#mA`4R-JC=_|zj5Imv`8dFJo$X+Lh1+0J03jE
zy{gA}zhWl7$V?OeC#sFZ1OFrD0%iKM34o<p8ntMF5$N9qN0!Ylst_v^R=aNM3a&E^
zmrgD&fwG?r!gkO74U;L;O6q%TmOYeh%2DtgkhpL)b2-LrewUEh!3CH@<t&XlI$+~q
zd+^^!dJzFG?LSU3`WFR<9w~<gNZ=mxdW@<T0|XJEh;bAVHS;cOQ;HRB<eHk1mv<6g
z^I3ZPn~_L&KJH`8OOAsipw_n$KA?@B!zT9cA@8W($KJ*%-QH|MtNvzkVXD~axSmz!
zfDvioU_|aK&ES|Pkjky{xS`|FiiEri8r}ps?p%ryRY`2#k{>D>ic#Y;#kD{Fs(5=A
z{WHOQ5%SW(N$QL-*YjG_uZqr!7$?Q6PKlrFm&_GtuT8n7TWNO&zQQC*wdm*8<bLFi
zyii+bmSJCy;qdP=;NLx*rbA>f^Oy@bJ{UlqRxz{Kpc;!dfCuOoL8#{7*yb`u7{cV=
z6Gljp7CQ1xht0MV3(-#G+)%U!*MPQC;4rp84rI`s@p?BjM_w&xy5q#9m9~oc3zS{s
zUE_Fam1PV+*>m1gimT=$+y2GFbj^juy2ZNPy4{)!>-OrlT9@6-o&|AnRlXEF^EjY%
zYqut^Y3S{HoaIn4cal@G-26au(X8ICW^D9eC8*AMot#=AndxyPAOF#XB|t_^MVV@V
z-dQp74dw{=o4+cT$H53*0Ip#ej)Q@z^5D!_iBXKt1gD40$=yN-c{X|Lh7VE180+c?
zhBU{`Z>ic^WcbPMlO5MYXl0$pntiiJAf7+J>+R!@qJo(GrJ_qkInxw1+#qW2v1U&T
zV3MTb7MQggWW<OH=7(ao?AvMT%-Oc5xk(3RH^qD)`jQdrxMZ=>EV4jmd?)#L);wiG
z$y^kh2vKal>eeFB!>}`l9aglZ>`ix!I`H=L)bb$=(Wrp@fZ)>9fuze13#BmhUa$0&
zERW@B%38{AoFlxW*dxJ8>D7eDo1X0DX{&nPc3vv*lgY(BCl8I2J{hWMtY+MEUY&95
za?hzNYW_WkZ}6{Hm*O5bjbS@ZJmqg*N%x6WAMM8pCRp8i$rqxqOYQ2AeFp5b24XvX
zsx=Q=diB`L=KRbsE0MQx{8bh*6JUOK#^Nxy4AzNKn~fC?`(dzCUv43tv3RZ{$mb=a
zXKuv#!<KxO#;}?nk@d-49S9enzi!y5?O9A@Q3X$1<qUcdDK6092KQqnwU0eUVL4pF
z?X)A+n#1dR`7F2=(oYs%*!|+9Ktw;zy)hbH*9N_RFA;^2ktmSF2f3y*bqL`^hNQ>q
zuo*7a5s1)%%nd#00t$`6;Jtb!!RO%o<w+7WBP}!~c^Ghj_v+0Dz?${*@B!5phb;|z
zOJ+1+X<tV!6DPPC=}`Wk1941vzgC%vOGuF#x*#(nRFs<5gNZCYY5Q0&QjevY)9J$I
z(f~nE0e7P83HLZ5h%JUNB%@z9S9}N^HFj1tR}JWf2?NnB8)9sL69tWe$PvisQw*!~
z5m^t{)q&%tTxb`iMmVYNS6-L&5gknBK^M2ti~znNg!}$(<vN5=&bt-iX6E@E{Pu1D
zHGog7kP3b(@!Nu_)TQnw>qMZ7`)Ef*am{!^(HkMy89mO^XBaR|5CA3BtYDaHKlk`U
z<BAJUHr?sus*gbfkj`7JN)2#ul4GZA?VF05hmTtBJ<M*wJtuvjka)(FXtn|5Q=}^h
zxBE389hXk<DexWk!@X@w4{b^GQ(ha;ys~%Wldi(Z2^^>Dm>w}|UXC#2s$a_~V3#ni
z=+mM?T}jrTj#>?jzmAT`37k~aRjqf@Y4>0HcB|Ws1sFvC{NI5TIet5H<cCw2<|zW<
zy)mKg5zu?T$Dt|zhI%%!k}Tplxr$027NUk-Mra4It^3Lk(8$;1)zrO5wM#V)Qd$mF
zIl0b{c~!Ih<w4vAiHzs-&$$&nOVy_DV#h-9Xr{xK&XH?t4o2h2-s)<V>w_g91iy&1
z>RZPXw+{F~<K8Ahq~y?IrpEiK98E?-@6Oh)-vf^iUKu;<wbr}t6cCLsT0N%l<YS?X
zZdEvj5><Yb&o&W5aHzp20tJCFXp0^ruKKop%^c<+VtO=dz~>N-*->$7{*?(0GYsKO
z4L+fqvsZk3S23~F4^)L!JQBWYPk|~pM^yGN9(6;fT~H;URYmgw84eB3D|zX(iu$^5
z^)b!9BvuA^bb%f$5Q%Y;r6dmh{yAv-kKAFl7OJAcE~PuS$Ft0=<Agu$ZRN)h+g)Mc
z7v=+?=r~MJ&ANojBC~{?jO%KraO3)UMs2=N0IuU<slMwx65&EuF12oM&slo^Vs~Xc
zhYyv34~71~d?!}24j~N3TKTT?jAwhi&q1r3@fW(nFY-@X+aq1=#Q8XQFY~e4*Sarg
z-VdbY=fzrn!6^?{x~KB&>xI)sM-g}6t^7_Rn~NYlHzQ!J8$oPQ9Bu!IA2KnYk^GH4
z6J|fj1+X->6vynDT>&@Aj-;mk49;>b*@#pup<Z#Vx$*~Q?|>0&<zVL%!1yCnTl6=O
z8t1vDKWf=rQc=f{`fbofBM+_N$P-Nz^G;T7jitT$g)!&ulf-5ZqI}bp=`{@bVsb`U
z5z%j^Kx2Ji5xSk6SJ(C-$J$gS@$xz^K4Z!Ex(d5o5`EW!#6h6-_<_-CbcrKvrG5^O
zrXp$afbyEj_6GKc2kLo8fA_&9KU(=px8Azh`cstimCKsgTBRRQF4!t%mf$+kBf<3g
zpcacGxGn(opD~Hrpk$d^F4kr_Mk?cF?`4pfdY<<>5jb>*9$x1ThTT-hx>o?NzQtF*
zFV@lWo|k*@Bb#$i2v*^huLZ`Jdn$$cGS{Hh8tM(3>o?Mn5;<uD5=A{W_SBg8TXcc+
zzBIQRpImR;=9+$J7*5_7L7&eiZaTdr&d1bE^vv1E+RrD8rgy2`*pi79X+V?aDQR*u
zA{1`}^dJ2T{S%8H`B;6EQwMBdi!b^>XYS3RqxSU^K>m#BIe{GkA}s0kwk{+cm2+Ny
zbCJq=Z!f&jhcJdmAe=)p@6REOd3vjaW(*}cR3&Q=RYQ=Knmncn;R$GS021Hz56m{B
zVEoj(S;5)@8U`qhGLJ)PwzCBMdo;RulqS5q?FAB)oaK>C)oqx><qeGdj~Sr4^C+9x
zOcC<vK5Mme?_~MEQUcgn8N74*%NH&|K?Qu-ohqHkJ8596U+8~?rCQ$UbuM0)@%V^q
z?$Q>kiR!P({H&EZ|3Lo0?H5=pXSv;Ime?g(s^m@*8-s57O9kE4nA9Nan4^n(Xh%e_
zL%5)&L)zohIz~8}5z#Lm1?hF2IK2vV<42x8l>z({F|Lm;E9n~;7peq8Ec$5$i61C(
z*3tGVlNGE|w>*y_Lz+?1s`M{mUD&k_*ptV_iwK(>JvQDdSg=~GoxSudl1&*_rH%y0
z@@Oofg<bJ6SQf2VF%_L|uPh*w@S8~IwKF_+r%WxmRS$CAh{HB#{Xpe^VY+_Acl|%~
zH(`$t5aE?1_fS##8^%3a;2S`t9VJoUkpl>u>RIYuPvt{4zQ}RUEQqTAR5-Xte3^~x
z@=UR_$^v+jJL?nS<57up_Jcx6LPP9^tU8<UFYl=G!S2j5HFZ{M%2BVqB?#{mO?58G
zWJRu-jR|0Yy=m>~34iNKllDwF{vh2m{=Es~o*8O(48AIw0m&AF^#WH)9C`vMAqoU3
z_Nzj9&rGXaazwdB&pj)Z;|p$6Z2gvBloqF91_r+vf+tXH?*q2dBY!H1#eWfl5^>ZG
zOO3JjI(<P`y$nUB#iCL174_SpO|u^OR&TDuC*(Ww3@83z9@Jq~5SgX|$|4gKM~&8~
z5z3>4L5z~nWrAev_;2p~EU9R~#`fcAXJ3Jj8nX$aZ2l`?a_Y!7JgtQcI-@_%GYL9#
z$3&o_JE&lD#ayO_v6ec_P2?VBM%;tKFd;!%-$$ggE5GOujN*O>y74N3EqM`z*Y3(F
zltF4VNA=K!S&C3vBZTxLv;V+6plQh@=-wDfaK`-Ca2^Zx*OhBq16ef&BP^*VnA+ep
zD29M?jylnvx(-gb(i2>^e5p3H^7!^I_sm5&!0}qz4>!U4xXM+)z%t(72S&Ep0s$l-
zy}qN$=t8BXOgzivILx~5IvIwX8{<0EVAWVs<{r!$<6t*xm(_;~f;m<($tuFO4pJ|J
zavCqiGS*HIX-(Lb<bEF*k4Js>Wdu%ACUiz{v;;h=2WrpNCmyvcrTlq2Y^9~o{%Tej
z0Whbp`@nQHVmRWi6DQO?@4*Tmy@X4uW?ZY(f+ai+j?vr_8ZoZbz$S#WBVBvRtT6n0
zEK4c6q!?bmi8FJcfq>_XD5TeOR1y{#rh$wK<Rdj}@_-a>0V&)B!Ye-vOQG!kjqYG;
z5n2Oz1-XCj9v*rMBOK}V_&$Ihx=j5wG`&`K`+kEGx$`q0QYA_p9fdqP5bm~edNSiC
z(tCk(kJ1KqGAe<ceo&zI2j+4p1O|#=6K^fTj_LNmB%s5ml6gIhkbh0iz|v>c_~W5)
z&nLP`qryqk=HsA>m+Fs-0BUlOD$n9`$a+L*!mm)2+b{EkWu5X#QC76_W%P$2qtk~v
zuV`XxT;7lwyIZHqkgSnn{MEdXp`K)hb2n8lNRhI%&4En2Qx4~Y6%+)uRU2mqNi6OS
z*z(dyMAa>ZeU;QxO<yZae!)L1z}(IV>TOi@PS)7qi9dX88KGLyA}jf9!gv5zQ@>s!
zVlwB@b9`&_9^!B{^y-oPg3B;s3F?*MGs~gmtKEjWGplP;hT9Vh#sgWK2U``Hj<rLf
zXQ-RB&MnW>SZp<VQ)W_u%tP*s&(8C>gmk9hUp#(ES8^QIW{T6l406AR_WAtw504*U
zw-;5{GkGyH(Xgeovwhc;L>GjQcgjX(Jn!A*b4ZfcJCt(LnDB^%W$aQl<3acOj?B?h
z1FMDwPJ>?n%banY%B<Rl75<X9E}?dN&hxs&vGrMDIO$6&CwLB>33nvovZG5O$fdNT
z6weTw;9_eaC41Jy4bn8GzEc^Vam~Q^2Z1m+?FWSQk?|bqedw9;js0=da<(8=5Nu^P
zh?cT|-BoGG=WAcE3=?_aq*|Dw1p}#CL55xD$R&;xIztKSLmha6kU1%&A%mTMA|?go
z-v}9(aa4TuD-dmeu|E&GOtb*zF+!%r0~3*Y`B71MY7SeFUl8eZJYY0@YZQE|_mB(!
zCWDMvYgI4cdaqNEE?r=cy+|i@$wOcu)4$80bW|Go$fhD7xcG;IM?p@$pZgDk##Xb|
z>YT^*26cd}`aXswu({%)KbHqRRz2)Lx)<(ZQeA*b`G+r$>IbsIVmXY=d6N-TTrw9s
zuHynnC46K4pJWH|Z?dC~Y2~vYH?H9c$uI6$V0;SWT87Jv_!N<0`h6`6O<)cuID$au
zPg$B;D2aTWf;lWhMnT&IykLOj(4Lb7+%rBP2SecFM>{;ei#<u!Z+4JO({(1#N+r&M
zu6aj2&S@l6LSd|#K#C9h7~sa$Jb^yAEnp&K#<g~Gf2j4GxPkTTeg>TXU7C>Z;1~{+
z>-dRpH(X(wvGj4{s*LZq#{;v7fz)iTo+HzVMvw(JK{+WpBjqJPNfiyOVr**?RSTxj
zRzhTm)Cba&=48qLV(-o4q1^lbaUGSSQcAK;McG2x6{b>zB!sL}AzMfYVXh)evK$m8
zOj$!r_Oea(5VB5)!PvK%v5r};^Ly(o_kEvpe)sot-{0Tw``7n89_K;VxUP9$@8$J+
zzMiiQ0b~gfU|<hiI1DxOCxABx1O42KG6K(tU6fkjFlPYqA;_iAy`u*{+VcyG1Z;yF
z%~lr%!p9#>(xXU|732VEOfx7)!yECm#5q1V=um#f@|&L@$d+wIv_C|qVuO)nuePa3
z$QjHYZpSLAztxD`i?4?cI9BtQ^&&@4MJ*2R^Y!J%4jhn5eex5p#)0oy5rQAF-<)7e
z=+=uov^w00E8=-_yfkWf20lVHHQN**5>9=YXS4FzLs4ioNm|qoYH5>R`mg@Sy(Ce^
z*?2Ie2xbH<yqN_x1YK5ObbwHbMmOXgeL61#NLt|MVqw@38l-89$lK8&@rXlc6(6Y1
zJU!v+H>V<154DPI&(GH{D#q@ZO?#`bwhzb(ONJV9`2gkCFD!#VjW|_WwyM|OaFQ?{
ztT63F>6uOk+&@>NlHz{;dJ<Rk36x|-X{r8_1C_@&Eg*mb_=&R3T9)VB4niXrz}-p6
zkpvVc09QX}J>_Ip0`b+D3q+;my+zWZS_d^)Wqk=;`w3Xu{v6ejtLu2iX%Z+Ey|vO5
zEY!(gSSY}V#zUOY^szA<V`nHpy9V%wi6O#w1chCWG!Y7Kjeg|aSzS#7klKo&1|W3;
z2#O>hN5BeNe|;2QprV2v1Rv21V7v!sGKMVk@(Nv_DHpwjt^UjRfOo0*@h&m|-;7*F
zGMu7Uo1_=v5paGCFwhAkSp*c8jHcNmCbR~inI!1>kN5xcJyb739f7vf2Mb;kY*gYk
zC|||fd!3DOK7zghE<6$*fr`QMDT9rw-VK;eA|sa+{nxwd@?jxBs_8aB)cu?Q6{IoU
zTPtuMkYfkz39X<p2ZEKE2ET0DFuMHw|MV<M)0FT86nPF8id*5Lpx~{W%l!6lR)j`O
z@P_U}^<o{kcm$P8eH%e@85IEi<<($8Z}K`EXe|jA=>-JXytyc=A!ZGTL`qYKuR|l3
zs5}8%Hn7#WKkW_EMxeSMo~S<P?@SR5^_-CwDd;3w5AY-hU1~YC9>!unz3qXDYd~<*
zHP2}!Pi#)X2!(Ciq?y7YeB;}t=6*ARg%S;sg(6>CR6hc@;?|TLP&BU)TsAvw0k%La
z2PO<vIK_+{;DM8mU}w))#f{hgetdD;!C&OzmSRW)a`2~8P>!GgJFLUt2M4Nj88FpC
z%rxXY2aqS3l6)-i1J)acq`Zz`^r13JSv_ITG~Px2etBtzo4wqHvtHUF*KVZ;$^|u^
z!<GR-9cbyVwo7X*>nWQWx_fi!u?X3YlOK4+Zt++2npx8F5hL?WDp{vL9OJ*(KQw5X
zO_pBPq|u46pxfpw4xa$C7>1<wDnm8WXrbthaGwI)0ub>E)^0x*#C-)ECXda-wCxub
z7BIE^b0qA4u>pS~r3IiPd_3SC9dD?0ms~Woi>N`_*VAi<vPw@i^L@UwMfNDYKIRcY
z;aC%6pPyEdQlJZR?1W2Jvw-Qj=UX17H-4&XhNW7AzAg%-f+JyZQV|Cf|HC2#HF%?U
z!|e(<Jz7&jG;h$N5uDi0BY>dsB+pPFhVU4nsmW^L2A}X<&7lpB344C@os}jv@lCE<
zNL6WjmYXfmFnbR!Es48IjczD)2wbd>3TobXzU$t0;YSmt5BN}X_gU#6x<nE_a^IWT
zhNa|H&=AQ#x~OKl!<x}xI0c9aR4O>2HGH1@wlC95D73ti7d^+$q;5z>xhv7IA8W=v
z2RtJ9I`Gg)Y|0*T<yWn2U83$z={FW(vA%CKeFhgxcbV0!r&B9fO8g1b9a^>D7q4`V
zgVpKWSYE^YDoBu<f&~2#oS?0#<csZbUT?MBiP|UbSSv5Onp}@CSvbD%Xt1R=e&8Eh
zes|RKf=sC9kbHpC<SakvdUUa;@6<)LdUwrt<R%Hylb8NUqxeY_X^*BuG|vqo5aPE(
z7knp@2N;%R_=F8?C1aAVwJH8GU&{KK61u?4o$zPf9s9ld%~(UAHs3K1FP3dRKbbO3
zukK*X0{3+w%KwaYc~*ERb2A{XF$co$0unWHQwVhcTLuV3AjE0A*%(~THQwkWdPjK~
zj_x_yVvkOYCi32n)#&6lIeI-QYTI>y{sPZaO?AE|Tq{QjTFm6#UAr}_6?s$c$dR<6
z37fkTbwW8>Anv<tf)18tC)l9N_46AFFb%2tKNk0xAL4opz`)-{B-o+8f0Y^lLH(~K
z{r`)0qIMA1AHIWm{2l%wa8iC1I8{n}SvtP5uM~b?=ZJchb*>^Kz&M&MOj$;@`E6sh
zf>!*MmUh|zh~%OHTYqaZaZF~u3<Q?A0U<i)hUy81fGdKmO~Hg=3h~UyY9Rc(^Qs_2
z?s>%Vf18EzPyGAe{T(+0=-(Qx50$``3A!*MHVX;UZeS-Nm>sB31g2Ex4?MwwM!~hH
zrTgezAOiCxv~r;YL?OHc9?}FxGA0N)H;H2IlS02Ro%rq!(>cj9?OH3|LAWI`0N_vv
zI1ac7C5fDUfxnB$fA<r25(1@EPeTIGHxvCCR95ds&}P;5=58txt}TRg=+<nYiC8v_
z=tcZYZ33Mg%aN-<th&U|&Vk8`ni^x9{|F}UelUPMmz-%)*a<+$3j%uscmX$O^&cN}
zcT8PP{VkIoThl?6bVHI2ehBUOUxoH*2DmS<1iW(%08kDc^q<T@kVJUnL*zEd9=9Q5
z%?@T@ApwroVOqz5-nY(6p_`=)V^>G8^gaF1^a{3j2HB_7hf^S8iCrtuOD5Y0o*pmC
za9#raW=(4`g&=M7tYAVdDm;cETM=$w;8%ALdo$;zEk}%#-7yt5l5g^ZT|yu8Q|E|H
zA**!XtR7Fb+jyfMsXWiY?o9oyiXdP<>~L(~kj^hGY3UVP&fGgUa`PT%Y^O!jKEqQJ
z76M);<?WFUeN~Gzs7@$5gW=!hi3!&-vD%l}rQUojLR;kIt5#*cwgtl-%P%gAz1xE~
zkt&`j)N^rwN*b`Co_a!!g4@STzuvjsHSanwDxAn~5&FUTMQzT4f#^$4*5H0I0qv%+
zPE!H9>kJuMHzOwbGIsYF@kZLQiW#pB#Y$54+-du!h5Z+t4+d#fCe4`dDwpRtp;#c*
z^l~y@s^HvXPPuKP^|3629bcR!i9C%}$T9tBsntOgr`ZVtE|wy5Ga~PM?B{mY6GygO
z54xj?RAJ}X-&Hv?WMlQ^JT_at_haOs)8`2N8@;j(*WAb5G%ne#*dU$a%U1)uVO+CC
zH_Yqr(aGQ;FA;0Y6GEc0)8~wI6^o8q6`Sr~=6$Hq5nqjZo>czvOLXMN{8#nJlFS$)
z-9EvR+`F2RE^}hBa|Nhr2_*}ae37!qh{2)zc{O@1KG)8^w&5NvHrC=bk$kSE*bkw|
z^X-|Yp-CI#$)o^a7DBP~1e;z}9=eWbu#4M-3l~qXm!P?ej>X%0NJ7uUQLeV)+0PX&
z6IZH4)i?A*3B`M&M{u08_f3WN7WSmfE=~HWBxTNtr4Nc2L}Yg)xC`i~%uI@I$!)GC
zurby`VLG>n(TTZdcJAF09)<<R@_4uN8Sz&gvjkU%fR!|#BE!sfsnoa^(sAyzT~*ak
z#%ketN@L$rgP%fu)Vr`9vKJ3O{U(~p(nMKr@<Sb>@-6Fy>XnyO^+a54C&`wSpW8jr
z``zxqu8oZR@B-DFvg(wk#IJ3|wq!Ps3kAk@ez?O~@uQ=z*XKzULr`77=tTt)Gt+y8
zg|whVFOTG!iw9T}StOU%*BU{|qBKeeGdKg=Bf+R*7U0IG86IHEIyx_WKrk1xsL(aE
z1`)w{DhA;@n59}Xq6{uSOc+$y0i+xPNV#|1OfAzTA~@G6#4(=vq8~yLn5T2wAcJ0-
zJ7f0m#M=M#8aLxBu#g}kX>*_jn0jclK;H}+m&i#KBQXNd-w11R)acD%0^n2%pzj2Q
zny7McHIPM}T=<z_wEbTtVuE`UeIEG<r-JAl2GJRxQ?X2ch;|uRb=U}``5&pk|E{(w
zqlO8v%J>Y!9ZZxNG6Rh<o#b2qwymf>F`CZa%#>X4`RBO{p9a-Ue@q@wwMbZt)b9p2
zE^vTh|BPQ1M73fVTpF+z0aQ|MTmXo1^C~YY3)BAQ_XrA95RPmDvIs#b8Q#rmttjTH
z>v$438jQcj95(^PX0bi<krcGjU~?7`2ugY|60qB#Z}(e&VbRJ!mpE{^4ht9apls;k
zNxnGe7-EpC?{H_}Y;}h33bq*q%6sVI199_bz_g`x;mkZ2Os3BFj#d?==vq{mU3lNd
zTX$h({G@s+kde{r;imI|sHAb!)DN?AB`nJ@MOFxfJ~D82G|cH04IizfH#XZNo-8Kl
zgPOlWrmb*CisM4{bbHf_ot!G|qj<Gk2<DS(!mTJdW2nG_?aN2i3xV9L+gQan*~9t)
z0q#L3mKCSsShmE?vmk=~U7UV?=7MM;<RY)ve$Cx!oi@X0gLfZIK44%ub@#VenJq(b
z+xl*Mia9S)qR3*V{8>T4RsS*z-j?@6jpu6EBK9RkmCWO~S5+3(`Fv7`bw9YiaXF~X
zzH<z-t4#6L^;=`N(ruT6XEpV8HVB_m6w0Z7V-6*{$}X<Qqr_jIvP_dV6e*CuvctrL
zo`3h;Rsp_Qe_i^exfF5o<eSXz<}<KKhO3KhOh!e@C8Dg>k^af{+4L9PqP(Aks~#Nk
zzi{MYO_diTnn&<at|>Qrfldn{=+5%2>SP&n++Uk_IE%MNAWAH?a(O`g+bg0{J$9du
zX(Px`TBwifpBYfYhwe!jZ9C{JemUlKg>$?E<SjIL=+?RA9as0<Rd;9Rs(R)5ERVS)
zm9O-9IGLQ53a%U*7#J9`N%(B~{8E|m`C*%nqH%FipLQX(``h<2wu}z8N$Qq-wJGeq
zwWOf%N+)Er<a&LefxyDi0=r!~=d-V}2jLSZ^6ktPZDWpv4B6gyKcHKxyyQ`$d4*+K
zMb$Jdyy<jtk1N5iB5#oCvb2%1$0Dw2w^`3b_;h0UmA>#^#;elu(#29<>ukCp^|sqV
zhIL9`OIIV&+)8N8MabnmcY^-=s%zUNpC*qq#>jk8`m88fZ1;hC!mB8qO1j#q%9-zj
z?oW-@rw9)!zCMp$vwQS1R*JCvrO4H8x?wM-Tr&1Ckv-fHi1hB6kFz%7SMqp`LP+|$
zi;VelN08;=(F-{f*k)lNGX4>^(vY@|^t40_yWgOv*f-Cvtm2~2z*g^4W>3OS{^a?f
z#mXD8E$(9qLvzStY$R}SJT^&TE5}RQl2?<WYWE<0f^Qi=`9Oa%o_+P?IZ=_dQHcWM
zBd3#kNX}C0RVAydvaJq%85;e4CEd`TK9>@^ZauEPmVtQrxZC9=**ynmiYc=E8Krh+
ziBfew=Luo~A8S<Yd9l|iYfs5@O^E$cD^=S`mfd4LjHgxyM@{-H4jGW&i%f?Xv3)=P
z`HNW{SJT}FALbnpa*MbAsV9+E%W<%W8|uur4{eKW_=RQao!J?abNyk;vnS6g$mbke
zY<6%Cdm~=$qnM~C<=HoY(+$9PzVwcdbzCp9_)>AaEapv&NAkP$++ECb*jCISKYS&+
z3AuJK9(VOg^LVVjNL;M*zbb|IBhY#|W|V2LVH$y2I`IZzMdVsPA{|54CT)lz|D*+`
zfEK_Y0H@Fj3Ic6*0KD?vbW@Ze+JVOTBN%MUfBHMBjgxV}16GIbxc$MC!3nt=U^IbI
z9`1A-5O&rvh6LGyU)d%|^T&W7wjb%BZ2*aUK^K+Dy@C0wX0U2PkN~Un6Js3G@;L(_
zYB+8c5MnbYfd;5P$#nR4)s%k!OmdlRv-w$E7Nv<9Yzsf91)yFaOHqtuWE65<Qgj7d
z^2h9PMnFrFX}`}NimVMJA2;ELwnT^iih?7s6W#DmFnD47zg&Nc{Z|l7qDpEp(xJ6T
z0Bnz8;TP|m*F!el5_tl@VPL{PFz_DaP3(3Hh8D9J-bY2xI_52Sb?`c#_V22TmX(iR
z5;^gacvw->2Rjo2QIA4(E6Gia<LdIGVf0c0<07O;AnQRJmqI^b=wf_4aMEGyyx|<I
zZVS3V{lap3q|wgD(#Wv>oOT}8W1xi^E!%oi?1r<l_?Zd|)8)(5CRiYiyxBAo!3Pl(
z!SfL02?Ti86=iBSyip1aJ<0hT$!MlUD{`uZ0exA8@QZ*Xc%2>43Fd%^qTY+H1A*8A
z{*EB(WDuf&u-|8BfH=MqiTd=(LBQ)_3*V;waXa$=-u-`P?H{{^n*oGTjfpx>KjQ!p
z6OjyCatg-7%h&F;PvT@d@8VAzg*h>SgJ*eZ>~MAN2JnFf4nr*#kOP7);D&sWUnyk#
zxVE{2bKAj{uBn%a?#Jz48eJ>sO&Uw?x=(PPj#<-Za0P9GHWb`Q0HAHAj~z~v-0%d?
zxe8Dvoh}K4(%>lQvw6A()noO5E#!ZSdH?S301gIkqZvxmT8IGvTPbW4V0)vwRv~#{
z4`ZoRW+60x8`Kd<cAaJg5*)bu<BG`kOn)GrQjcM~*%=+o$GGu%27r$!S>Stq;=EFe
zlLm0^8}tZ$51Cd8tmv4FC>j+!_yvd%K^;OD|J^|Te2x20mOoP+`voy517E>3A=bF#
zXr=>XBz;Jq48LWBHX=8;!O_NI=y#&K^r<2VjOZT<ga%j*K+sCy5>QkT3?mv**u;$d
z<Dxz?`TXx(#HN^g_Z`f{C8Pt1z6H=Rz|zP0IFkV#(%Qi|5V{rxgreZ4P;_9WAmN=@
zkbkt7y8jmzJJ$2SR(Z_L47Y-szF<g*DO3|ERE~lTkB~*-mhHhn2JeuhA1DVQ$}f?_
z$o7ZAztax?tDo5MT$sZbe31+DH8k&D3E#rynZr7`kuuCuJYj$hZsPBl6l0yoQIGL3
zqA`VKpaTONoa{133&&32;hh(MNc_z#CD%urE}#c+>f1k;hWd~GjhzgI+2vr|S_`n5
zUeyCq9N0_`aES=2SQ8ESi6r4hw|$#Mg&rbhpqnxqXOP<={1+VUs5$c__6yjyy6}~b
z8qDgl3>+4ZyDYi12)rEup;VqJVcMA*!o~q(u!z9u(tZfaL{UQL&i#`<XSveZcJ#e_
z4cm+rs@BR)|7(e!xo$&=MRW1TH(i+@BdsN!`@|<c4?Z$@$Uk}bQQ`_`boFs^^+$@%
z@YtEWJ*#mVU1Jp=!uLy6mhA{#xZ!()Rh-D#tupSFN4%))L6}$v+qB7uTdZ%*KQh<)
z7Z&f0_2~}o)T;g0dsNxp4Sf2!Mml-CFye4Pm-O9+SB}SOR|Gk{h>2qi!$i*q%-R`s
z_wJrYJD;zgI>f8;iIkF>dbR9YTXx@6X9Ly<bP|8p7Wn&K+x+?8^IW<B3B`i364p$?
zBH%Q@=1W&#UcfJrzz5I32l#*ez;tG6`R(tK|E9oc#o&&E4K?UmU^({SfuG4lfnI|O
z0vw|WazmSQ0Vv8FlAC7WS2o}Q|2O*>7lor9$1&11M)aA_c5?tow%2q`9K?+vWT8qZ
znMLcL7VqBzGgLE34qb)~2kF2+_>JhxXn@R17|)>^H{^sAu9y>KwPL<pW$VY0b!0Y#
zAUhPD-xCyY0K)GgBn`%`b4Asi4#e!Y!Pj8#vBRl9k`n%-js4Fj5j*)5W<QDa+w39P
zF($KFDPpAp)yBg(fMUA+XkDxn2B=x@vxo%DpBd0e=x;Ehw*XXK$KY6wVG53r7~x=~
z_@-Z2(mw&PN3C0Z{l|A#4X$k}3xA*Pwb@seZtMhy(=J(|wjpQwSH;t<GOso$<_I4g
z<?nutEkFaIT2rz2v6-qBMR9bH`nq$aBoZQxzXJ~zz*?}y*c2ETi*;9`EYfiY{i|IX
zeHASXzBcsfIQygz_FCOZE?z|6GBP*T2yEFoy%Rf#04d@c(GRP4IgIzn=lL~oiHg$o
zjpJHv;Bocq49THtLAVjK6W(9{bd(f|=Ik~{R!BI;sMf&)C#7ikDviKXvG55Zq6*i&
ztgggM+-|IYSxvlcV?c7*jf_m5SvX#D{mc8d9nZaw#L8AQz3nhqlsL@<8Y7Uv5Tqa)
zk%N+-tOd!gLB9D;1afGz>V3sik+8W{>&J(m5Ah<B{WAbH|D6hs=mkt8g1QI8u=0oH
z#IaiYPRox?rY?B#47N-S+NtV2ZWwXAHP<emd=YJ`;F*uNK)E(O>9p?u%k92p4Kj~~
zB&bKm;!=I;>S$RZt8U`<2g|;0xOSG_o$G%#5)r6*PB1qr^I(-io8fL5`Odk~<rBwz
z?_JI1RR>8oALWt&t(~;+2d(o5b+gHF{YTUdlEGyPYw2(5dnVBLn<Nb<3Md^e3s?);
zZ~Bj`yZ=PpY@XR87*HtnABPrC+J@c>)m(=rM4;kO=EJ;SnVTnn#oIct@uR7j57*bv
zAkNC_L4vryAac2S1cmq(!t>%*4(3GV*Txlo91(@t<H#ow8v^Moz?W|f<OhEmEcBc#
z2ZxFy$;RHm88o+~RX1Q<{c%jp#dTHEN@&>r#(ILda0AQu#AB!S2R0K%eHExDm@RkE
zywv;cG<^Z8z2U2Cz*3!ek-AaEHFQq6Q1U0Tgm{a}krx6oAFwmCDZ9z5r(?1tO0ZHT
zPZ`E%5MK^d+Kov(n=m=>cHqo3eq<I!E1-dS=hUHsO{MV+LzSr53<rnmx~jKBUnjt*
z^M7HX4x!J6w0R=f{kMoV=nD)?-yLeOKh|T)^(0w0C+tS-t&=L_np!=5C93;Bi`Vod
zJC*8?hC^DR_cmIM?T2#}t{iYw9MBz#C&2`yDQ<KI1tRM2#Q~qLDa3G%ramzJ)Ik#f
ze%cyi0+<%;XDjLc62CcTADxW^LlMWg#_JE|sEI42LvU+?kibWZS_)>YgM%7sO1_)C
zYNgngf9vCu!vS%XXwOT9?`*jS5B>bQbjQ|+Tpy*nV%s-{CD#Z^{_)uUey6^*?*pL`
zN!sSp*QO2cFD2YwvF;*W7!IAWXQ)Yz*faMSLL)gq8$<#~^rso|+SpQQ&&!*3x5K~+
zL1A5z*`S*OQ#JG#mc#czD#_grXsTC+u^nQ(1nT@RcmH)hHL2d(fY}JGe}GOZJR$Yg
z>f#;2kn_9(Vj_OGGbxym!I~7=-WA{D7Ek1#_P<Lsw#q#crFs677t2Ds+AMNx=ePje
zF=$+crD(V@Sh`_h`@Q%4^lfzTWp$fQFS*sCKkY3*cZO#81DDL37JUY{6^IKdXXKH!
zf*3Nn4vow8Lb6udQfzkJ@1tESTYd<NBy5Q>R{2yXCxA%6JDX62(|kA@PFE+4k$BB#
z<Q&U(9$?k)w(GI2jwG5Hj%wN%KS}cx_Hdix_fcq*Vf%1T&U46o-8zac>TKADH!WER
zxRQuI=`JvmBXR8xZ8i^Y(bKhdzY6=62~f<RhlTvp{=kW=OZqE)pc)Xhi~XMFTAfE8
z<!H5Nbs5%MD5jkF`sK~T8+=MeB@Yje3tjYh-l<!2IWV33l1Watsr8B?v^Lsi0rp^q
z(iKm~<H?u`Y0TONjrl)VptGIkP(9~o+|&Y!!H!@&!Z5T1*5Lp{;B2-BZZ!;+KwiOu
z1Su7;jDfj0SV`+odk8<i`@lax;UQG-{!hE)Z^nS2N|=6nj~xHwXy6VzsEGli8W96^
z4B)5-kQ-oYg^i~C!qSn0qJqWTkXy%DQCwe*Msq6Wy|un*pP7Ek<U`yM<4d1KBUUDH
zar#s#^=vl)WNS=dHEZ+BWe3Zwr7Pmac@{sX2kxNZS5+vOE77LZW4qtAmh*?@8Q|%l
zaSLSz)q-Ojl+?3A!0bVk>R#iR8<dN+F37rdAI51@@`8{AR{d07ohwIw?PI5G=QeM3
z3nf4Efdxp8{*#&iL1SHncbkfi;*4$F>TEy*fL9p^iUqm_v!*zWpm~*HXZdgmpxmhp
zBMMgta+^1?_YH8ddV1;nKV!ZB^mp85Kevxe(r;MfH-l^fl849!ZaDgF=v&(lSOO?1
z!r#D+{|!ot3D9Ja2Q+R)Ed$nEqCNcd1GdY`=z3A7ROQ@YuAj2*Hcr(*h317=_e2J;
zk^cO*dSDa5y9ot*UIClKDgh4vfbEm@H>$IBuRn%17ImZhV!nJgi$Bp6G4<%)#9C}%
z71p^{O`g&5Zjd<j$Z&anfvCSzs&OI3pm$+?aix(lHBkOx!Ys{H)5L_=gza#&0V-5|
zKlqYsPUthtz(Hcj%Q5GjeEb~ASF8?N9L*aaY(A=8>hevhRQ3~h%}gS#3EoX-z9}K`
zQ$-uCS^E_DlXaSEL9x85F7>aITE!u5r>yrjB|rLEHs9y_x3OHAG4@{fy>FgmG=o&M
z?y6qw22{suU&#?%cSF+V9z(xmjcX#CN5}+N>i9Htq;-cz7vvBfb{bKOrAlHR`JWrp
zGikcm=}8DNe^#cHa4&4^3A*P&Tu;g;+qkcMU#V|^vPh*`j6grl2#IyhuadZ_-dFLW
zUo$I;%jjn;S`VE1VrA%(c~SCk<0+IdR8z<5y`VJ$(Yd4H=WQqze`K#e8!@{7R!2>>
z2&K+P$)t;6=9PDxxo7HX)Z|W=Bad&?tzVaSsadd=mQ%04S>Q$PIZ@)eI5=?Hsp}hk
zS5_dIH^eOH%c-QL^=p<k0o+r0sY$OYEF8+y*7Zk_O*nSA3%C1(zs1Ocp_=JMTuUgs
z;Uy8o1M$5}vEn1yw51)Q%cAg}BP{-Y)Vp_OJvm-qISqiUlpn;{iyKudd&D?G%(JMg
zR)5-P&DAS&q;yF$#y#tm#dMtXh+dEUJ<Xk{#fTN`KCp4ZaN||}O2DMvhKHX?dD~yl
zd6D#V&{$i0V9gtKaJFrF{X4}+ODgRl5t(yyd}2qoS#ftCPm!Lem!BH<I#SIcHJnio
zhy4|Ox&No=OX~;DlKEGh)k<J+Swan{A7%vsEZa;MAN)pgWqG6L4~mu?1hWGgQCygr
zj-21-{3D`^Nx;@}QYG0K>CtOHgSX@UjW9U#cZ5NRPY|r?#YrP7!GXODVCUBWFTuo7
z#81%tYY=dDHxT!}V=vSc1-{<$Hee^sa}Zp|Ar9mgK$DsiNPINsI&+f*FD%v6peH#k
zp$@k*B=<&bjoTORecvyq8nDW~3lZ@>RwuwJG`7Ri^h+U>=e8c{;z-!<uaWLNpq}mg
z&gmd6<PrOzBYt0tiLUaqf_-o1ac3xBLk^GcM-BJKZ})kT!RCyjm@IG1lxa{Al1<%p
z+T}6j_ZfnWD$|!FbsmaV2>LV?Q(LNpFUQt%aygdqJ^yaX7atoB4Y+IFS{|HPlD)K`
z?rLMn+TPE*rH<t!?lvJ>U4$A8YWCVyUPPBK<iAkhe|snYNTdr9*}u*kaa3%Omu2_U
z;3lUf(m{qjMJq~SxB8qxpERG#QGLax`Pukf`y)r5HWo<ae3Zz#%U_t5vdxOZwy>M1
zzn@@kW$ldL?QyHC`9Q(N1Dw^@zuY@>s8_e>h=f_;CD9b;4!Ge}mV}Ge@YC=LD*t3f
zWNLh6%bGz+c}luRi_<$NaqW98vYq~p_huxUt4=I<OA_7;P9ydyL`R@@C~!pY8#<oh
zHA>j$(3bJ#t7hb_xZ=4Jr=A;>?w@G%FIWnE_)w+8k8*FS&d>)(3|J3ZN!Hb;xMFe$
z7S3``=7GavUHQ@j9Jx;~T<W&j?q$k}yJN()=bXZ_^vf|94b5)*qLRv#;lA1H_VFTj
zPQ+fgUSIzp`*u^Np1D3^&VU+c*tb2~mzn)esupEQVonTv-@ZQ-SuY^x%9ih}^HFN{
zW4F_(>L*q*1)g199nT3`RSO>@1y&_=xc5IxS?I@=#_7#@eW`HB3y4lrm+?PK#?%o6
zsC6}_=96XaqgJQ;NSBMqU(kHPQlpX_0f`gGmY@0t>Py?WN49g=OMJ`n;kZ&>%txq8
z_N(VHuODy=THU!=dB*0=1^FSBvF_nX73-10vZN?s8`(F<+K0Yys&jkM&-%2i*WkYG
z_X%9mlbKI#vXS7`dq1<~m0RL1R@R#?9}YDtXWwR~`Fp4b?@1g!-V>azNU*7WZYC1c
zdTK}d&%2inM}`OAKfGuANy%tB=iY2Tc_NzT8XrfM_aiK*sWBB6KoQcD?YVDz@;aT1
z9@G(gUEB&w))mxDI>y+-)DQUIpgNCovcE%qQ|c?{#(y(uJ04ws&nlg(L*!Go+<wVQ
z8`1H7EEPJF8F+tId&*qBc?w3vy}x+`$3MHzY2D!Po<yno<txi7r146*hfT2G>lN$~
zGJb)LsLuvM+b?yiUJS6ev9Fka^OJAs%~u{LWS=h|HS9lT@K7X0MWyenx~Mr7Ihqij
zRo17#LE`nH31`kqj?257^}p=%ZPl*eYCfZN=#!-cskxckShjp+AY1R48dq$EOWC`O
zRNWz$+2IPs`6pSguIBPwNps~Z<FSp^Hb2!z8rF7*f0b*MXkJwvH0EM-m6|X%2fe3y
zU+>A%+g}%dD8$9!)_`i>$Sr=KXZ6w29H%~CweXO#*F}b{KS-$W2;)K7cam1Omz8#V
ze%Er(ZQ~QADOAsg-3XE6D$c8Luw@sFK9sT#ER5TT{;t940sSy(DbEU}n32+x8nWjt
z7XvCf!@hq{@=|cBTYF0l%4l*I5IX+h`eMHI(xtZIT`3+pxynYo?AMR77PH(BpQpu3
zD~(TdU)V@=5={6oKcGW08E!LIB+}N{wN;iOIm_%Ub<(h@&SL9@_?aO>GW8{eYi<l1
zDP5BLA#WjKPT-`4Mc|R5K(Rito6#y~4CRe^MUrgC<E|@Yfv~<qv({?(NzgPn&G)V4
zHm=Jym)2djXtDo9W)Wcjg1sHAuHzo4ZFbBq$69-4L+Ieqtm0hpp^DPQ6}PrL0Mzm>
z|3GU&UE!QMEX;>Y9QwEuatF>%P|32}?fCmd!qu)Wvs;n2Hv15#AAX9uE4cxz+`yOA
zxT}=tg>{OJaqsbX;?*A2b87WVpSMrlu4x`@%F=-WUp(>-#j~QOG=d66BWCpi?0v^X
zih4$?FI|WyYjL*Jz&GxBq{w~3P66{YAQhy+oS~x`Mn(HGx@z*2&91tbZMksd;re#m
z7e1c{*zmbqN2@w)Q-?7;ryacq=6_)^aqssRBMY(ZGd!5AvnpU!Ehcu+VWBWVml2J_
zjXc9Gokq7nze3eO+*@-PaGE2}h_IwgKd6&2#QLiXbtlReedo{A`+xFpZU(S2Yc582
z`~#QbS3aWJ5TJ({(|+OQ51+zsbQ$#jAzjA0$_ejo19YeN7=ej)#L%S2s?NY1tDsKH
z#Z15j;_ZNcB46?gH1eIW!Go3pq}wDIOzNU!FPMi)n!@5o`hn|OHuk;&B51Lqn682C
zFJms4^4>bY#qxP7OM&LfW6ckZCcw`+rjnX7#&%i24<OnF{fGYh=^p-8J>b3Qh)3xC
z<TTwkL+2D8Rlo0+c6B3-C7OCiUTWEuV0TQ@y-Cn{1p)8C(|0)&3Q@I@&X$zm5AP}Z
zks`r^`XX{Or3KrUi1(D24^_x*Sw|c6@GU?i(FLjq@)bg;<55-D0;|CMjO$RQevgpz
zO!(aAB@2n`1HA&{sUJ;R#PcfWlcQxKK9s#2yXP;sqbn#|R5AJcKs@Q9bMY(lwJU=#
zu;^>_frG*kcLzrmg90l#opYN~QF>%}k=8YNsq$OpxBTxpm)OqmyKjxsdNYGkr=s8;
z3X}>HO5nFyZ=ro%@^6ld^fbQ4a}?2=x!&FjV0BqPTAj}<_LLFu0VFAwyo4W}dQuGS
zpgv<Dt2}$W&g}DZE#N2}PB9anbUo>J0}qT$_E&4gVB$B(04(j42hQ2tj(R(vJ69y~
zbc(Z%XRbaC*E4fi?50;QfB!@|elua>o715?dJ^uQ-NikF`ibWG*A=j@{O<T+=QHSX
z4#+~8n%%;mU_m)O=d6&}vBeu(@#}j$L^`6j*nGRo!dilM1Fv0=TC%R@2ixGMInb&5
zU^SB&U&&8-RmZo66>Z=Q8{SVTiTJ8ny4R8K<a<9eR>ArCo!@tSVl9;%k)bL-1wl)7
z5S_&enmLcR-v_4AMq!7t$XM+C&f^t|xc$u|(%ud3&vkO%rDuMBK0o->ZOi})%?zE&
z1KzFYn65{^6W@RG*>}(WnIjCqf@4?(_7dl8^k;t?u$!$Av<*=H`ZIHr2?kXE=Rvvz
z^o@`T{R%)gK+;y=We8jq2QT;A<=1onic5iy2KPHIW&I784r6P9UB1ppk6ViYxODe#
zxK!!?4_xYUT7NYUrexx22cVQA7X_=6;%3YgtyMc$1?^U-Ui`k&MB)wCL$vMF`tRRO
z8SZt|&IqV%4?lEzl_+iy6dPVq=-OIQ+S-=b>#X&4ah2XsR#X-{rqQp(uBJWB)|V3#
zWTo{`!NRsn!9~$|t^0V-a})j~!MB<ZQu^B^(g#enlAq?C_DmYdUs<Hh&X?RbpT0Tw
zVB1uv+b*8?rE{V#brUydIW?}$<xqyR+z_FjdB@exmFPywe@q;)&9#5Mb+t+Vb-qcM
zcFFw{f{s1uSqk}8y{n!5v-u@GVrh<&6>JX5qVMI61<(ChXYL_?5#|f{2*WpgR)0HH
z351-5w2LO1<w^0T8lx&%lO&apo?K1u-?<+OzjkCnQd?7PP&;6LkTWFD8r|~PGNb=E
z;d|7<a1+C*mQT6j5}zXWYHj7y`BwkK&`=Y5z4Dqf4>wYNu&kSLld9AAe&}-nRd(*U
zSbt!gyl~Q<57>G@ZA#<-jS%>lVQ8rMy!YB(KlGRcvl3hxVi?4ILLGwl3^w9hEb8p9
z*2_K9-fGmy{+_LRv_ox<th<Kqv#3XvBt(;5w6uA@(-W6foNQJZU&k)fvN$S_i6+r?
zbC$}a@?248=Aa8ue&xle>~JzsEOWG#k6S`>9jA19av|fRKM5T=18k`@SPKD4ApW6X
z*ifw`23HoW#re-yw^@b~f1SSnGI-~Qf-wRLW|L|7)gOcE`jsL<;^_9jdv5*@Q6vMf
zr#dUT7utus&0o=6$u<T?wFe}P$f}KBO}}^1)946CS}tp3TXZ%yov{Uw0OQo5(eqDp
z2dNqj`><>aCcB-5p-*qTctMs6ewvr_z|E5%F5S!(7v-OG&a((0;R~n`pN~i4ZIxup
zx}9Rm?E{M4UE*FQGvAqs;Rnj}3UX4XlnowT!L~tw$|bui#+`0Lgje&<#z!(d9L<xw
zIjADx;1eN*MTiqQQi@?w^=uWyhn1jqwGirZXYMt=US_z5>er{Nu3l3PmChyi>f-g=
zn<ihhZ|fir^wa@%Fr*9g;IdHGA2c1|3<mE8Q6;c-ICg5KwctTi=z5vnngzZn?n~4{
zDNMPfyb;YiS;0y5Kz`z+B_he$AA#JT8$(j1rW#4?3|Hps%Kh)ClJ({GVe-^U`5UoQ
zdgWXv^w+X2Y`9fSYS`G=wpX8mzk<6kxmY?(AfkAp+E04Ad)XL1cCt2|EFWlX#^jGP
zBooJ$zMPmQ+K1{KysN#KA%&_Ew4!?=(KtKOw}es5{G<HYfrKEDp45+hBT)m>1ZP=m
z@e8+Fi_h%MI^iqmyu1$Y;iBx0$^+&odtcwuz~op{-7^1+v7gVJs~$Np6!j{wfMt!F
zj9d%uU@)y9!Wu}sdNP!8@5`6@A+r|+$S3&%bz#|KC*9aI!ymh*M7Pt;gsL?@8NXM_
zX)Cy1X6~r)?#@teiL1WtF`yiz(NVu+tN%K@p@S;Y!HC3c5{@*{AK?w`xCBu46ohev
z7p(zew*YtHSD)~?e|7ziax%F6fVW6=;TUl7^8bkRU0g-)1?tiiIU#~8PGCNC`ORJQ
z@0~$dV#nX=4d*(q_}6Sk2VR33KgNhB`;ozzhrhB8iq*+L82LdpDhix~XNW>?(&iHI
z!`z*o76y>7?4a9+a--ul2P~?MZJ3jvSqpNIWeCRpTom&e(m_lW@uoF^D5+*XaHdVs
zCy%}TLTsfo$J>$5yr-UzEDG!iqUX6QS};?WuufHl(Q@Vk!xh#819U_!YPQs#nN)<b
zWj;-icwh~`8lYJZVh{}5A$R-K{*5B7ZL8D}cm9Rt{eruXXN>GV8o-^0t~=oVDI?96
z-}XG4)sV+3R-c+cm+&d_a8wr|Lr>%@-U<|EG^EEbpC?8{eu9GCo7S#Sm|ym3plRvl
z!g3NjMkT#YTH0Bz2}IrVXtN8yn`~+*A!np5>NS{0^D6(i^3v-5`)dw<zBeZ>wisF#
znO1ZeOqe&z-0zxLEm^>jqn3ce4lU)<KM|*$V6`~-;$i)sfZR79CkIgL{2P1&oz-m4
ziQ8XsCu2fa54nsUy0G+Q4v#Uq3^KUA$DHSG)0INK9OKWn#QL7IaZOVZRbFp+@a@6R
zS(*o?<Oj6X{DdduuG}$EFFhWt_(r@%TfzDGpl;#UtP#R40=3ZMjG$tlb8EKE*@F6t
z=(ETzi$2`l{?~w$R3@m5QkQ3T!ucqh*~oMIhf}4iEsMk~^F^HfHj3#ZuWenfp1ila
zCj<2|#||3odb(fs=W9XBC$FCCD3vUx7LDn1VM0J$UVjSWiJQW13!_5c!%v1@2M*g_
z3foohdgp^k;2!0laLLrP`bD`<)X2cmciXuhzxOi9H#Se|d6v=9=H}6#qoCHVy{xvs
zS8gpIK?Yu@Q<mGpI|{xfQW|Qnw8+OrSl)T2E<c_*dw!`qp)_L2>I~8Q8+!Y9A6@#X
zS6@tn+UO=y-&E(6lD@iZ<n!3a7rOD=-1?yA+=M>nGgQeox>_E!?L(rY|BE_B?khW+
zS7*91scB;i8l&D}F7nQKTr*f~8qbbc<g-g6ZyU8#4#UPDM`c12LmN>$&A)4p4z@n!
zZ@%pMNa?ZHy~vW#yB?phLw#~vvrKnBew$`ItZ$t^Ft_fQiab>}z7Z^T)8oz{r}(J!
z>pU03iiysw0RBF_)tz>WQMc%E%36%O$lA>AhO`_Njiu(8q(_4@R%)Im$fBs+QJ32;
z2yHTRDDQ2hv!^c)3xlrld5YXB#L|q-#5uW9kL6)LL4o(xkCRFDBo6AJdCA^}Jcm-F
z#%__qeQo)DQb(mVHG<Eab6YzPf3F=?3*qNAKK)$YL@$#uU}BNs?OgOqFt(>@?9}xy
zIYGhf5BiG}t+gwvjP9EjsvDEN`d-<LEgW}o8gOnC;{R-mD+^xJR{P*3d$jDf?e{J7
zdg#yo0OAMM!>xp!jNMrv#oW+oVEfZ7t<r(o!Lu)g%eKY~v+RqlkG*$KTSd)z386`q
z8<R3JEh&xDttyEcGmgxP6)rriKdfF`T;le)uRK4-*M0P5iJnft@#*Ws=M?fAV>Viw
zqDP5u#@(&;x$jn+Vf>VBa`eQkTVx9>W>=h;`<Ly=O?)=g`yNqyk}Pv9%r2IV$LYzx
zni&$Fkr^Zqqvr=Hc;W%H2-)@dTMab^e~GV2qlL2T?XBCq!uEv>?3w)Z{jRTyC@@!w
z(Okeul|02<22?e-B_~4y+7Er@1VR>fJeqn9J`RFPg))9&LF+x}zi%2+bMsAbmi3jB
zCZ@?lRsN;c=7=*%0rs+uJx#_>BXZ7^93UQGB<L>EOZy3s0|Q854Cos@=>|(gFCZS{
zmZy9{I4Uq{8%%*!z>cXWtg!arNX=<5H}VN?nk^e5#90kDCNP)~b>Aeg>v~DZs?9*4
ze|=WsKtiom7IV)!ya7;1cs}Pp-LBy;MiDdmg@sE^7iJ`?MapadH!t}J^!uY$MHxK&
z7s$-@M$X6H=EdGp(Ysq+__chF>^r~QXcqqL*5Li16ifzs7d%w1ml8_9;eWoQdqA@=
z)b!`GwgK~3A8KCN{(#2L1bRDg#G#Pk#7wQ`pMkk!o6LLs<wng`+Dr!cKbyFy&uYK+
z8TGoqRZiyc15=REf8aKv5FP{rJHi~ER<POs_(sdSx8ZfdQ9FdAbzt?jY#mj#kbAf$
zDRrj)N~Rgp{G**f*5L3-SL^mUEoTo4uL`SZpa7}I^chiz!stJIaX(ZexEKja&Vn9T
zzj^4`s}C*J{-<8Ka0-ShrdSm)is|QQzz?`g^kMuszcDJFIwp$Sw9T{MZ8^ugHR{ZM
z)Juq5RSDb>8VR79k_-5y0gty;6*ZEttGpl~HgHAJi7xUBi_wHfyI58{{+g&>%k27<
zA#)~Ye-1UP7C|<2#s)*hN)eTk#Nb$Z-TmsLxY8or6D3Q>g1j%`IW5S(3$M2{wZC?+
zc&L5`$o&OkG)-W$OHGh-G%WqGg1)h;JCmQEnK(8%rWtQ$cW+5&9^e&UkyvffSm$}!
zYSxU4*Ft1<oOD`R+SF%2BUAg&la_8KxsS;)cikTh4Jq_v=RPyvlRLuYNqi29<(Y8-
z&TnV%VIqNJ!{<cq$rK>Q`KnMcxFW3u56~m)sr9n_tLW0{<qytn$45K*7uC$5siYUM
z!V2%M?UF0lHBV-?swDlgkK01xZhS(3>%(EkqMyr5?6ZWaacYA1I14@__G8GUqEhHi
zKVS>L^jx)4yAM5D^X1upbD8@ya{$vy=*DHvQPhNfxJDBQ%px2}S>23DougS|C!=9@
z;dRj80o1|et-QDy=~%wuF{9s#`*XbEGV*WYS1Y2Bgq!fTjn8lt*&Dvd4b2e&(!BwI
zn*UAO*WV-Oe*d{8{O|I&HVyj?X7-Q#w*M&h#|>mi!<yJl+lUDqo13vetf*EHq{nr~
zrUALRlQ%)$P3)jPa4<%#c5H)ctKr5zFBj1T)PTD8xBT(4<@?My*M-OS{84h<qJ6lV
zEwcSKl)JT>mieamPEg0-%g53i@0HDNrRS%)sF|a(*X-^gi?@ID9>qKyR_rOJKap}P
zX8uH*9I#b(u+{bDz3vyn0&{POg3AAcO^6kh&5AzT@d$?1MTmlF<jaWYE3-a9k!mQZ
zcR5g?o83-ni8$HPVzG7arNiWl0YivAv$g5=63yw|C72D&K8xt=D@kd5dWwldP|Uji
zd=RjHWV_MA0SR@(>al}b_*eUCvMGYelxfzra19^;_jkLoqf6QDe#X|7(`?qjrNF0i
z7}nkS!DCP{HK^A4aYX!(Zzh&0C&HLUPQ4OR9?(4LH73nwSS>7N{T^h`L9L7Pc0aqP
znbb{kUWo-4a2=#YbiC;%0QP_l_2}Brx9#{}BOgP_>tl+c6pPx@0YYerq>Itza)ij&
z(z|}SdvfZ^-*5HirUI$F%>tBAk3)B%)>ujaw&spRqm*^H?j{ylWTKz%Y;-paDh~ja
z+dzZ>c<i$<|D8bGJbDAo)Uv~MtI(<`W>K3F2?-(o5@Llk{e{KY7aqra?iBp0dmHWQ
zBS~a?f@X8#;ad;(a*h->Dht%8R+ZIZkt)5QVru#D?x%1RFXI{oQBOLcH74a@-XpV`
z%_qupTdz<fWZMOwPZ8qd+dgf7If~>Mq?V9eT#>yS*Hxc?zCEC+)fdg@a}Tkr&F%p5
z{#nkgnDS9A(HT@(H|2~l@b)KcJH4Ma7np!Np#uJcrCkGx%cNm*OouYe3Y1chM3PCt
zURutxwB|N-wBHg#wK8E2?NYgN0{)8RT^*7fy`PusoVfn9Qo|*^QIxK*mLbwYI31-F
z%Vz$i+)!2R*0(d}W*?i_7EKTfD8SOrjFDmu;E>9M4n~RogEc7+gAbUxveS2du3=)f
z?yod>deJ!Y;hmFbwsTfP`z?n>eO~U_(=Y+dVq@d*w_^*(_FVXA6l+;H>77^{&}++_
z$bg~R6i&=uyBFV$brxmQ0=g5F$`j3-%^X&HXNy%!KOU+y@Je-{S)SCmGkb@4&+ax`
zQq)P#46nKjU&4T`lAe%${G%96_1TBt1j_@Q2^5J;d;KGMs+fKAk_{f>OWBTy2RiL@
z!`kWd3m!8J(Y!dVC*-dkWXQZuZ>dFKk+0=z1eRZ^Wjr|_>nsS>5e{0;35kY)Xp}Tm
z<*v*1s|M|7;nn-qQf1EiyB$=B3xRW2X-_gw?Dn0iEncp4blrm{?#CBI{78Y(S%LNw
z6tN@7t(L0N@5-+k$UU!ZeQvr9{VI$Wgler8q-feCQ|$Ll@@AMCz9WVi#u=b?x$C4n
zIaYSM6XhmHGi{36*W%;N_G-fS*f!0_cIO(!n{%75dU(gh5n@Q+sitci2uiFqFW>@g
zEp6b$X6t1-KQ4|eciE;>CjZH&l@Cr-;#f-c0Cr(Zo>ZN_DrGLNQOIPdz{Hg0C*Q`C
zr@q>R)A`pF@8PzbFgqX5qxATv3fx4+eeBE~dYHIvulvj1>ne>=LPqZ9ifNL?ueuhS
zCX~^<d5Pn^uIH{e$>oJ->1hu)x9>jQ)z>mrHt2&eq+~@HcI$=nKT&Y5if_MtG4e~~
z(s<m`>Xe#fH!K4;!w52}R*KDx++LOHRDHOtD3;i8vf)8`JjVxlVTAI<U61#?*|LgN
zq{?9}rcnp|WwM=QFFHDA&6X~=spzGOm~4A7Vjoq>YK31Ar(3kW@jqVmAw{=}weECW
zr1)yUtx4^?eDiBRi=F-akn?%_81&Fv8G9zgXKG*lOA}7@Pez{89WOsLH~7mXpHUom
z>e|+Dyu`6;-;%#+%?ov&_5y!}7d^)ArzUj!8$Hk~M~q&cKjoqAVXpstI?>ccl-Tnv
zQ}(4Yt8>h!x$ZcUwTtf<;Shqwr)&9Yv{qm{UORD0v$yzZhl+Icvnij?8#<%<D!i-M
zgUn!9nwr~$<T+B<S84Fh`F^2~m76t3?h8AVatqtbutsm2h?G;Px1$B&={&^|Z^ThU
z&#`H9Edwh>4-l-<2aQLK_(K8FE@rk|yP)ns7`hi>n>e8TwzylX@0mgPDJxNsJraKE
z>^4RH502l`fA$Ya@@Acg9@H2UdW#{O{KE3|fx}Ca_LdRVOK%S>T1cvLX^8~ZPxawW
z{=(v>3l*Zj5%vjx?})r*Xcna{!rF#jglf$Ew~QczaK!+d_-kZQO)o^(4=Z+N^sK(>
zcNs8KVCBEK@5GmSX=8)CuRS~P<j}Rno{T=^9b{O7k>=0M>Lqe7I?w0qImse$V;4Jv
z<B4+g?ugO(<0zfoS6=m2m`(S^d(%7V@w!*OJBIlW8kAJo^FZ~?qd-p>BdEC$2#)w8
zK71P_1Msa*yQ<k{KOGPs{%bbPYsqDg)f=h56@U02{$#DgjijTN?1tq)(G&zzx(wUW
z!u<5HBx>nklmjtQaW?ABv-N2wEJK*jjmbI>kwBbLa6r}`ic<@@tFGJ<ANQQ((q+=W
zrj86#HlFkewz@V^Y*>QrtyrwUJdrnDDEpT?(SFmI_xfQt2f~1TllQVD6{?~5U<^#E
zect0Gq|>)abyKU90(z&i`JERE^A+pHo@?Wyiz2uehe+rrW={UDjx`@5<g)m<)?#0k
z#FkVJR(#!<8b#D#x%@pSo~K1aJo`&Hnoo9}+_+VGd89JR$5<!}doK1YwoAXCV~y)8
zbo-KUuWP!Mb3<3Xp~cva@Sc+!vD@Z3&reMX13tTC2FF&-?&CIsd@S7QFPGV5<MhE1
zMbh&Gb!%g2MFBp7EUZ73ms6vT64|NruWuF&8Fq6M<JI2k9fwCxEAyLRN!J)WSs2U^
zC^-UJ@*G*mxp0CM%wN$P96z^_1{O4wNgC9E8$k=!%|_KHY0FEbzX5RnI|)c8O~J6x
zT(x50m>%L%kHVz|GsD}ZVa*dowr`ae@7_I~#P>OdkJntuMEk&VyPF|~%7>$!@=c!i
zOSro<sF{ozXgYK#9NWfSG};kr4tgHR&tT<~`3-yWTnMf4x(=7aBO?cWNKtoH8f?5X
z$GR$x%RO}w%^`di%PtXA4-kT#E#6uWPY#7^^GC=ky?Hx)JVJWHZdgfLQ;E}HfpjUC
za82=_?UesMYs3m*6M#=*Flz?CGlcIH=xPAkB!X(6z-8u+WENo?kyMc>Mg(rtR{9lp
z&J3?#F6}90rVevNz8sv?<ad2QRG<s#z6{Xd-(?Z41k#Ml^xW*f!?)UH*Q07W*fUz&
zTwDSY{T#nB&ZpvBaHEI1p=pE-u#tHflHtq@Rk>S8dwqoO=>ROC1b0lP71?rBc=y{j
zo|H?%Pe1d&5UCTBH7|8P0hB@=QfDt?X-QVmADn+h^@9eRh^r5#=5cg>YVI1QPviPU
z=BrUE%B2r`H?%pr*G7OB*j2W7m76WY*Kqxy>i$#Tv5rFO(=mCY8Jf+lOY)X47F|QH
z-d3|gt+BQHEs)mZgI|B6qBKjpR|a+c`1zIVuUga`ic)^&$)5I55`C2D<l{F=KKP8*
zn!2(GoOD)E{y{-bx1>;lK6U92aMrDqmG4AQIh)jv2mL18f{+D_Gk4~u_8pt}-c~-g
zcJ|cAjw>p)4_TT&jmJ@eO}x!)3T6lJ6NsXpe#4(tsK+2|9<!mXwIB{yS&kp9?0D~7
zPo6<<&iC~7JIpJQe4aP54Nb!Pg+cAuzsWlbo&AMn7K{8Ix4{RiB1gb_F2!&@Latqv
zmtiWOLw&oAlZmr=tBr3Bv2V)fj<gqSJ65nkAipLW1NI<a_j~k)gE)aZuw>$?;5TDc
zR?uH@Cus!>AZ(yNy05%xftO-o-RWA)f96<Gw|XD;_ENL(zSGh>)T-}HR?QIwE91-V
zJBxT+7~DB{^!*(-H*06gFDyJC;&`7?Ya-k3C04hWsESzH#=0o&XqXY{Ys)iIpQ=sS
zQ+r#LEpU_p$7bu~OX%F4bktFd)1f%#8TO~OBORZ1XTx9M6R(;j_`Y)Dl5W{zZ<g;o
z*3gAHu^2ugu&qOLtz*twl77AkM1PcwWiHi0X#p^Cy?LOjcBV`XPvXUSDe*s<_j5zG
zlDSugW$a&kX$tvZA=lL7k!QI7Sw^a>e!p|7wtp;AY9tEr$xgta{-vgco>5(A{fF~>
z#i`F@D_^-hC}niWSTqi<ADM=Nm?Sdy6fMb_EsP{=5UibPd}vzT&4!Wt@f^LBKE&x}
zzm_j-c88imhbsVDF7gW}GdRai5agnqcQx^t6x*CD&bgM<bw55^y8@}Pu8;WOe5}RY
z?8MUdV-nKWAHT}Fve!l2sL=J4scz9}=ux?aGh&}qUYcE$_L~^)q?^|;Cw@X3e5ZpP
z!h9-jG;cD9+;OQaGPNg-y!L8qf>L~!>yy-TN9A%-+<#6}9gmqo$%B2*Bmt-3$dFs3
zc|cWiZ(pcGVcqV}>XwBs7iz@^#)<jvK}<ERQT&3&J0JRpS8Xy<GsIzj-cvU@P;YWz
zabTE|<PnkEK4KrSrDq)9N^X~w{WN-SQMksWu(sWE!_vrdczNpHa9@2!3rQ#s<>uG;
z<^QSf%j2Q!-v37`Nl1}|rczNtWf!KBgb;-+nMx%lN%kza2xXfmlA?@~Y%$q)L$++m
z9@%Ed5;B9vF!$Wg@6c0E&+=Kmzt89QeZ78v^ct_zxzBy>bFS+;*SVJWMc@jj>^p86
z958e@Y>z^sjl)f8h4FOJxm#mimuYzVk**RoqI+7chDpnntn9+VPW1+6$K!<l>Fh&}
z#i;peZ!V^cmIE1pA@&RBdg4{4&*ns)S+kLALp^fAGQuhUkW;uVAx9kkg#hrOwvOgA
z4|YP6`LdQ?D%9-k<FASiN*@&JKDteWdWOfHm_3BwAPbwWGfp?kDmAMQom%7B{z<Q{
zmfY6g6{8TX`$1J6Sdn*EjbtX7$9{T~XcaT^FzUjt%?(;^mlO19-lnH})i-H~PFG{N
zKfX<oFRe+p=FdF%#mqQE%)|&ay#7S(4IH=)`sI#C=M7{wuCK(ssufY+mT4T`|Au}p
zSgc@hSDVK+9`$*#P^Vz(Q!Pqo%Ai5dA+q}Im*yWWE#12;gY*JzL$16VY6_|Qg+~K5
z$!Vl4FbT45F)Q7(YYEw{42$Zx^{rlFUPZYX38MW8N$>XU4wR2=+;K#P=eg$46LOI&
z%jS)xz)6Ro1@FDwiVbErixt!Die~B(cV!ffcLK0d^u}x*A;I7eldhKq*Bb9752vQh
z^vFq6SHD|pbcZNd|HP$exa285%x6`<9hRD;zT3R7F2g&Vo5$2oc;bXq!o5(VF9+`4
z6H*d-J4X!n5~6WcI|3_JkwFk_kvt~*S@FiWwiE7VMklSYo_B4q&M<o@eX6sxn0}AJ
z9E7?7NN(bMU<upHjAv=?Wqos{7UmI$Le5&>wcfoG<GJ(6diRNUxKY9yM!4`ma6cDQ
zo?=<IsrX8TiH8Nc#1OVaEp|;WNN?Qe`*vK1Q~7j&jeE63b;gw()3C@{N7tevn`ZI_
z4Ta`eRTn#b{!HWj@craz<z4#wZ+g|~Dceo$5_&PUGcE{JF&0E`CfV=`jTcGbtBHc{
zWt7E!vti~=qvM^3*+Ss^cPH2*+*g$N4ABc26}ArRS{c(de3du2j!oaJ&+@&Y6QNu&
z6wI<@9AGNjk~XSdb_8K(Q+?LQJLO`v<=ia{uCA5a=sUx~6IPhN_m^J2@UQhSI8*&}
z;X`E%*@L|d|C;Di4A~PU1#Q;2;u``FcmHy|>Tte9!kFYjwjc7??D!U?Yf1N}jY!2?
zqQtng>-7^_`R-gu`eKw5)fRiJ+R3N6mY~(URS+HOagu-g%BM=Xn{v)fd+1o!&nF{-
zSDr_;6~O~knW<g01PUg2O75I^ZU64rQ)T;hXv_0$d766mQ!MI6Qo3u;M-Y!Lo#bX$
zlpmhE`}Muuh0*#YOw0X}M{R_k9%P%jea)r(E2Yen%7J%52U&?{cF8>!3o^`VI68B5
zm*&1ied9phb+@__-0}1&Mmj}ilO;}jNK{v=tSGP_+$FP&uU&j}IL=ZtVn2TtQ8+UO
z>8!nw9Tjuh-Qe<9EA2fg$E{k<7~#c2BOPxz-ZawRQ=ObM{GuI--9tV&ul>f^C<YQN
zYL6Ums4uiMCn?GmE~Gc`=r-#jf;LlJxx!3qO5o0I+nH*$?+i|QJ?SvGi_OuhH3*24
zD0%OtO_>(C8q*X$p#JU)IUz=>Ug)M;yC3fjoOA=djggsjxWxiKOxt(hK;5w?dlv`S
zoo8!jE3d0Lh`U3p4gZS2yExgCSDIpFxA@|7%C3$!!H0(vxC)D&@EpW_NYKg0Oj~co
zO6GeXN*uA?$HUV<B@a=FGngBg!7LwseANJd8Bf2ZT^{{pKOfFgcU^>BmhQft3TM`@
zKJv~RM+IeE*@2tjBGQA|Af-B7z*NuO>v1>Hm?7fp0Z-895w4`P-m|a)Lze$^gNWXs
z*$WBIp0nC0Zu}|E(SFiKP=?R7&W7pWbv%5(vEZ4(jf90ufu!a-n}XoSmGuBEbhEOQ
ze9;4NU8B#cH70Oqu`X9rjON?73lAi8IWS$&&#_dU3cP?%-2ey(#4Nh_k&-?m=b^zU
z(u^EZNBX^yZcy?grvC2?o&Ty0vBeC6cy&)Yu*L&at#29P*GVx33<<Y>R?c^`Er1f3
z`0r}+x5O(UzN@zc-$-4^_4I5Q7o)8TXiCpbpXqtq_)D)>qfR#eN?%vsBNyIgBuwR%
z$uQM3J*>&uWY)zuUzpgEOCeLI?09T0rdBPaenw7&2?iR;KFK6*td$F3v;QFUwc1&0
zeXAi(6S3hwx%R=6wrq#FyqK}MQs%r`yKUL(Xg%Dg{1y|6g)_~=zft&N*u|OHlk93I
zKN4)t6?+=r1$W^!72sd5xMp5ai}V*cyfmw)RVk{QqG)BkdN$T=`hH7|pno~LI!Dee
zx2E0I?_5LUN=yjm*!oZ?8w<k#A`QY=#1&tr$!N8D?Ji31jETgKm+kW`J=m;YsJnR^
z-<vqI`^LI*9>zjOiLY;V%UhcT)*7~C5O-!%7pSG9K|PZLJ2dE(X{w%g`v`K{^yj7x
zH7)3CPF9M+dLhNGEyY~|XfxOB<AiRSKFt*=!X=zT_douU)j;-^tu3;OT@@5Cpx04i
znrt?pL#y50u;KjKj<bZm_}<Bk0%g$~lJ^+ZX?p4Irz;MwnQOCgNRWEoV82d#`$OeR
zJmIDzZ-w=Rncbp#Hx3<F@jNBSp)}kYC-zt#hebFRe0CX@Cu{4*Ot~%mih5eQ9_0SN
zbNf+C#OFNH4b3<s%D`0hiqJ|jNc$5u4!wjInLiC<QZd_Uctq0~nixesip^CboGKW~
zi=}#vlMXGIxp8jDpaTY*P$5nlw*EtN)S}1lU~&Qs4WOx?1$NvAKCOfw2H$B@GN@>J
z-UeA~$kc&8kiNy$p<v*7_XB^|A5&im{M(1$ljg{)po`HOiW{I39Ao0|{})S}6=&8i
zyk8}GZd1*hqjb80!k5Zb&+|`wz@PNpYqpR4=o2}hIqf*Nwx(|I^(i~~-Fe%+6*^DU
z%crLu?>qA*(SRKMONG$6GD}Zyh0xQ<&kaMea2Kw9xeH~dlSX?!A}krkX$zg4>v^s=
zYECO=7mb7WCVYWaR+dhO7^Ph`;R#K@aIwDc%*X8<pAYEk?S8jw`?bjq{ezoUqK0mN
zd`)>}s2gQot*r2+``lct@~Jel?yUTka%+z)h8k|d+c+Q@_4TUjxbwye(7tK>MxRVx
z@6o>YR#-R3!}@-@)Rq(aW4&(@6Vy{3fAOw1a6<^Z(T>Rdtxj3kerfL;Hzl5@)^`fZ
zmexBl-1Lgro7$YaUFQaDg{@}=wlH*0n5-*O|K*kP%Cpt?e?^6N2JjE<j(S+Jdw3yk
z_`vwX*Z7Fe4%x12du11mas!G}O!D(DU+`Op^TX_Y7~I@ln}yDa?0XE1K6gQ?=p082
z_-nNc0-UwSoS{W_(8gdF{1vs)oZqCs)w^3Hxf#R}XlVgAt~wsXULAmFa?l&G1dwcl
z294#LNsO5H&+)d>lgfrx6DP7smvJG74h4qVpWes0-Eiz6565fba4o`hBLvV!8r|2}
z*ciLHAC<Zv^>$2hvGcF^9nbr;tfwHxE;l#~ljQ&$lDtbPgX4=!#SfMm(LXiPegAVw
zJm5)h{a+Tu-vgZf?)Uegr_p6J*Pk$5F#inGrA>yhlUjS1v~1g(GhnGyV%t7J`vFuK
zNFLpcxirlb{;jpoCk|3s!c|?CA3l6gg)tB+e#@*Z)AJ40#SKRV9>a7HA}hg4#7ttp
zxpYuIz#;#a46ICDB4Z(vH3U!mD_&md{4W4^zb}ZupP?;Gzoz{a0t4lp4NNw~%{0YH
zK+e|J{l5XY5F{7wfbTiG&OMT@3wAdD2=GS%piH&*Y~Q1f|8IV=P2w=WB5?{RDb|>~
z&@uv0A0$Vjo@y>-g6h9b6!bR?wC4YA!s+*9y1)CCoMopsD6vvXoW7^@b&YT=B@~G3
z4H5n+7A6Va5T)QAMAxfjarX!T;rwDZDJdAah#8DR&m8cnTT0-C7M%h~Nw-+4h|3Q)
zgT=tora|>O7+V9T;M7tq9JV-$0VKgHpjv%94}K#eUkr#0`KzrZu?zO9LuiN#?DEfu
zX>5hczfz>W|No!iek2z={wh{{)%(EA&0jWeK<cn``7sWFTl?@UOVxCi4-ioSu=~Z*
z0jp#ZD*^18b3Spr|38&2(BQKtgpa!4@qS2&sfaCTvmq=MVf|*W^~Fg4w=sbJA&p}n
zq4R9ur;6dwGCE${B3#bO#te^tr=5QiXs--b?#w!O|8MN10odt@JnN9@>_)J1DMMHm
za3D|G18sJ0lpE6T_@kz<L>Xs*P46^Q2iWv}(+OC;#5WkmUZ4esMftRr^`rkFUr3*J
zU{+uz<Hwd0JTpBL&^?zZ1|^<&b42B@#=DlFsmtIU9E@kwY<eOM@`EMq$=Z`S+xZ`k
zds^>|-pCQGaDKDW$}iAi)U;KcVdRkPNrR64`$wL}=2CJjit7>?aXz*&<b#uks)v&5
zR<@SD`06RCsf}>-J_blxjfRg{JK<`dYvUN|X(Had`b|}gfuD6`<JG5^+6d0aBpe<e
zs}5S}`bEu79xPM5mycq@^&Z|kVpp6)i^pGOrd$iyRRW`K-0*gvsP@Lf8e4akmiht8
ze?VH0{RBdOcTziuUx{!M@SjH!63u>k<yCQ5z+&ipPK0*4DyLnGLm&U*rMG}=qnj5S
ztx>aa1@8{Z-Uc?;r%S2m>ONdxP)h=QD+eFoWgrv84aVC8&0H~}X#^zDE_NYYK%Cb%
zw@=oNi;qY&`b79#B<+L9v!qS4AnN(Y(`DIhBzrWU?EqE(BPL|N$LGE`QN>>>E3Lw=
zyJWxf%GYlOzbfx2DQUPZ+gO&qMX6pjBj>^P=_CF6J)T*v18$dYc|anU+!y611~b<>
zCTz9skrzm~GCh4%v3o27#=o3JzaTtHIIyU_5DX8tLxXw9-t59|UjLFku8%kx!$-!?
zFfaIG5`oO-t)RKF)|3I^R9-mIYsE)9)b&9I=0T5u1P@sA-Dd0z3&<BhgJN^B%j3x|
z4NYt!FnoAJNMo9y6!ofREf~X5JutU}VFNHcMw38g1N=Pz-3c5|<z(c-uP8pJK+Gtx
z8J3G9TH^}VbCI+BS1{U`1K1~9Ab8V2wW-robVWaZuBDAvwBkw5xrHP0(?H9HriRjd
zx_ne=n<AkXSMxS4?z&@oPwh@*eoXW3H!pP9Hcylj6&0wX>J2xtYbfKp)|llt2^Q-n
zd}-F*LlfTKn0cy#yth!_E$dT6w_=B@R=dzo`+gE>13KA_+A4?Jq+E2B3~C(9qb@RF
zi*V7n-`(T>l9=9W-lTG@;#h=C-^$VFi(7^^B0T1docXP0jC0g`XHnV?{06>j#4-Ak
z<m=w0Elk;E5?+3VDTOrvi?q?M)Yp9WQ0Ipw(bfYaHL6;UBVI{QWN4n&=}sh?Ky4L%
zap%?*fS?jb8HUc%mwd>}t8#p4fdrN+z3`p$(h^6sd3_-&&I1v!(FCzosbykzMSWoj
zUfZc#q&~Hqd<sl)i{knGBK(kz+&PYenCn^(4ZzZB+->Q06t8z|H}yw)p<JJI<{pOW
zo9IRT$i&ZW?jeQ>($Q_I2dY#{nf@}LngzbR`$%w`FC-o<v$&fOkQka=T3=ExJz;hH
zK~A4pZW)V5Md;zyyuBGbvGd~+g_3H@k&az9&T$`kzL9tYD9JkwCz9xXwFZonL=~1M
zWFGYw^@6R}8{`A6EZj_!nT!MnJT?eOvvCJ(TP}0}L)Fbt)m{on`_M&Rf)upqnw$Ej
zJbhQ9{-?joY6EehbgA+XSUC`kg*;4KNCfiZ&R16MQmujCzywGCyB2`&`qkh43M||P
z`H6LH?!W1s7-A#uM_EKa7GTu=6D+|tB4d{+97MVVd``|7mNHN~)1d<pRfo91vvksa
zS0i-(sz#(Z0l6*7N+f;PFMYn4lF_h$E@EWH)cxrK3ADJsTp)cw^(K9n*itS!gVsxT
z+wf6u#6p_!(YChxnbM+TD`_+I7uBN-o7Y@E%>w{gQ;<DYcKI=%%5ry2-BGbHs}}Al
z-?X`8R_UV9y`w8uiH(TRunF$QVF>}0HD{_0Y1ZhDiu02MS+cVvf&ICTB8n#bZbqSH
zhQ*Mdx^ynB?3uUcr`j~_(LH?1X0J~xF+VKwl=-*j%D|44L%QSXHJKhaG&rn<znE^n
zMYwT@UgJHH?(m_AckRA>8pCho#O4N(;}*Lt_ttATUn4wnlN$)>UzyLaW-3-@jL-Je
zCZB!x-eY7_xJA?C`kE??-Ya*y`b*NYY##Nx*9D;poAmTu5|t8#5AAh~d_r&$+^W6H
z^+hYr6H@&Yhql?g=#qKXBK1s%yvI2!7t1qZKH=JhlHE!*=Edh|D)=f<o7376xNg<7
z0Ew1C`yR)cQ2K(_@ZRu5GD|}<C%d2|vot%u-CEXMSCxCqxot{PLg(2tjvp)(BHo~i
zPab&LOeIvsOvZF{Jzo3KvUX?W^V)Thiqrfx-8RCGzORaJ!F`fAivk+(RdU-ZIC&X$
z%9jdOre4coTyk_02rtjf+TPsY8@!g@v&!?4&$fzA+~<gpVAsgvsl-=Lzqa&uW~++0
z@mOCychOq?N@Q58uD3_VT$?d&Ko1|I;e>rA7_SJg|J<xxabgyLzni{G7%VH{g#j8K
zV;!cZERNRyR5}(gwtYk=F0dd*s8jJtSo-!Y8H(1qJ`iQKN|aZv#3|2<Vgn_fFTCf2
zl=f+^BPzKhT%JT*%-yGIj{3c_&W*r%AOC#$NY0fvn!PYB&e!#8-S|m^Rox{MTRume
zcqbf?87*<RSqxoYq(qLXeRripKG}L!<38O#qE=|<wF+@OQhFr4$1YtZYeMjT_4TqV
z<K4r2naxMnTW^c&&s}_;u2x7Q7QmS;fiS77-^uanmNR+vP3g7#vD(f!)18W{>wH95
zwv|U)dW0=;hc4ac(ktrAtLpVCOCrffr*zj|cFa4Je0}DimDER%#oNXc*-@n)1Tvzv
zF~<BRu@<f)lEZsuPLN}#`1ZVc%b!7;@PA7Li3Wo~*clU5Aj;3<AeIC%DD4ZHvAqk9
z!fyqFZp#4336&(ndZ1VbR&X4|a)|dbKuFrI<AR;o#bfv_EMN<`Y!Hae1p$LW^!gBr
zsh=};%aP}dSnoTx?nc_D)v1!}Coc~NSQRpJ7woAMgOloVpsu1v##9s0zvO^g+vj{g
zthAbf)Xct}zX-kUjlW<V&i0N&etIBZ5EKIxr{e(A-$mZ%sk6~co{=$AXwiWtwRdrw
z4n;3K5SZPs-<Io69}-etaH=#{NT>Ki``lW4s=cau-?l30=Jgc>aXuY5&@3h-59{jZ
z?Usq*3wDgiWepEG_jMJgnVNKnU-^=OpDb!0Zx6~Y?l_d2pf_NX(Q_ykD=^5okThmO
zWyqfC%1ythdv`d3GO{|bUr9A`WV^|!k5!K<ooi3FQ1Rtk973F@j!v7NGw**_eNj?A
zH~&%Arf8h&uGg|}Mmf@L&;h2^r(Hhfb<5^V{o;>j@cQIV_@G#+WvX5v3^Y85>=4qw
zyG2fFpLblderDW>!F;1CvS~wk-Oj~0Tze(unNA6AucMtp$>mh<>4{G>%8r}OjN`|g
z3i8q$^RbxO(#76kjP1m)sC8G<pEFD=Xz3#X36=E3PHDN$oU)R*3y&|{zbo9TP;PYS
zVv%RFZ_L&p=6)DM`;=amQB;#aH2Y}TI4jv*Hr~9p_=pLcV2W5|vt0!%9ytVCFdCj&
z5b>(sMEBNO1GfXa=B9S^j0)fFO+b;|xB3T<_=v#QXwqScNdep2WAr#INtwDKw$V*%
z#0pHXG8m_bTemtlhib|jrCZ9csXi0wm6E%8R$E!FC$e=av5Q=Cx@aVvgKvxT9`B2K
zZTWI9h<je7+t>(r*t*%+Pxj%*K$^NZ`YE-U95dDT6ngo-8`M$|y@x_}mo;4{`4U4g
zgE`h1&N30NI2+gi8AoJ#c_hc0H++!JrpZ=Gc{mO2v3D*#baKDhRktoa^~*Tl$sPB)
zoJ7+iJlMR`CTEEYyJwndAh5JG-rY<Qe(*S&aTOYuRog;}AcFimI5D3N6zj~I*@a-_
zk*Zh<^hS%?pheqNLRz1b4sb#Bd5XdlZ{@YUicS$ueHC%=ZNR}b>bXnhG8~{!QUf`H
ztZ-98qiGf4+Ok?v3~rZr`ibwiODAx<>?Az`khBAEC^k!r6}E(|-IiDi>Hl6R^?NY&
z|K!(n7Mzr;Kv+U7h!OwcTCgL<U>OoxaDNi0R<r}WD7_EmV~PB)RV%_=YhF-s5CKwU
zxm?lLKk6C(xLT1LklSehL2-043TR}mKqE_1!Yw)zM`RIBuyxx>-QvHM?6}c2H~L51
z$2$<!7`>ovGbIIFN?(^UxpDJ1No#=AOGVE_H1}8_)f2w~xc(K0cz%dp!I(&7aM6nx
z=?Qi%y%rvkADV3)w=BFNhw^PY8h_c<mq&Y4y@SCErr7nTaAp>OQS`gp+hYz@9QV@O
z{mj9^<$O%Q?ZUvDZ}#k%xzI0c%bkDS$&cHMxcTDVwsMJ<$dCu*X>nW4H;yTSoAT_=
zP^L?X_Ac0XcZZ0<S=D#WnXgCh*fz}+%S&cx35mN%6ui?;N+^2?-31kwWVk;2@LMQl
z$ZWB1i{MURn|*8M0qz4nJG`{1#44hnY1u|n+q8Pis`8TTA~Q1+%HhOc1ki4{DUm09
zF|*JnVVAD!NPWGO&&O@~5*Ayn=-r_%!j4^`E*YMcVd)Bm9;|1dSfNke9CIJQM~Cb8
zKdzXFVHA0EUi{oFl2%YJn_}$QY7%9-)x83HqWDlPv-SE^pHHGe<)r^Aop59QJD)bC
zROEn=LcdfcorF*38J>F}S5EUz=-31nouj8as7@j?h6{pB3hWgq@0<hjANn0_ts%WB
zT$`}3T(pl0{N6!6{9U<(RTCk}UdL#PmEMM5h0`Xu&Pjz$l{84KyI)`=aD$oUF7E1S
z(jhQ;xoo%NYHV~Rn{WDLuenc)WK(y(P2;E4iH!?HZfDOIO*EhNH{MAKSqKFuG*1b8
z;iDrI4Xr4KMka=q`H@*g=7+W#Y)YZkIVW33TGC{#UTI!>>SZ1rfl)diXI3ua7}tmU
z8ab%=1|#GJqWJvwf_uyRM_&!L*qPwyL4`%e8yjQ%RYP01$_9w5HTigSO*F$BWs#Gf
z<)p9mqu@kMB(`J?2xgbeqBV!M>v?iai8Tnxc<3DJzgaY6GGp^e#GAbJ$o=8Aa5g<p
zx5-a#=ztne^R>;LNKoY>9^L>^+UbpXWdd#KBSSpME<eq!B<Yr}iE0}(V`os!j7N(z
z78a>Q<QH!bPNeJ119%^Em(Fc%36}zUgsU2F9*iuyYJpnwVf~5~1`P#6O2jzGPS13x
zIxdXNS++JkJQ2r}uhyUKpjO&cslmSiYQ{x}eY!V)pYCFr89M2;mSsl>6M}a<PcYD@
z#X_F3*N}@Tpe$3<tm5fU62yw5wQrL^Au(Du;#(wx@N5HVz`UU1&X5C(%^6e`t^o6@
zcv0=RI?66Ony>%dD;@DTC9kN*RK@*x@$=$4rS(-Vbp(?bVO|<=4v8uR&0K=2Hj<}D
zfDE{;1>^u`7YLOA-U{JN0L6I@-1|B9Lt)-(fCbB0p<dohDd4*{UJ5W|aveHnp%>iK
zoj#pVux~<|vgUNHXp?u8ria-;@Z)#5+bPi$Yl8?^{TAD?ww6Nmw9JW1KASETnka0B
zB~zNYdS>+OVmfYS;0qbH%xh2u7htsMFiak)+CkLatpefgP{mN1H}u)vvdoX$71)p6
ztyQm#-<Ia7s6zo$tRm!&0pkn5!EN3B>~8R`Oi_YCY;V^WLXD8iU0B|Mb*IO-y{wDx
zh+XK%_Wk|o6{pq?U#7;rOoJ^7+6Oy!AQeS{ZRY0`7A;mk6i!PHO@8)3t>p5>C~cGv
zt>d=X6@A<+4xMn55GV;geH$wyK`(6(Vk2%w(@ZpG=7&a-fPrr1P8M-nn6cN!!6UEF
zL)B)yL$EP(6=-J?hJc5F=W76?_o3^pb`}5Js23&)jq973tPz*{4>eb7tPe$5^Vwgl
zU0u2uvI<|GCd1gCKjmn1P0S$(;u)PNsiU;BMqeKO#d*9&^56u*4YN|@9X8s|XL+eH
zpd>k!JA$X1>?v=%yN%mlZ-3%n-psBnz*=dj>HlCM30Z5(lyfhpKW2CiPAR@oaE*>O
zS5LnF<soHUszYqXk7|+9e8GzR3RWp5RL|ckBTxXwUO{P|Uk^pnUFu~R9J#w@>$Ph~
zSVQdo{<o{0yKAp4@|rsjOvHZ1wO5UFObjLuieJ}}zOG=-oKkf2b~S17YR2$Bc>gRc
z9UrhTA+ZOSR1jlg(&p`AvyQ+az2!|!je~$)tF5cze#`U-Gcyh0&535lH-8CSd+xaF
zFSll~4TA6{DllL6Edy_VS_a<!tNGy3Ev;T)CLk?rhAu(OEpq^R8yE@3v5hwHhFRn|
zZ#NpLDP;$_OTgl+{GYlZWMF<V!~tL)f3qPk+m%U!K*+k$JC~1r5WG+v&)b0ie~{Ys
zciM>QpIi=e2x<Qx&wO0@uc&DkOyy$240<z2HZs*h%Alz%i~)$QAk1uGML@rskB#9P
zV0PMD3+qFd2tP~;QGfDTfi7n-pLUUQ@>wCB%e4sm>S17^@k@s4buqRMOu_G{&e%UE
z6ivv2>X8tYL<tI$$sOQxM{9J-hm5YKd?Aa}DZCeO3S<vJ`3S%uMzlh<9e4y*ZDy=}
zr6}oj^!*VI5_}SrVM(3P&Sjn?j8TEli@h^D?f6sU29v$IP2vkrH(Orzk}IUnKG@n7
zV*4?-&3r2m9_!etXP_o|YBP%oY)c_808j*q0hsq#S0!ftivc2CI>6lBg?IzwQrRkW
zw*qN)nwLeDBrp|$DyN<RoUX)~L!|s!gGJ61APXDdW}wLYX$U;yJg*;VPR~mggb@!f
zAxQvtN0vP_+K*-q8nPmBU?dRAH?RUf*((k&;*k}kx0w8F%s&~jRIEI1MT^g7ccV59
z5JGAH;wpW6KxtyZ4ke8P)}av|7Y&BaL3BML%&Y`CX=^dx-)8dQ#)CcTcBc$|v}N9o
zR*kqfp7b~%kR)H4xVwYdou7i&Ih#2gX%0dGe*01hqz>5s3GUGJ?Q<NQc+G3jCE$i^
zF2T%~C;YxJDC-uBAB*$TBZoK7J-fTPt~L>T;{WhDliI(T{;AbU6Z!-exEPn<&f0Ej
zydg!d8^0sa{J~3;YLzY(>RJRA|N4s#X`Ae<v&3gkZmL4F6g>BAiTk1UOBu@5sI$w?
zC!oFlT$5sYom~uXSdOIkY0aY6T<?Qp8&~x`NKxH*KI+gpZH{$ol+=z8hhq^g{1&j7
ztK3-61kUUwh7wWi`8#~o`vGBFL2n^CI0iF`hkv^(7{j$th0JRC>7S*G(tj#l6k&c5
z8WXpK4zuLX?3&BQHUWwAbK854k!E<qJo#Y?Es{RRa3Vhyo+S0$${nUv(C?`hWJz6d
zDtztuCa!}CY@0l3jFbs778W8PidaDY)FaphT|xzx$=L^uuWAATCzKJh)q<ji#zfCV
zd(oT@`mB0o5M$_I-Rqgk^9vrArEMBBrY{v|+(SRXP(PD`<H`g8Yd-#lU7m{Uy~O~R
zfz>v^mDDx%)k9|L2-9>7n>}14?Y}!czMD~5-5^6(H81Vzo}8kDT#ccV7Z>;(uu(o9
zqW1-b_LVs-#zsS)z^3o(Nuq7ao?ZkS=SxCPFs2bvQ`+gSHzbBEW(m981zT-^T?=jy
zjZ2W)%+r8dr?jZkSZ}mOKI1VNyTRS>lXWilsz$?x6wC7~8a7Z9V|Pjn+K6-|8X_-0
z4fHd?vmCJID<<+3{3Qb{D;On++yM!wc>!VI4;Z&*3;<gg!)LxyiO9O<C4lsn&k`UH
z`sVbsH&{7#WJf3X)dznH0$}QYXFd3#ltQ=pG7!_j25j~?b#RA*7+gRE<KLnG^hKCI
zPGw^57D*9uaA52qPVrH(^s&w|AqM-KGF}Ic@uJh`G}6vl+?!5%G#++S$)n@&#tV+w
zzo^W{VA^|&nFA1v0_fGb1gMP!1Epi;7~!99TqiHgw~^ijA`R^DJy4ATVN33@0_qeY
zFy`}{cU-!X?mG&ZXVz|Bvl^bXK_3vKRr|#Kf4Zb46GIP6)0!wGc7}mY=S%7vMm_Rb
zINiKosegP!e{Z7{NMC=O-Q>rfm3b!oXsX3Z^ylm6Skoi~1yz|hlg0-S;FMVqqd5GF
z&70y4P|3(7W5W7(Q-LmeSEj_wI&q9{-j_>{7qi#WlWmYY{_fMz88gK-ULQUrdxw^P
zVbi<i^7n6>4f+EskT#G8pAYcn@&=&u1*@ic>;`O*)|Rhz=^3i`RNu~r+ThM#@}!W`
zRS+{^rl~{}GHC-yO&Vc1cl>f8k085Y`!mm6`*R@sznrpFp)os#uX4!4<KmY><J|0X
z15RInT?7jU0Ac?7@gD#kL{oK03tT>RnC~8imy2}#{omsfmJfe4qx%n6{_Eea{2Yja
z#gapz6dVytHRWMlAW(6==>(WxWAJ42)B9eB-#>k=T;9G-o^{U>)@xI56Bop~|B7mm
zfzlxn;0moEe4HM{v+%cMkmyQmXGbmUrH#<yd1jGK*JH<Bz?n;0oP*vpwRuaErn>-M
zK*8EsY>y2+o;p8SOHP-zH=i&#hpXzc(SLu<LAv^dY1ekH%!t$X`44P6c!IH0;!WVi
z)WhocKssFP%SC{pL_|u_)NJPgT_W=<fMp~;_7O!oA>P<yt<HU?DYduZBNXktYSm6R
zP6yGx%6u+<vz^jsclhb9XWJQp>+IIaTT>yzH-1<YcuM#6DYi}^Ea)o`F29d{gZ~r<
z1k%?P_2$5NM#8dgVaQj;%c8OK6QI73<tlzQU;+N=d+-diB8S8-*5a?Ii7qxQ0Yg1C
zz>pZN#rtCNP4K`_HyQwoI}I|^6?$eyjZ1y?Ze4n)EEJ`opSmI|)GJ7J<|_MF!GE+^
zq%A-oh7$6zKzN__`M4$UF%5qv07jz&Wu(cOdD)ryx3536a1{0#_ISLu)n%tsvmMJg
z9-xQ)qX7%nO0biD{@kAzGh;<C3dsAPK3D7aMVjy>9%4)oKaW;faZocNUp0~M4@v2G
zT0FH{GvxWm+OK<*sYZGvw8<lH%H;CJ)Cd8i59J*1LueSi<14+B`QGkOC#2uJg$*d%
zGUj9(Vdjp}%!$-2E+n<}NJ;NfFcnm09%~u;Qc`&6!_DrI5-0MNlvnN=L-@NT?A{c~
zUs0Pr*e*)N7210yFW4uKhsm`awU^#1uNmnc(i9dP^sz*=d=Jqeo+rDah;#=LVc2zP
zQjtiWpo9;Bo9HGAxK$;>kFxDG%Y`m#&+jHhPBWzX=57&Sfqc4e0p2ZIG1Nim=6=Wf
z*!FY?yo_r044g4W3>q-6*$>R}v&{!BT~{;+Sr}H>Ee_<V)WqTq;)n*q>5ieeF~y({
z9iVzpYd`7bBI@s=k^bE_$z@NczcVX$Db^W;_W_6sbK*!evX-mu4_BBV%%C4>CK}^M
zpl<|J+R7D!5O56Ok)~N!4X~?kv-R0W^(jndI8?>R=H#hF-FYb-Vsh!yuFW?&O)kvs
zF0Dk+oJ>Pdj@X?6^acON66}k~8K#ulH?dIg7QK}4nITQuYW$v}7MC<lv|Ve)fv|dB
zUSa&h6R~@CY*_Pd4RYQB;o@Q%-Ug13Aqp1Zx%Bc^R3({YXRs)P2Ek2KCvnDmj;|We
zg=x>t!VD*e+wVw7_qPa1^;>d}$X`6W{n{^_J9!S;H9>nxRE9%OBob0vMS?}@5IN|t
z!x(EWcQg3+y8U6a1cZx|X@p)N{xqx8SOKI9L)9P#VRLJzv{JpS%4jyBau@--9*?$B
zzi#`HOiB92ORxCeEA2SQJ5V8(hoge4NyP<>-H~5W^54D}*l;jp>OihIOAvn#Vkk$#
zSJ~-92<HW0O3=b1oIwD-I<{sLK=mUZXoHVD6BU)Z(yCtTc)f<QCqH^a(d(+S<?I=_
z>Ai?C^rvxvs#EFHPMEV&-vzjT#DEsh`#ClEKkJA5KAsK=Ne%GOCo&Z^Y0))qJ+)OI
z=0Nm^nOP&v-Qnmx!la7awn3|nGuZ=gl@Eq`NX}@57L#VpK-ftTD+M!F;swr#ipB>)
z2p8{9E4vE?84`GX1R0*><B@9kAm`X~d;32-Io-70H`Awcc<ZGsWt;o2Q4N{fP#o+6
zrPz8RtS(Fk%le!~0~#O4K`4wJ;o@c**&w>#Nr8=JY&z2bwEiSuNlx<u`e$b9=z^3H
zSfGlZKZr`W2W^0l(D1bY>R8qI6&8o==n}`JYZ#V3XmIq{^Z83{M6D>0v!rkKaf2oM
zcpooN7=eAf58D_GZy+K^p)3OsQ!9=<Arr^*eh+b5j_XUB1+$Q1C4z7+D{v!Q0`d6f
zkw1hOSujujbbxAt1Jo7hpe!#wFx}Z>fH@hs#cmKrhrfsEmxt}#6{{DMz*R<I{1*M5
zw^QPTid4I4r{cruERYRzgZ4J8JIZ$(eMi}C4D~Fw=l-Ke+7RW6_9!BL@D#^a1Izg;
zP#?mf8d?VmQGAwiaoBk<y(5hEB+mFtl=I`6FZRO~-8&+@jc@O*h`NhusDzfN_AqAn
z`>qWzycDOv-Cgqs6{C=sszMI0J}``G(Ce{hKbyB7xK>=8ov%Rc+rN`@<)x<qft;sK
ztkYMjwl$qe15^<B6BQ7KwEnV<D9HGX=}anS@HHWKJID|IvA^g)aXQ#u!+$^rTt89P
zvLrFaZbQ1!)Z-380N~bPN;}ERsslEl^lhv*w|}sSi~CXj!<w^Xtz-MbW9KitJK-hb
zEWp?eElpwDKb-;-_;FX(gFWK|ti7_Gl_sOU!xlhE#a0)2_xrm%58(<Eo{U~|B|>n6
zM~LJe_Ii+NT--xCBDrAv7dA~m(13m+AXB54WGbe{7n7R$pLPU1_G3gKrBjKLU69RY
zM3&LRG-gC^B@oA559U}2zqhtgP&s3b&nsLon;!lZ73aTV)q>b?asDir=f7lJh*y0R
z!;P#S<!D3h1E79^GuBQwPvu1P)&Iu0dA@9}J5i`|O8&&(e0V&dGLjugW~lqarz2-E
zgW1@bC|*38uF&@@>HwGunF{?7nGq#o6oaZT&moTRTnB#l1e3C^63q-t`Tl3gRyvmp
zN}|eUi?`~c%~7ly->&&K^y7f1(tf+<>vh0&;F^yaKJfDa-1A>Jfc*fsa}$4xX6{%H
zOEOp}g?@x3q2LRm5-&veTxHvQ{pHli6AS*>F;w@_3~u4Efx|o)*M!7@>Rl-QvGJT|
znTNS{DLgG!yV|QJ!IpD6E9bJ79m<~n)lFLoRQ$RYo%CRoLd?n2`7LF>!a51Nquu3J
z*Tr)fDe9OnVakVsZwCwaR(ClFH(LWp9}r`zU^=@85Ns-%c3{a!cn##JfDltXXViB)
z<Z`?akWS~AKwN()#(k?W0-{R|7<+Bt7nO8CqnWpWLVnUjjt!;~`x0MZi**mLsl4%W
zDk<`|-oWA2^(zKj%EIPQgE#l8xWcEeqLReT?NJn8(WS2ui%|r#v*({o7c%Ve71op#
ziP1qxu*(^xUG(LC8Oc92=McZTHMuUapPMb~DqDL{q7+9W%BKdZkOr4*8KxMR)pw<-
z9=VJejP^%%la}-=^KbeUE`G(&=mr1Nzn5LRXoHW|z#6=M3Ay9Tk~#RI&n~aC)aGj5
zk23UZhAl-h)7l};OM_;0-)$R4zUb-2+4@)lxpGL2ecL;>c;4EM@gw6{Ge$JBriFI1
z(kxC*6qe1feU@$Sx#{IE_u8`gub&x89`=lR2Fy9G3_#<DN#Ix+96^IK`=M1V*2n;C
zk_Th((Z__bn^5tqirNuPV5;KrW>7FA9M3`5&)_x@9M2m)Moemk!I3fK`zz|v)({{-
zVj*O2BqGXAD~B3+!Ld@&1Qd6H!|44jSOcgszDx;#3I1r-f>n5jAQqb(@N<0xW|%W<
zv)lr6qp-@xA-A7ep~`1viqQLwKb|{`KG1^I2VOF*nnBDk*V2qemS(i1&OI+v;9c+=
zBQccof!Q>feZ*XHoXBvtscBwZF*fk6H3dU%84$*daV0>5ly9H%IGOkoLvBScw}SDO
zo54XJr0rz~a%H5$z_*2fZ}U~Z`n>ERhN^84rh%L<Qbc&9fHfu+c*ZP-PJu=EsiW=l
zvIn3e5vT~~doaIs1e~z)3FAFxgew8OrT^Q@WA~U&o3>)8<G|eo0u@)c0A19<0l?^;
zB2abEp~YP)$3x3TP5s$HWN$q06I)&lEI17-lhqIKE(DH2429tIs}NNi3Xbl1b>K6G
z8a}SDZ=kFw($MUfWbc&aL-k&7O_cYiCDt1O36tR2%xrMRFR`RN2r^*Gcxg}_CdX;h
z^ea^9SZ{|^J0oBn%?o%bCQ|>|1$RWPf<3;+A};n3TMY8>_j<a^LEpBuFn=Ze5g5{S
znJ?v;g;)@#%b!j6eLsh0NE=LXkVPFIDqVlxDm7vWH`^-)<utuhbIsGRjz8}SF7KiS
z#X24WbdD+vL(H@a2l1a%^qclNL~-D59MR>fOn$Lp^S$~Ylc5_T8(#QNwY~=8_}zeT
zHgFpLM77vNg|Zj1$eLMNh3ThOIU(h-qDB#)OJ^YJ=s-ATj=cq<y4Wu*C`ZGbX&YGH
zQIKf`_5~OKctATNb!lI2GX{U7?`3L==Y4dQm_#DK$BJOamdSp(IRO#npj9HiG2b6W
zEd&NHx*?*RwBnyymj(=E^kPOhe~>2_5HJje{2pA>g5ZiJ@9r|y4=|ifYX$&${$CR<
z2N(^4MJ$$hh(H~e34`WVwUDTe%QVE%#BbVKi*W9tB}0vZ;4rGFUgAlhI{4{&*`a5D
z?kQ*58ia7l)8au-!1CXEo`41;30uCsL-;p7y}Xz8c~J`y#n1?dFQ9Jjsijrih;VAq
zqHm3!Xo>FqOg#?`wX@BJZ6CvpV;C+RHQRqh?O#%0SGO3Kav+>CG<~K?Ai(A1>)Top
zJ3sG`{Ng$Pm!rge-UW-nC}sn~=?20=47!Dpnx}yBmz-^KU9(zD1^77CZIa16j5PYJ
zY@L?+Dy8Faw_o7>T)Xw-lh&p=8++HQa2E&O+H_;}4cwyTe<+a^k$q4_Iw9MjhPMZV
zo^N#cDihoT1()D52HZnV#p=^UTxsb|eU-gBV%Tj_dNT_Aku_}M={~<09!3+2u&}Tj
z6|Eh5JZ>i=cc)$P(L54rwChtIhgzvxwuv<mDo#GD64a;pyv}+z{la^9#{x%uHAx>H
zp6x7Kc<!stfuUZ9%AbCQ$lDkhD@MhT4QpNxV0&%wb~nJY&Sfik7s9>H0Mkw&204KB
z1n*?81q(b1a~@;MoepkQbahy-8M$zH6*zbOoz+)PpJtWP&Z5?UUF2Npj#*&GAVtjn
zU=%|f+1|nclKe<>FoAIjY<<n1olCPrRu-Md4G5fC#IM)9zfckUy>sgyI|H-!T`(Ky
zy%Qw~;RoZ;f|)&F*sTT(Ma4ngFCQtq!F5qR2Z)t31S|VyjFno-0F4J<4lVL{od(nQ
z`#$}ZpeCmZh7D9zSEhkuXzdz6R@LIL27xNx*azl*`uc%<rq4b!^i_!E+0{RHilYMa
z=YjMh5$<NjhVg)|vc22CZh_6vPga@^01MgouH5kVcj}?3*WJp)CZT+vz3UwVRN%8%
z_;#H4#B{I(`yhb<EEX8n>asl$`3M@|u7LC4u2UI1^d3ivMtFz7xhF7R%FjmCf;FB}
zg%N)&KZy$c=;#AFI{e<T8g#_K8jq=H#Gk+qL=YqhhD>%K4fgW-=65!s>GRcB=b;S~
z@4uj*7NQfqS(+#xN3XqL7c5CvNOu4V$Q>VXv(E&9T$xSo;+B~-9)dy=MXn$$!(Ms=
zg>T0KD#vrkGFdG2b}&oydGHUFQgRUcQ4--MvEoSA9eRjWkdW$S5895lnmBQsNl~O$
zSH!zDVYx39?l0hmvt_;vo`h?6W)3N#y_YChMI08krlOAqh=G)U!55k<`NZ#T+r_He
zR6gwO(X5;X?pCWuV6F|>Xh6c3&+iYa;=7>ch~VSA>*&?qvzjO`o`EG2ekh4w?`3)}
zNqp<JkP$kj06D9AnnV$mxs90<Wq?5f)<N*aGWrt91CqfE>i8F1F<!xuk(4zII)!K8
z>2C!5&`5qdxFJ7z>oz<%%HE>u%jUr|oJ-{A^9S++B)mlMS?fXn)Dz_wC~IagN(UBx
zkW6$r9?;$r>nzb8*ug}q7}yvA3^g7Pj$zaO_EQ|?(@VVM#c5qbqM7*^?U!d1EzUZ$
z`&h-dMI+qr8SD9NEE&nQB4CmWU@`*pxnPeCV2y+yd%Qf>X#-do(C;n6)O7Ie!`p~-
z_^bn<GPP3NcQVrgWX7QmKJgo!y{!Aj!_M1Xri1T7CGw0cjM5rnnM6FV9~div3Zm~C
z9Vmp~IL%>+{KPyQ!0>m@qevfV=b>S6(_T#bKK%az6$52viHzw#$QZXw#sc$S`PmjK
zsYwX8BP#~sL*B>nF`n9_z$Wb_W`pUjwN)x!J<)etDGG%-1-f^Sg$%D~nGU-dAAS(v
O=-&GG;Of|a?fyT)-REZj

literal 0
HcmV?d00001

diff --git a/windows/manage/images/aadjppt.jpg b/windows/manage/images/aadjppt.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..268d5fe662106c73c03629399deea5b7b5631b1d
GIT binary patch
literal 43157
zcmeGEcT^Nh7d{F%f}kKGSwI*hD*{TCAY&qn2q-y-NEXRCw1DI!C~yP`k`;y#iIN5+
ziKs{r5G3b3Ll_1o-NqB%b3E_2zV~<Uy8qpQUi9jzuBu(NYuB@%y$kX%c@j9Gsj8t0
zP*6|+ccCAEJO%Kn_&V4EfVMVp765=F(05D#C3Hst{rvopM}cd=Aqt9v-#<Q-hba#}
z)KpZIhiRy3Xb!F;N9m3pIYN7chK81&mX_`q^r1O=oPqw>@q_z=N)BE>cnkVHc7*20
zL5csf54jm&JVNn^VvLf44>-g~LCHu#ZUbOYUk^hP9SHTuhvE<=)nRI=OSE)QfvOWw
z_bDk4L7hEJMFo`(g1!f+7!Na@zHo(_S=Wk&&y7VgB<bZ5{;TCJta`m@0jYcLp+{-i
z*iUkB3JM8}oH;8kBP(}NUg6qx6;(BL4Nd*qcMJ@Tj7_ZX+t}LKJ2-lHdU^Z!`uT@F
z4v&b8ijGNs`Ya_i?YHOYxq0~og+;}$UcarVtg5c5eOLFswXMCQ^F!CizW#x4gG0mL
zN2aD{X6NP?7MGSWn_JsE*j?P-{()Q+0Ojvu{UzBiaxp@39fIb7isnEribFooMaf8Y
z`1A#8rYpKMR&LCEk|9S}t|q-KZ#l{@rH5v{=iW=pCLlc}h&d4Lr)2+|V4?rFB>PLS
z|Hw509HXRwCXbR4fCGC-?0H-P{$}7c+#Tnc9vG?Ll1uD?7nPie_lqXUhH%bdJ0jl{
z;nQPYCKkr#E~V*u2XM0N$>Lj?lHh^yi{6h??xn90KI&A=uJ6wdg^-3g=N2N#z+{GD
zlF5&5&Mq(O!gBo@*-7Db++vaahi&BN5rFstjy8&dFD@zhk%6$Ft53j|dovc<Rj>pU
z+6A<Xdv=Rvb%UU+0xm8#ct9nbHqeD&>nw&0$X%I161XhE@L<W_%diSKdQXZBsHx0k
z|9mJ-23l-PNeKa+aGYEd8K5QD=RShlBof$+dk8<sz(MsvB$h!k5Ze6_oL>lZgDMZ$
zKqEWq?r_Be!5?Y}Z1?VhvwwWC>;M(~^uvyH)2Y)Ecd-fCDN%vi)rQ%D>*)Y7)&+NN
z?tS8(Jc>J*vvC)vuR~yqSOh<R_T3-@)I(%o$}(Z%ps4Z}GB74hfu{v0E9Jm#4<1FR
zn~h`ucMCpQnHENRXbROXhdSu4KOXwdv(HbA2o2I>INHQ?V_)8q8=M>`1B5du^u7}r
z*q7IV9!x_IL^10z05Qx3C#ISYpP&6XRIy|LT_{IjL+Zh|+<D}omfE3~3}=We6#E2l
zvdX`Rcq%dhM0<cFmVPpD81W6YI72uX<P7Ld<Oc;2%AHB*EypTrXtcSY(dM>{aROT$
zy}<p8Jy642w~!ywp+fi@(BPEd@@D9l7xyjKSTT$n>l8-GqwPLek9TCisz%&&Yu~T{
zY~e-OgCjf)I5C$NOFA5KCaqnEJMbb#%E>`Cv&=VQewjlc_S%4u`a*n$b&7AF$^);<
zuCzl_V~syj*)Q}Qi)Z;-n=GdvVL-zhwoD%k=|BrxidQ1;463=lK4e~Jc9~r<YF2&Z
zcn)3g&529^yeh4$0<ipXfnwR^hV7Ok0n<M3S3n+LJoY*6yHnA`nc9BOZA|>EhG5--
z)DQUcCy`X)RIZXYkBh!bBhk(s59c?LThpG2baKBF<5aWt>JoZSvFV-6B)p2P!f&bv
zC*({pNRw<sh-VjO7Qq&AaV#@Ayza_XdniaNBT00OG(>LUL^#@|SdRgB&djMFn}-=9
z(Qm9^lA$SkK?WkbkVI~FNFkjeg`B_zX2ItdmArn}b!3N$2qo4AHTl+#ln@5#vh0B_
zA1LF;3uGW88`A^TgnEzS6v<)ut`ALO%2QGTc%VcF<y8NhcIz!1dIZ03N}{`PP{RvM
zCsf0$A`+bxv;x%Rpjkd;X*iSieF9&Yc%b4ya65{?<~{|^&o_AC9CsmQ)`ql^>m{TU
zGBYS>v5|rBV8x(JGEis#Q)j=@te$}y{yIhmdO!VK0S7Os5tNfL;QU;JH@GeVl2~y&
zSRc|--s%Ri|1#{29f?jW2x?#SU`<azHOi4-+934c%+C%TG;s-9<!>y}`|;Nq_T(i_
zL3ZUp@y{S2p-To52|o^0+3lcWGN1wkqhL6(hp(UtP9IcoP@@cLvZ}5e5;+kXwBs&h
z;5~|WF^6FYvQVJ|%b(!0Gl2(#UV=FgFVhmf>6WDcY1sTr%OvSrG%Gui1eTr-OP+Ld
zi7UiBWns|%WS4G{Z`1ylxyvMh!;c;WF*F82i;Q}l;ETgd>)_62$19!2h)(aeNksFU
zfI8p=mN@7-jeKjLrBiUMyM5)8yZoK!Y=&luQ%`0h+Jh+qFMN9_4UgJC{4F1GxV`Bm
zCI8D7nolOASZK|gUhE;T=(kHfAkGE@C>58>BN5Mxf)&{}a~MXJMIg(TG%>1A(rtxS
zuT_S`l4YiMwfne6^~wC_<(b6=32<5>E3tA9lGN249JcM=H!K8OGA@*&(03%5Bd<d<
zPdlN1(S{1_T+hA?dzL-S-ik<>Anv)K^YFBIQs6pjqZ<qd{jzN$NkMC5V51L`2X?=P
z3}gp@_)XN*WmwB^UnQW?<&gt-=TPqxacWfzdzc0?fD$9I66b@GVSBq!ag->DB`6iT
zuZHfmNGuct4rn4S6@xwT3qPA9F|J)B1-iih-X7}r=6<&Q`#k_sgXly@*w&0683;Bd
zh>(HD0k@#uaP{CfC#EdN?Y>(b^vwmojha&X+db6JYy$sCBmp-LPNYI&!>4!#;0qmF
zBti|&aQ8XZ2wWH+B@rcXy8pSoMT52@14pos$}7ud|5x$;Cer^W-hZ1t4QGd=b&0!d
zWWX2f7Tno~##Hm;o$@%w0iJL8Au>RvHbbJ-L5q?akf`nUAj`-Jo?6_@j1Hc`5?s1A
zw9Zao<R|HAqlHNgE(ZlJ!@hd4=w3ej^SWhExyMa>b8`bH)VNCwKL^KZ5|$I#GRrwD
zV3(yVb5YeaaJ0752A*~pTus^PAu#RE6LTas*-4jcxYh7(hT?LJJAq0iBZSx3OE;d1
z?UQ7)7&6i_3j!=AL`g+oY`<6yazqlS`h&aW2$-j&JsJGba&RG?3{3E)bz81?l7T>4
zT=vci=>-XnW*CM~9|H#rNg8Be6qXp;0WHdNLS&#x8)j8Y2C|sJ32M|`LKSHloH&#y
z2G(WoHs=xj$v_c2kpPf^s0(C3*K$vo3_J){4vLr|`D#P;b1Jt&%T(#09{S*xJtyJ-
zba$A?gbaAWH$v3*cgVm^5Qd{511GFWxu{JY(l8+qPv1#EXOM8x|EY!;wmF1{3}Yaz
z(jPtequZ1u-cF(lIGar@$L(Rc68EO$h-mviYmmXy%prI6NjMh2KbnTE3=!oa96>|4
zlDHp32D;#QYs}WF9Bk{o3x2Zq&l;St4A2M_5z!)lwhJFZ?t4I1x|snN2HRmJ1IZw^
zb7o=qA$;NS#BNL8pH&R4!ctLVI`~Q5KUzi&q5jWayn|rAnW#7TU~Lvqb5l@lzkUBu
z^QmAj&)Ttp^de4$>a_NW*)zV<dF;Y5qxb{4=l<;Vf8-|8$Pt)FjRwo+-}J6akJe8i
zCQL<*mrtxjyI4PrYMG1GHjQp;&%B+J=<`YWG9_c0GoH~Lcg^Bksgn7tC2xiBn2&@0
zx1BFF&KGfNodWHzVm~FdX)#87-#D+6vYBL_H2vb5_kLq#6SC-Rn$s!?UlxZMiabe;
zJmns&$-d$;UxTzM`ARta=R`;ch5o4##1V8+b0(w_Em_hSww$`BMmPz5(|}m5GuD1{
z(G6`X$E;^|L(liK9C@wt!8nP&1UXz{(Ju{Sa2(oi3M*Jr=It*W7{rpgb*mx<MRH>d
zyOO_hG#MMxKM+#o4YyADa$$zHjHmZj-$zTPUK!8v3`p603ifTL9&$=y-8+oOCn&!a
zc&B7xEA|$H=`)U2kaD4!|N6iVw%K8cpB!2<j3Y5w`f`3;o?bRrHd=E@ZE47COS8Y;
z99O*O{f6h=+IX!CXD+k>FqQ?DkOAIN<P>bHeFeVr{dLyI+Yh!^#)Rs;9Wo`}pH#S6
zrDQ&YQv^plXBQrkfmz>PGO)7GKs;GRgn=y$sLdx6Y~XNs0JMteB~dTnRAk@-F`o<!
zUxocyh74>z>0yToL3>6Ky=)Vja8vV3=b8*;LK0^Ku+VyX<}wBjJN7`kBQ&PzsLd1|
zX7IZ#^u>0K4pNF(Ne1S)YAmsw6{M7<Y_u(sP@vy7fz_^p6UF)$Dfc~dV?==e<$5Is
zpIL|Rc5W3fYw6(di9`%xkrJncgVwNMcSkms2Lf+>k;or9I6fUhe%hoV(HBDfOELSX
z<D^Sqmpi727zvrlmn*vrq$5wsz!?!7I~lNGNA2Hh%3)ZPjS<N?^vA^jN%kI+%n^cV
z!v?Kn;65@7KAC1mlB6XAq~;1Tu;^yk3#(=)<Y__=-Veg?f`O3NLRC)&o`#~xz?*ZB
zpK<EW+(P!IL<xy4NbN8*vK#ay=^%^>i{aD)7SL5;`LEaQ)HFS#F*RxJYIQROS*g(D
zSBe*3$GxzW_O$2JHqK0oB*AgWRyiMLlV!Fq;v2%KcM%IWtLtj&Qf=rYGLDs3x{CtJ
zs(O!#c@I&P45F%N;#NIlyH84Z{^q<P<d>NC(&*e17f<g5niK1xOdk-lZF)*^YqJYI
ziwOQ`1S~?^!FhZ{)ZbXpMZm3F;(fQVKI9P9818Y)MUu|@#<sHen;B2!yPJ(Qu67HS
zN_HwGo=Q^Q_B#8ax0|o>0quEr+VnvTxF$9uacU{IUw1$n8`+&IuiTSwJkr>cUi?-G
z$)ef!p_`LZApFG|Ovcso_Umsf+=9X%zoj?D3*JYJjQHD|z47(CeaGg=mRM%WP>)9$
zW}#DpIZz8dpPj$LUR}ecV9`(8USw*jSl3p5RM0oiFkMHCQR{<o)Sa%2tP3O=GLXb?
z2F-!<5GmTfuXKVF8vCR&a9DPQ3|wz?;7rc6(aWoMHg7atD%sZXXEcddFmkw>tZU#e
z#%|F$yAcY`2KRxhrx{3bCZt5v<T$j2aM5FYh*5^w`>y>?do5@kLgI)H5ri}&j}4X2
zfRoF2hG1d@u7=bm+C#kPP=){D4Ue|NNMVy>L<%(siKLP2&G=Cyp8h)-(A@69Ng0y#
zUQN5;g+{VTsY^TaV0BI>f!Te9)M^0sHA<0=eS_5RwQmNgtGb8`6x0O);LT@$^UMD9
z&;HwAR>2}dP$vmT^5WKTAOkR{`%Q4ju{#R#pl09s_LEwNCiZXb;G-dh)q<LN8hDfp
zAn7KE7c32@COVOO;ug}-@a^o9o?Qxt+=UiqRrq8+>JWV8{Vo}}VK_iRJly*q^`(HM
z8@Akx7bOFDI->)qfFdw$kZ%4zT`Iv(0=aQI#evS4HB@BfC_=Jh*(o5lx^_VL{OA>y
z6AgX!wFbOLW~`epiRKT%ZN^MS-*cwEdx=YIQI@Ufy^A*}fJIhWdw5y7JUO;OneTow
zgkL-)bk>d)fv0hJy8^G&Gj6tKHuv?h2$ecl!eW)7^^Ve`oHkE5S)KBg%u95|dwTqt
zD@a^PyGdsRX>j}$s?YN?`;9@~fwC&&^|g_S1-8|dQ;ZP~9GMZCXNv_edpt1uqk8(u
zz110O_fb6$>-qOR&VO>!Z`Vwb7cFit9$D9ZCse;}vRdQM!=(~n*A{_ZSgj~)ovbA=
zPoda+!?Y`FTuwOpW3s#go?B^TjgN>F#NSIe%?BCQ=ikF*FE=ATb4?nC2f9s<aa3js
zIR(L|YaYvpqK*%L_Uu!RMwm#4<Y-7jHsFb5AtAG(Sl;Hd^$y!yH`}|^6>|mejUobN
z3Eq}5^wmWfwz91B?-uwm`wYXy`o+Kvl>k`lM5w=96lCiXnSEoH?nBN&o!Zmez3c)K
zSg+VtZj9&)CX>Yz>NBew{ppKMoWb37E{Ro^z#{y+f6AA9r85CDAfsAQxzpO!;d+_O
z7iZns)Z+PCt@+muCwPbGpE_(Topw8Wd~J7U`)r|CWMRP>i(Y4Va(!^-B~NAl+@{<_
ztluC>0B7CK=D*tvaV`cc1&c%eWl5#Oqvlt|@~h*zu}(GVYR1X8)h^G9MvACWA>5io
zEDr|?;ONjp`jPJy45O5EXPlYl=l6Ex?VJKG_HFv6UXK^hnYc)|#awm$8m$(yiI&6*
zL+Q*E<ZGwbrY1z)%v1aE1}|@lb=4b7@5==gIT<V0)QwtaqshQ(mDg)u=GJ}E%NZ~-
zn4<=BUGj$m+DW0bdY4J<6p~W@PI!vibFSm2)lSK{0(71kPHGyt8stAHBF=MUeQmBL
zQ(VjiG0TzQD|A&){e`E^rKrhJ(P4rITFMNUiI*oZH}pSLQlv*Tg@DJ9uU4wl{q%`N
z?jF^~tTB_sIjUe852HQ;tju0EG01aV65Z2`JlbmGjg@L_;5j|8Au(&eb}x-<uum=}
z<O%TUN%fD1)YVzX#bve9uJ;FdY7;+h+#FnX?ftxbW=rnNy8?EWs`w1uL41vkUE_x5
zQ)OpFyibd}y)x_99oqrVfP$e^J1tYwa<Ok|DZ;5LZFg<?#%{wJ8iq;&FJ`xbl_Z4U
z6gyfif*_0>Ga55n<V*+^ek}I6fx%U5-8$8n&1hCV(+9mgdQ<&F5l(oDJyNEU_`<^Z
zk|~LKOmBX|>{FTY80T{Ip|G&cX+Fcb&IPk=^g~UIL)rd@XT2Y?VcXI6Bj@edSW^V|
zxBULPV4W{3PKsIFh6p8@VoQ7Wx=L9?CI|lq<=4DCOMXMlrun3n2Cxkeb7RwYLE2^5
z@djhOiW>S01F+<VGrco7izaY(_s9>uOq#R5*RbWYcg-n9StqUH?udJ^WA>C~{PqSV
zsbhkvRHA`-O55F;y{%5A;8TsZH@woUagj-5?o-}{wbS0tCxu<DKbtEZGaYms-wo<R
zS<`+Wn1OjeZJf%h?n^;7k<5EuEEfIH6s}GB#wO@<j?trvLcY1@BDZ{@;ftWZc6bAq
zcyLyI2)@eYMFw&$Dof-#P@4iy*;x8Ii0_dw(Ip84-3+ut3oiC_P5gqwc)^xNaP!H=
z0aE)NgrOj+@i6#zq;^my42ITafLz7lus=$H37wc@B%$Cw2y1k~lNm-0NxC)AW?)qh
zU$RJpNEb&k@bQik<R{%9)rYXtm~z7qwjYi`Wc;~LA%EGYwke1T{{$}l=dYh@gN$FY
zE5NNG4OD)&G2#<nEe<QW&<u+%b7x?-^zB7WU+1sscfa!OA^#7dPRokU4h$L4=Av8V
zEHx!4^dEcgG?!sq_a$&mg|G=9yS6EUy~9EwxX@-!sUx6`SaJvpBPAokmRe-2Z(_Wk
zmeiV>>+957_gdFpok;aCyjvOb&5h;4b()jcY2lh-x6s6ha>j)9jxTco(RU3<_a2EQ
zg{gQTCXJ=dnnH?o3QxH?T##cETbnEYk!>^_M6Z*BYeCAuR>y7*;Ux@5%&jDvxT?4<
zj-Hnb8B;&j*dd=oUk7nTw0~a7{UqfX$P)w=67nHzn+Q3l6R<Cj;Ez#>mYZe`(1vTZ
zvOyH_Cw4%HKp2MmF43I5kA~>#e%77fQv`p=bDR5*hb~88yhhT~LGzPZcK-mPXa502
z!+ru$`vV|q@)L+=q9)V8O;<xQfIXZ|2Cl_4MG=ub1SjSHGawrLBKVVqa=$Vs;da{X
zK_TCB8P~q8UMp3-YE%0r>*NsS3l4!>IuB-tUbH*reo}k%PP@pZuP_(Ij7^@swTQ%x
z5)xO!BSH~pi6&a>jVRdw!?u8)Bcy(X1|IP`O!f2031*9t(bj1?dXx9_>Nd3z0*}W`
zx?E0$4Bk<(<~nTS-pq7FCUZt7(IAThGtr8|U7c;nR>SF)(@QR|!-bsnX4Zt3r+pHI
zyNw0zy?&g`f2T)a=&7!0!~L=m4Y~Tk4P<~zS>!4A*A60|->J%JiVtd(cxp6qX|62>
zF;1gKD4Q{)!I4uVXU!$v2g&xCQ_R>uw{@cHz0ma3&U|Wp?yTb8nKdH=u+lpjbU?AJ
z_<Wtvm_)J|{lHn=uA+E|s7#G^M$ATQP=1O(9eO!G?wM%Pi=h}@!<}WsHsn<lG>R3(
z%_Lh*Bap4#0V_`9B*gNBM{k2J8vj0+^Xrc2V_b>T^cglO;&Z#grJ7u)PT|B#Kgj%r
zBo8|r_XT!dgKUA$MZP7?mh`I+Y#qdv6mvAJf)O0LET4niL~iMfa|v8aT1oi!zEA4$
z@>QY}hoQ3!OR~S$Mld4tHd<3$+}+*H$FRn>PH<vFkqpE(UF>VHL?fpjrrGgp2TTRA
zt@qqAh$@aSmY9Ej^=T`ExQaYa?JH%fz{|a!TnsEY%XTIU6P!y2R@damgvqsq&jmlO
zoKGKFR7slWtF`f@VoH{k2Vj?I_+pgH#e;oDCPYm!S9Ulp+WQQvMz^$^oRDg-2@eC{
zj~)_)@iLC=O(GST!i*USW)*7>yO+jGY=#$FU1ZuMDC*uN`_7E;C#Z=sQJ=%RU#5}7
z$<4?`dK!@dJFoQhJ1_<>#n^b46Xkem=T`;qQ%GcBJ>;SV!7#el<lOzdd?u~x#{P}j
zIKgNA#i#&b;R)^1Z<QLxXXL6Eg3v>q>2?uhz%i4(on2qrUo1P;`dh(os>Z3`9}@aT
z)dW@-xC0DT(7PQxTo{Q*!NR`!2AIRB2yjYd@Z3(O+^xFG)Bp$N9+{5Cd`3|PwglIY
z-bv4RXZRX|W72(JT`L0HjnfCa9R>#1;68U;-mcf^6yqNol?mJiW$t_|d8CSFpbz`d
zW5#L2Vt8ipcUBEz*KBb^r0ek>q?Q`XeZdvYia;kaz^D3-4BQ<>5}9@iVAIzZI>18~
zafD2?;ZH~6@o8umh_&ovAaFta|CtjQJ7SdF@4iOUFGbi1T;mrY^UrwTkNjR{7q<$Y
z=$W=#V`b63@pSL>?=CmHC6?>J<+l9A<zD#=I!o-SRt*s&At$xK-;lsj0=0P?BS(Dd
ztV0I0Jof=oCPZuie_o;~4Y4FPg9@2EI}+oVtUl|99?pXIS@+=E9a6ifrU?lZ`CiO=
zg<BrZq5bLM0f~GqQN94}(<5A@Lvrw5dW)}~ir}%u)ViSDwd#r}6(0X5icfz$P1bSO
z223a&?*hO{;23b}3>0dl70G#V=q9vCG@1`RqRpFz9UsBv-H@%hQeLaUQeOStc^2la
zKKlC2DoEMFSK<rn+=sPIFqD-{jah0BNp~hqu^Z@@_PSiXlg3}mpJcL45k1B2K0h6R
zkkB6`A_~JL_{s(v!z<o;aaV+LfZ-wBM-X)jfglX4XS~vj-0(E~G`x&WxcaFHck)R<
zr#YL)*9h*YMf<<#iT{;?0C9YYFtnZv#JOM@{xto8znFeC0;9S$iB=m8`;YDC`-klZ
zu`Q5$X15H(vcDk%-$fTdoZtlE1uGdKhS-sTuhYm}&}m~&)%GQ{=>#wklbgJuJ;xkk
z6<ZGW3pS8={Osmd&mKGEOwuXmg+dIF542o3m2tv{8YNn@j|D0QK)AIbqrC}cT3oih
zqmlJxyDG=c)j}x>jCEY#fC*bX-_oq0F86XSFf+>kQk~|mcCMG9o?orr3a$->G=ew@
zH(v}`Hk5&8Lj`B@UkX*3*Ox6NR`us)w7GsS?RGns<^ZIgzpYvDejRwEdga51o~i&<
z6#mT8Nc?)E+skEUwOkX&t<ftUUS}Ux#EgihzN<+SWcgCaGNL7N-|Hd8MRePfcD}dC
zrTLOiT(3a$C8pSs{w2w0VPttEvvR@#Z{=H-Y19*8DgDGRP>O!cwao`{=5}G_i-*?H
zc_!YT1>G(<*wDDYSkG#KyL30=Dg&c~oWD)3QsKOStzm+M)Y`FH0mkFQK6f`C>Qikx
zbv;`Lwr7e8?0@(oZ`W@%jOpBZV&>Om?-a?WBmL^BkJ853`bO_Ef7+hn5)nmrQTE7i
z`-ze6jJdl=eH`=Q6<<;PAo<FA`2@rR2^qRES-SQ&Z?yuR3k7P%Kavd#3H`+CpJZWd
zE*GjS?gTP4z)KuV0*0G1%A_TNoP4ZV2Rwe$xPV@E3vI&;#Vs6q9hb+krG;jbe6if`
z8jdW)yKG%jYY7&{Ibq-(w~Qxnc6xOI&pZN(iK+DPkKz2zyEor_;!C_2zwp3U&@I$7
zi*6DM&NW<`&gO7(D88||m~Im{<f`qxY3gz(OQd&h^Um1K??=z(Oip^1HX2Tkm%OsC
zF`%Q4E*hQ4ZFl!1o~1Jujyn&EWwOY=|CnFq>K(UT3LeMh>7f(yu%AV5HTH{RPZCy)
z(>Y|b^4y=ex?aR01Wo7*zpXW8fBWL-tB|BunO>*iIEL8sz9ia?stC`H@G_l%n`QM4
zj(hW{zj1oCHWTn&>@I!PBX4UCThZo|%WYyBZg~D>g`oU2!*pz-L(%Am>$^A0tRn<J
zDlJg1i#4C{-;i10v`p}7WY@);XO+J;8QXJa$YdQY&ESZYT&KBsPJ@470ddV~8lm^`
z;vl!yt?1JLAENcqBaQh-)Bze>WT0`&Yd*U&kB}X0(aM&RqSFFe`i<i{u@AFbvQ9L7
zTd&GcXFc}W#>JIC!E`&SjpNx-Bf_}-{Sj_sRi9%qTM9!c45|M0h((JB!g1(?qh9p-
zbn4o7akIPBt~ZZ1a|hAnl*V+Fgn{)23g<D1lcasaV9gd476aj1f1>CA!6Ep|ANVKK
zKMl4t!8Vg5{*LrBCjMOplpwHZwNGGq$HArG3`<m}H7){VhT9kC#@x^DVqb%7hR6Wq
zeY}~=-eg^Z|7({(Ia5HU;{SJvU#MG38gt!%nI4Ab;I%q)iy3%ZarqgDcSD$d>sgj1
zS+<Muxr2iaY2M3<cArAXz>~7jN3^rbl7WF}pVghI6=%baVBR-qV*Fg6af@KL$GI}s
zL&aUZUcx7JyV|{WCMRkZR>g8jqmUtE>TodB#u&s1q+J{MqWOMR**>3pIuHm5rQkk)
z`O*ko)cV>?>KP^@+baU@{M5!QaS>FI<)9CQLPLi^Vndk{WkF(C6IGT2!D{-tk(b{C
zl0)g;Gz#aZr}p~oPPwz}R|OK$awJ+U3_t1U#^eMWK^RjV?iN&v^JWi&Aozp8Od;#{
zCD0~p>J-*^VG)?btXrZrHimU{YrmP!pxU;x$Uu8AZ_-Akkwltjx!;SbZD=FtR_ply
z5BFO?PqCVf)<O<PEMTQ@{BqcVExA}FgWhq+)RHr@Bi`SX&5kt66~h&Gl{^nMrRT}#
zKH_hDtF8Ib$${FsHa^#F`Q!;O(-z0Hgj8b9|F9s2y{{^;AgJ0;C^0v6dbKTIDiP7U
z7fji=Pry`$DJQJ9?tP`6`!neGH$G5J&jjrJ0d6ENT!y{3{Dt+Kg;+mU>IvK#xn>Yg
zWAQtUPT%xT8eNoh1OXujVH^VlZB`EG!&@}l^eQa3DE_!;Hm~8K-RPr~7XzN|Ac!~v
zN2@}-Qj-v_AFt<V0)M=%xCY)%Y#owwcDB#RH%e8fRK7%ELue0xuN~wTQFR?~>5Y-3
zE{ib8Uv-1>7g`J&F2k2!IHL9qt;}$r&bH~Ma44P;<w@25O@|`3D6X(<a>K5C+lQdI
zFylgGhO<B^4;LXthEGkvxxmHeIEYTA=)?_e$gpmL%d%XgU@bKKHWWWZB|@?9^91nI
zL2x}XkN^?7xpvdp1RB_k+OL%n=W`Qx*y+gtTo6Y?P$7VXy~r7o-DJ<N1^?YD3s_w1
zvbQJE44;;O+{lGbaM%`{8vJMPdda}?JshO$*L&LGxa05+lwWZkQKc2^=?aEcB_jxf
zg6dXKH1Ii2>er%)IG>)5iG879X!$j}k!0|nRbb2FKjmb=#hoMrds_^hgr1h{f0mO5
zTbqJqAs8x!(IHVLVvysGP=0`}>%`Wk<s-1ovXcz-{1yzK4?ac){#i1Q#Jz>7Aw_4$
zfap_TeDId8+I}nqGqRHjlq5b9oD|rKAp=rqyMLC0p*OPQQQJ2N5cTkAhTycD9s?gR
zlOqt)CSe$M=#8y;SmIuG82q2*?0=mc%Z346QtlLLVHO4a|DDE_-*p1~sS^M5EOz1|
z@l*u+KGG>%!t%@%DtfA>rq4w%Rkeo8S|z0W!a@#^P9&8{V4uM;@e_>jRfBKfc7kKE
zt1_oV#)uYL3Nbye;OdG!KQu(>nVM*!@ky-A-iHJs1FB-6I*4{b67qEpY&C@bms+)v
z^DE8ZrV=FT4w2>{2$6)EoUls7iPXfRR<G1UR1HzK=>x&9zCODW3IH5}CrgZ8CIcN+
z;;2=5J3_d>&c8AJ7C5R#(#?bDC#!CV{z>|8^v@%Bk>;N?2lV&65`<X4yDg=o#?1LJ
z7L)r|crU1f^dBd#%QUIdtNA#v67%2Oj6Elnr^Y9zW^j_1ME!=qQLIt)StulkzY&}M
zs6}+AvFZzx*{;<ttoPBSlecKDK&FA_Szs_RCYUF<pGOXjiV8H%6<mKcWg4D-^u#Lu
zzI77Be{J>g4m%gsZVMQe0IZh*5lVpK5wHjp{B#kHr2}1<j>3J*@Ul2KX4m~NqL{SZ
zml?gsoSh>B-staF?-xVx&np@wvns#54C{Nd-JOlo4%ER8boEL5_^z4aT*UnhpZS+s
zixkzfUkdm1{EMf%otll=h2dxR2E6_ZqIgme1b=01ED4NeKcPE2sRatJ-)lm)>ioj~
ze1wqrIf(s{YqtE;fIfofIR0&T;mNQOJW2OyF*t1Tli9fnVYQ3!IngX$GVs>zHKYpW
z;eNYoLC{A1VF11=VFf)l%z;ec3)p5#&k6ARMM%xc-ampDig|P>sD&@o#Oi&MUQ^Jj
zh+>+b<8w&7A#zVHnALX3w4$lHGM%f$&#DO`tPC|MOcRdoF<@Me&U_tIOHh)Ki1uQj
z?_#>zoxgIy^7Fjc=AiuTwV9`B7Rps~ChV)b(?~i8Sy|ci%xziA@AniJ*Q#u{v?tPh
z<GwzZd_}4rJvoA^U!<L{lpDa}OK|7zZ!Tn=yg$6Tmh?U|I{tHy&4;c<Nhy`WmxuS-
z*iU>3to$wNhb-f!E{??3(z594W??yv3WJtIEQ#IsW>-XpL+R4`gDOGh59sP_R|Nft
z=mlHb3oLi(7#lCtpOoo#fLDNV(%LuMI!m-%oap;ai~Gw4<*KV{?DO7upeV4W`5{l|
zTW|b0HG8Q3(t5zK^TV~tRHK<J^qWxG2hyXe^COCr?rtOb$ZUi%1!P0lOw8xLl)HI(
zSr=<~6sw8nm3xVd$TMA`icNde{f<KEF7L@x>HAbK@B#j}F0MlBjq)!p@NcvE^BEK@
zbAa#3ZbW5cMWG!^O~yN=ozw?zI{(Kg03`0f!#xSoF8d^COFLNpP}-<VCn4YT&-D+1
zwa=Z8z*)au)E}{W0k8!H-%N5j2*dk8KKs72tw(mn02B@c1;FY=C<qP34O5}GA^*SQ
zhJL8EJV=3h|3Z4OUy$A}I1VW7VfM9!Gmf@he`{hfBA@zY{q%FO?2}&@j^(?4^tI}I
z$?18En)>;SaAmzIz5B)OQS52HXRvLpnHA=&IB+4uD$=<%eS-JZLQD*{gZt(et$^R|
z)rRUu#@s%haH(Z-@GOo`Ths-siU12c8pS5qA(!>?Tbne}q2_>F)I`>BX=RaUxR=}1
z_fe(iceBKmV?Jw+fKg@rOpfX132I`__xsN8bHHHf>A>KC%n|7f4)KRY5hEjvbs9FV
zQDHx_L^IQuH>S^@AEnDwy!=q8?(V(X0mHiM$2s^f&0Z9^F9P!~GY*8mP1qDIS*ROy
zu~JM9*rUoa_0PY1<SYJl*oNuj`A7Vfl?m_rM0g`E@`g~kb#ks54IBe#?w-~BPl~{y
zzmdOrfAIo23{w&_LxeO5PH@;C4~2SpP#*BfSj)|1mq#cpedF&eFvqX<#D~D>3fU7a
zG&4jR{XqlM{(}mL#X?K>*?q@9serHG<QIlL&4noV>hD;{0>oQ_A20lgv=(7#I~qcP
zM;i=#Q^t}g`X+~AsV_$KlS|WSr=%XF#Sh=7@0(zKo<whL&R+3KzxBdr#W$F`6=st=
za~}Z&$5Abhob6@NHYEnUsYwgw-pc!6;cwDM1vBm>YV@s_&IB0WueG;+qIRji{w<BI
zO~S2qjwi21)O)JN#x;sewcJ=U+qVZ7`_!C|x2H};igG^ZxFzMu_1sY4e#lczrnuY!
zcF&J5Y}jT5ZKFlX9>St{l&WcKEE)8sTA!>rATGB&5>}+7cv0%%Eb-<-@~4`V1v9!c
z;FOK;2kxS&rk8aqb5&NQ#=lKkZ&BANZk@8SIN!lq>$>F5%FV<fewbhUzDuuJ<3^hc
z&lQkrVQOs%dym>-GEBcRm2_)(6HA@KXTWpcG)(?Rr%&_+`g#k^EM?5M*LyxNhU@*K
zTS}?^t4yY!lg)yj7ch1SuYdcx*V}@}hErQPh+Fwwn^#j)acg4747GDP-Fa$)zL^Qm
z7e9wrY|K<8S<Bx|Ry&u#=EkW|c~3Ro*2#-m$z59p0U=NaXFYsp8V^Ga`h|yY_4uJp
zqn2sWqben*qm;H1&uepM1m#km$`#5?c~SNHo=i$?Cif2O=WYyT=L2JFG;N7C?+M6P
zI95)>+aWH=Zu{-H@Ofh1M+x?)*oF^$p4le|9w+hF0x!XBCXX1JKN?R6{Iohc2fiXs
z?2n6w+#qHXWz!^&dwSkBpuqIBQQO?Xfp<%by4}b5Zb-qBj4vD&y1-Xoe^Hffjrp~P
z;-!4!e&3a8+q_cAB@)e>s*q%{F#Umh>MeF#M;)yEj1ntKRHv+z@3h37eixo)-<_Dr
z9nRYBTY`-oY@j<_nqJhJ&DhS}J}dijs;T_9n?nq5k65)$$aKudsVDon7JkR}hz~aq
zb#OX?K~jE<1bF{U9lw1t$awa9<f2BBm7mgE>kO*vmQ2P^IiEjd`&#S4|1$TjlFUpt
z>&m!zl@^kE+}{6G32&-aNw>qp+<Q4~=J!&PRA+xXubLK(I3n*9UbD9KMR8yMu;>dS
z>sM;(_|~nZD~9s>|FX|M=|}?Dg#%BU!PbPyfY2C*nbhtK#a7hka};2$$bXsPgCJYt
zf$JUeyCDW;Nf01UT7cXd<RX0g-q3amgsjLw9N3~72>Cwu4o{HMma3kA3H}1P{uG2H
z(g=Jr4v)kiH$F%NN&F?iwlhx#szE}Y@&>83`oA0W{}&QLG9gdP9Lgls{>%O#TVcQ8
znH~twNI<@v2I&x#NwfP$9thC;_dJlK;33pzocT3UD;ty$<<CIiXo37gGYk#!X*@Kh
znyaEvElxdqszT6~WEBe$mW`C8W0R0!EAtH_b#*{Ibb&Vu1yLMF+H_WIHkoU0h(CsQ
z7-H(=dm$;=(Z;xbgc>Ci%;V@|Au<%qtj3Vopk3^X>PUk-4<N*=I0UOyQ-rRF7T=<D
ziB~pzXVpa)lHFgAKk21)6!GwcmWv11wX-}4akOs;S7f%}k?_e(6P?z?XlMg|g0s7Z
zjuR_dR>f=h?QpBgi|O0bG3Tzwzt8-!OJ!FONb*XZE@yr9CCngU*V*gl@`&91!N#82
zsnQk7(AJ@Xn7DWOjf2TS0;QuqnroL7c_L{Z??_Mv($<s@Rz=Hvc62$h<RfROI@)#9
zi|#I?FI7lF{{3X9VQ19LK74->p6QoRG>PQ)O%Z#rk<lWH6$R~lT(Lc#TdSed^4OgF
zcYcgp$Y10@-mFOLZctrIR({^IM-W{UDa^Ai4NSRdtcgK=+JsVl9F>LoHwqIbrqjYb
z=k8=_Xn(J%aiXZ#Jv(}H<Gcz}Wu)J&P8HY7%s0^x3x-bieN8uU97zz*KD3uSc3sTb
z#K}-u^hv9u!SDt1uYMnUb?O*JMZU?teyhUVJ?dM7z1yec93<HBa@vLUQpZCoCeZ$L
z08G~OU1aj7$3<ykpCpBpSC-N}+?}7jID)#@C@8b0Y>P>Z0V~8zWE<aVRqEi>50##t
z8aO^yb6#`FO*-i<eZQkz*-cw3)7O1kHoH7_1K-y3Nn6UhZCQNEi~}ZHGd`i7v7T?@
zT1(oo@+sgfEH=VmI0nI`CUNYxY-P+*BP+im3`10dZI<8=Cm20WjowD*B07>?UOw}+
zBObS%%M$R5RYijM*|?B<_h5C&8u||4eRH0kt4(kF2@W#|A?K^#ob3kAd3lEJVXN}?
zvK%{~@@u&$m3GQM)f?bKw6we;bt*GAG!6(<4eTIz24@-G3_H}E7&W#x3cU`$7o`>(
z)L&^B`Ow45!C7uRiq^5RUZPgHFnc6z+;*i&0Heg|oc$D|)gn8%mN)uA=FCH}89B!X
z>&8_lGH74dva@T3d<yV<@)D~pbtMC_lEqhv3G^NWPbqPpwmdO*#i79LQm)Qxb%7}G
zUIn2~6+JI4CH(w?T(<PxT$&Y`p6~G1ao&Wn`5~q25;<=|yO60^c$JQT!RFN(cXeyQ
zvRE$Tbc;e~$rc=5AqH6*{2^VnaeDq+86^6vrry`u#TMVI%OZyKYm$09p1Vd!%`ai5
z?<9;RFg`4!*7?mI`*yWyazA@Fd)!8+1eaOrnVK=3_}E!ONa2RT1-cJ6g3rW<f9ag4
z<nkFf0vs{0lvpjbc5rV#SGN(v5HeYB8KcbL!0*STeb=n{jT%Qkzn9g?Ys~MWlwV)L
zzot5!PUFzAK#+8a7}BWfpB^M!bF!NMuJda2iXYRpX?b4bLBj#&?)Gl;(&0LZPtzwu
znl03bPa6~^9*b?K4JoN_nta@4w9FW88f8f~5s*~qnnQnfJLMmCLeeGAG;B)*!1n##
z`-0u1R)lY^3#&OFZsEO$gTw19r;>?<g0*krmL*>|TQRQr2?y<abE=#j%(|EQJWHSx
z=YjCe!NpwEpH2%4G(4+DCzQeciB9lS#Cx9*pWKSq<H&ut(>lr3bNtMzpJqy9vCimC
z-#TZ%DtgVJd)ikosd9a{jV?Qv&+g*J8>5|(WD}iN@q{w1vO1K>?W8dLz2#dlGVn|p
zU6)J`qtmV5492y@46vdZ8Z%DDck9#=yD3sJv+Q!b7@1GHAAgk5{yq)q6VHhYFIs1M
zSjJ2o6XiO4sFvuDXS&P_<Y_-ya)njw`M;vYJuxS(M*Ya;9iScxO4@5&YeLO1B8?D5
z@k-34mKxGo-VwXyreSiK#ffjvy`uZ@@%7s?PrHwsss!e2*<QGnffeliVZIj($E7$g
zn6%T^B$efYc4iVO^An?_m0h2wt7%_;yWfQ!h0drTWWLI+BBvDVM`1PEUL_87-ivG7
z8S@cAvWnJX1G!%>>)Y4RyB+60sY}c#+O5$uEuB!=rE)c}WNF%Zg06`ssEMFQK4a>e
z_fz7Aux_z9z0OZVA+_)54qZp_$#gMard4EBu)Qs%B@&sNriF{0@|CEfx9(Ktu8N*>
z>Nc{A5xHv+5GBAye<6yIQ|;K-*!V&<_R@Jl`xA;vm+*XxB(8?ujnkOyg!zH(`tE>t
zUPr4uoj&V-Of~c^v)OFbI`#3Z%GnowNk+zJcrRB?1YSYQWVgjjj(pkDZK@0%UsfzM
z)fj{;z5MZd_SMIQHyy4b*u=N^nEg!BK+{(DmlO<4Wr$&fB!Y9?dG`H#CXap2TO#`Y
z8Q~Y@&nd^b{7$sjFw(uF<+yP~U<d~aM{SE~4qnok_70hLy2NzUc4(b*WMo`@ME>Em
zhw(=l&oFhAwm*tnnsiq7c(%A6e8j#k;vL&dub?20OZnA(Ba{Lc)Es8j@85cL%JH~y
zwqWb|<1LyIyq!U4uGYFZh0rb;td~Y%@+z_NUAp}JR1GoGgU636OTBr`Qp}RwHP(0r
zEnUxX-X!#FC>)hJ;^kap(68p^>>7JcucIaT_F3AuZzf-z<V`ptUnY!w3MDZ=#6jEQ
zy=rJj&i631vd(LrT2mO(sj*ESe}7~x*Os^Z`sKWfGZ!gyU{}n*U!ha!m+?sS$|P)$
z$MY{YSHlwRvP;Of`@5I>Pk1E=F&hACj^9F@43r<*fFjY`BcGay8BlIG<sLt=0yW3s
z1IKb7#I%3)VOKswv^>OYs@hBtBTEmW+G_u1z@Vr$&{f()gBw!Eg-zkAoayx54ocTY
zB=OZ(KGQl@a4K)js-;!*xMG+EH(t$Y2*n7u=cb%8j4E4ifXK?W)L;+C6CbUgcI+BE
zkDN6-1GAx^-qpMQ^pz+N;J=Gtzxo#46zfp9RP9|CoL%(38e3i6d*o$xG&L(D4Q&np
zuuwSubm>I1>u`BF!^61rX|1(4IO#WoTwPCyak0MZI$Z8#;9U~e?AUJkzzI5tLjB+<
zR?nZ4n^#evK<Ya)<=lHC^!fv9_oOFIuy#13bT*CSiSH9yUfAvot=M7bwbH`6bYBG4
zuYgIw)|Tg<6>zToP0rS}epM0t#L;&uvK-gZrLnc5kD4V@9tK^R4PubtYx{K3;NtA0
zXAX6*cDk+$<%b2wj_~h^mvio?$Epn=c8EfQq>n0f6;08?HP4k-izg-DV0ptXGxusX
zm)s3ycv*^K!J%}}`bP1Z;M+`1@9OGL4+6WW^lqq8CXThA?jo%#Bwgn8yrXk`C3XDV
z*9S6}E`4rKEpp)=s|-=!;!nDkcXv}V{}g8(pDl@PauW0PE2VvD?=(>iS&8==5VLSL
zF4B@wo4}?%W<IZX@#Ecvub~PteZObw|F15%CwwvvzL^a1*w|x`;W|jfV*k|zk0dZg
zlJvCD45XH{?B7oW{BauK^UuSu5Ytk%K**zk&da@NKL|*KKsetO{Aj3j1<IeBxdV~1
z^|TPE8rdM}MnjaI?N3S%VrBnD>HP%o7Ahsa6-E&=Z6@&>30`7s9YbwQOR};C3fxuS
z8FLFIO=LZGW7(`j3}#aoR2v!0i#KFUovHgwSGqHt6cweVdfeQ26HfB$zRMh*Jp1UV
zzzg6gk{%a?S6wz?Z_8L?Xfsqutt$B8r0c+@5YlTh9>5_Gb1A|*Tqz<{<N1ssmE`$b
z%@H4Vja_E?tkRclYJE#*{4(!`EF^^<YCFp-zSc>bQ+^R(ZdXx=anKZBO31gNo)P05
zJGDAdx$*b`awcMWUrWou*<en5?s7SDLm)wY?xsymGXJr8mD+?$vCf{Iu})#EqR0_^
zi}$!lRe$o{y4Z%bZ3K~1Fv5Xa^9t32>3~=H`dqoDDrY?3Rl9BKFe?XVW4b$RWoieM
z*!>)z^f3J}?sV{ydEe2^_&o1^Tqp120+RZ?WrgXU<HUnUnL@ao*DCqrHv(a08b0S!
zqyq%|Hv+qtZkIpSIbE~4mTWZgt)a{4$cS;CE5b#{|I*{$`Ey=ycx~i+RMkXypjz3A
z!LFo6&Qkh03%|iC(-OrX1uR^KpMh>~E~X}fGW0`Erx%nU={?OX^qg4Kz!b^s6xsn%
z@-x%p>mR2Fr(0|BH}q8Bn%bV<VvyHAuOdCOdqIP5AZ_Lg!Wp4j;VWlO>b&>%60tF5
z70GhrEtJ5ahClzTmby*y@CT<?kIsn+$xvtDFFUat_8I@cX|9jswUT{zz>19eZc{lm
z!}xp2iq_bO)c((zSBuZCut>bsNKUktY--eT`8qUsz%x?gf)cY!^B&eDEDNh==41)S
zX+9Mg-b@#YtB>~C3lLj>@y66NBDw;i*=gUVAU2d#3coMw&Qrf}dYnExc3j|X{5^5u
zhWP4|(Pj%3$?LQvtRzkr#T{tosWD%RRv|X@jvqmccGW#!FYV3~+ej{FhOINLtJWl6
zQBb<ob|oNcd4%9QIQjKuy35fO8iVu?ZRuwIHW&w)JGbsvJ0<dW#r%*`E%7vJ7g{=b
zqMWJo&2zX#(ZVkCGFW98?zvlKKfby7Wq!)}^T%_pvmeU7N?*9KbZJ^=?!#%Piwn#r
zf2g4xI>aW{((*@rlP{{qmTF9WFU$I-biHCkChUQ!ALk9f(Lt$W^R8b?>PC*1-9E{p
zJ|YWpDcw-I=0-(2-VpI+5w=?Ll66MSZT_6<*B|$OG@^bp@p`5NE*6e1{1A%z4K`C0
zE5og-K803(S-2EzTIXnZ%d984LMn>XeTwg1&poPTby^{-2W^^1Xv%*J^3Trx@ufJ>
z7ySyO0R`x)=q%`v<rlOZ(#Ma+?l~skJkgdhPk)HbmB)83+((N!cc-^PPIr4335%R5
zO3YSIcEK6?=(xW1b9rc&DjT0Zv8$QiW^f1Z*!^IW`c@R*yOFz3E_x&JmvJpg8P{+=
zrOP#nLYu2)eCe&9U6g{J5etplGzBY}KD9(x`3@dEl6u`FxWh(`Tc>B;?v1X6mk(yI
zw6MwmJrpgZe>xR2+3Us5minOd>qm-e{d1p8#(2gkeAA7kQbI<`5hMlQ<xPz~Sfr1o
z6P`<hK7UK=n6rC%TL-h(oV2f<Del{cBifbcj0At2Gb~TCw8&f7<!My$%k1fF)LrvB
zv)aIoH0ub->&r`hj~x%vGl;)Ik%YiJjF&X)*pT9lQelacy%{IPutqt((a7HV`QEht
zgOIg2{nlBFJ@=!|g!#n#Nr=wxe9Xm+bz@37zpWMWVkKci#e2j~<X1oB1u_uvxOPy&
z`c1E=V&gTvgxOASo-g~NrYFZZ5T7b!-i-1~jg*#$+l75e`c1NVJ}(;^{w*Qrv(uy{
zlbM69?%Y^o$^erRN2F)gwJY<~M<hnO`Q2pQL^$fh+*a>PAa%F!2`f;@H*pWnFe@5%
zaNuorw22QKMjXUkPJJ6TvNT^#cP{wy^4^H~PJ4si597)bQ4{qKbl1&;4bEzqceiw?
zxRHU%Y(j=ln+~3}%96;RUZE)A<p~~d`h^ZkgSeGL5W|t+TTg1^LJ=jP^Fvi=2125O
zFcF04k%RL?C>$?uCxON102@J^5tOcB{9AU#?LYW^OG2JF#P1LOcRI+ga}CM@7U??R
z_jjO7jz!3?|JNBi16&5W^D3@uGPdWqZ<<cx?cSZkhm6cp?%T*~@ViAMT))d<u5NSp
zi1bE87IPC?BE)kIriY=<o6cywbWHd*>bhx3{xNUAdceRn<8~9pz4}Cf!MWehuNi)}
zWNxB^4#_~I7|;4@pvsIh8@I~Ds=q<Dm9=0~O*~VtWMP1YZO}S`aWmiIR!9WZP+#Tk
z+HsNtvax8NQ~y<$Ape}GHuJPfXXiVP29;@gq2&%E2m)44O?|!>B);DD;A_<EJFS9#
z>vJS~Yd4y#GG#rr6tkU<G~~om=dG`+BuTj#1c9QgutXVoyZ|3>t1cEJR&qo3T>ROt
zH%8Nxl@AuHuwJZ1ayy$&n8pb|f$iZh*|pO{TEVb6C-JVTveZpfyd@)8-o*aHw?eC~
zsTPb>cxLFISxS+DOqD+B;k<QMef;+7?PG~DEJ1V4TVqZw`|ByzuUn^w1KnP&_?R5?
zv4B0*2&mC=Hn7byjr#Udkv~Pq_s)&sD=dyQA5R&goL~&wmM2V1N5>t!D@;u-=`~J|
z=<&OstW8Q$Kkic=c%HYKiz>vV+dEmadx2kB^KB$ms6yx^2RU#Bsb|G=r+ajBX=~m0
z6lYOv>BbZq`^s+Gw9#><W8Zma06W;%7}B3UKCwo>Krt7k)c)K=39U2M@>w5;K+m)d
zW}`DL7o89-rxZG#+SpMEO-<MIQpx7-IEzht3SWF8mwNp-1KKOd+?rFm>Ukf7xlA0#
zX>f<9wPIb?7+7v10=x<wrUzGUJ`qlp9eFR#QFO%Yf`KqxnLT&t8SdJ9WuZn4SH6F6
zm2%keDu)2O46b3ZX|X&<T{CGXAO6oZpY2(nSBI`DTet@!1hV}0`<T-KOg0P70vG&&
z#Lz!iJ0P7grrfH@&bDIh<+f1iDiUD&xVmkH>wGKAoVwZUeI8NGuMJkyJ<;ib`)SyP
zFfB4*t(9jgmO_M*D}&y)GuBm0<>vxg(S7=^8P#=JtuXDdFxBb9Kp=D;O+N5UWJ}i+
zmluTeGmyt2dIfJ@^{r~))#=Rn&F{8>#n+fsKQ^zqtHWfS7HR*8?)=ZN5}b?!4<b8o
zEZv{5GSL5@`Tc1G#%EAuM+Z$uYVr9US5BZVT<Nesc1dl)@_BX*lq!_S>T8XChw)0t
zoOU^3^!>fFQhk84s(o&vtm}pMC4i&`T+gWk`ez{ixCv6E1S>c>G6Mxmkqymg?guw{
zPKMtRzn|6f8s#zN_QFMr!Q!^L?4GG<SwiO`WK%?Epns7<GZh(G1?7pDtI^K}^Tu%G
zCHb^_9Ibh08{g?AcpH6%>d+BB=qQ7Y%cw^ytg`7v_3Q3DT$aqI{rj88x<b0&|L}`l
z+l_RKW8RCNhDR&&Vd7&(9rsC9uSfGk@5F5G8~2(WqC9NNe^J2h$Nr%0^VepJb#Zdu
z&>2;8(~HR*FWr-`w?6sU`b4c5nN!s4nMF4|khUSdCV--@%WFyFGBE0KK0;a>!MI>_
z^58B~pM}o*8@7RO*$FJ`isepI6VX!VB;8n>>Zlp<6s|O5@a?Z|#7TK;ECR8r5T5UG
zh41sRkK6*P$I9~WpHQP>97joimV9yZ5b|xC>R7fKWDyI4<5TB{1HB|1u3D75-hn5h
zMpj6=VSmAN2*UphrbCBl);u7~ih@G#QdU1h@8B<y_lB81cmXo1qN=9#v%mWHyyQ!=
zb1BazUopy4@pPch2Q!aAdG@3;IC;CG<+{>wxglX@C!aoxZjWPPd^hrZeL7#zb_|=>
zS~h6#!(P|O_KuHg9Q*KAMe^jVDu<!o`77KltW)Ves}fTibU3Vbz_oI;ceV#x&PYVo
z#?-FVQd=<v<4kQFs~Ho8g&Zf^qqMN;EJER#$*xZ$zQ}8#pvmrs>;J{udxtf(Zr!6;
z5s|8ZfPg}1LO`ifBPt~#BB*qTNGH;}lqiby-UJk+2}rM@1R}kIbO<GMq!YjpNXWj6
zead%^`+UE9o_p_e|H?zMLf)0N^3FNO9Aiu@y{Y3>+kJSOMz0OrJ*K>2-Eeh;J$TLq
z5V+0y7KKY8^F00chzRwXntD{caTfoRD)wiTFTdToMfFQzeN<F<Y4}C*410bkRgO-u
z$O}CT+}-poHx*M<*{|mOOK+o8DFcT6SP3aGbv;SC%Qnt>&E9Y?2}kQ)P|V@wtj05v
z-2vU#&u+?F)}O{aGRlAb$?>&Sgu-F*>rV!e^)<VaUPi@C=}T3xa}9hpN1UHuHAwOI
zF(cVxvWI(l3kD>=l^JS?b?mC}5Dn=h-U>}lP$j^`j<>QM-Xj>ZcD92g0G*&lG38c~
z#bC&zwAH<CaEIR3@~%7~{Wdr=)*2`8Y-C&@9L-y%ysCH|mljA8n&)7L4!fysx<MEo
z?bsv~I+N`dG8`O3Xw{xK@_*^*T(o*&gNr!eIyeLfHTj7(fj6z<Y_R7WuCL7qB&<It
z1R%`L%4yHoNwf_;3_4H?8<4*@VSX#c%GuP-#tOxLn<Esn{1Z*>2gXdU)&{JE3Y(66
zWl?=vUQ!bSr@k*aWgf~~6P|<~NcPg*6ed4!(ZRKuRobK@Oh@g7<z=#_U~4RCrll2O
z-I6T_8rK}Ztm%ioIJNy~hn)VEP^?lpTv4|)EG$Y7J=a@51ig~KR=|Ef^u}&xr|xWG
zOP$c<x}Ln#vW<s9nF;lW+LX<&x54Syy@JqdDQv%zuT~kzC*bcYT@#yb<ULlOMYo*Y
zNl4GeknT1_zZiUG(^z#MpFeah2*208q%f!-o<Iae%+An>IgioKOT#qF6WX8D*80z^
z_a(P!(e&83_Ka?6fiBKUcRiGqqO*GXBjl5w3bqw;Oh({xz8q>T$|9N|!2?F?23e_6
zNDZA)!{`jdO!)+ZF!(iU+p(^n+I(@%q4AZ$cjpQ*)2R#nnUszF!5F$QaM7lZsbq`C
z={5G?<+>OhWI*w7{)MdGn)pIc@(bmX+s19t`Nu(_=D)U?;If);QPREza5n$dWSzt_
zQ`6H^(-Mx8EpHOsUpi7y3{@zoKE`o|!gI%`p$eZjpz_*OS;lK?tkARm0PH|d#~mN#
zoY`(ppu<VY{j3-#!R?Q(40hr}J4GGH(~L!_(f3|zUAHR~@4ptbm#}MwjOR7Piftyg
zAj<!sXtBGmToZzA*S%~cVGyd!F_Y<bN%Tf-_$E{8P{(H-y*N})nI-FU#%b;0ZaaP?
zjiS^w$;SRik4WT-G}BP7*A7GyP){mH)jXANb9kSsFuWy^Bmy+(>FXQP#rnYKKEY{{
zvsN7>;P^*SH}2z4J+XmE8gR2Ro0wsR&*%O|%}_SP`%F90Rw)m*;bgPPeyhAS-T5ZL
zY48nmsG0kx)}_L3&|GG<&W9g>QP+N=$-XcT&$i|t6o@pEwX7>*CXEbG7zsm5N*xiD
z-_dmPc5`V#9*k?8;OY^Q)NZGg$Rj&%=O${`AlU-yE4KPYp#`UJlfx~)JH%}C*5eGD
zG20=oLf#4&@d~m~kxY2XJ13AB=v3L9lpt@!?Gev@?pm%5fMHYr=RJ{0RD}Hb;aHMQ
ze3ut8h|EgpHo-w_1NH0_M+z6J4kbeacRP|S#Dfw*_Xtlpdjibu)f(wQe^5}N3_)yL
zSQfPyxVBL<=V%(6Z$()zcZK)oQd!FI=W*P*k6z5O?Zf{5VZaIEvg{OZDenJ4@#pUt
zxWs7#``zJ}9}I15<-qgv<<wpzTSjMz)wX@>(QmNqJiEB-((8=)_l&--P~|q$!ndvO
z?b^`QHF&`9g~D+A4}i>b<_`*<zVJUNU_TH)TZ>o4$rk`#s36Cm@*Knw?CaQ`%`Dv^
zX9esC2r_>%exT@`yJ?32?+0M>-TfPzulyFo@<eV!2A+L|K2%X&`QLHOy~s&XvR0(W
ziO>*W@<sj^OuiFx5``mtr3KjaLs92)ZVgmS?Dx{C$Gmi-uJe{NeypZ<-ML3Ezbn%d
z`mtzNW!9;t;oaBXi$*O29l;>`TODhxdavm{B~HzuY26^#2>qLEl@a;HM%MV(1&%hW
z&Uox<lt>nC%Bxj%`!r_ZEa!KBJ+>)AG)oJsk48S?g;e1+e;ug@S0UvF{Tua)4k?=|
z3tv6kAc2x=0}o0b<c8!1Nqzek@SO7vEk(`~%4C8V7vnkvs3@u`<q(W|tJ>gS^`Eo)
z8Jo|lZuBxFOM*UtG%FTAg<aFl{>>BNzx6)I0m?E<pe&2^0qV69;}!D9;{2WR->5sT
zK#UB-{#%Ae;S2nH&T+~dm!m9xl>wli&}$sqab@+7SH)I)d=*s*Dr^1pW~;*?4kYd)
zd&nY}8DO=gOA^|DMad;B#g@u7j*aH^-nOuBU#Xs<^bC8jPBe6p+O*#~?r-T5+J8sB
z=(f|f*9M`Km(C`5sKR@7h%F`USEQn7w#nhnj~(x5g~fPMnD2i>mvNCU!_@)DEf~G$
zfL$e;p@=tRh<#&!dF>8l9mF*Q5l}ew-S$Y<$0^__ar9gM!%cyi&B?8@J;m2P?7^P>
z--bLw%AG4?&{&T}PuK>)MLjz=s(35K&b#gO`n{d*muhynvOO)6Oo~4!^1}cJs<7w-
zl?$dvEVEe3)dq^4)`-Z=iRPTuTAzDD-kyQoY>~yF6;Ny^D8?DCuX0XsQFm!#)H}H6
z+uo?Vx^-dVAzFMNmB!P&w0~$L)VVdYO{%9`jKtRf7Xh{g!?OYa*@Vy!$X{tqMgZ$T
zw33T>>4ZW47hY5GHT(&)>7FBMEYKFqP(k$7ZDC<c3`c1rVLLGzU&n0>6w_@}jc%51
z-e7g9un3j`r6#RDzZo6a(w95*3Gfa~-+IoQKIz8g@X3WR_J$z3Ko=rUjk}3&*BK(&
z6?&Qw4c@7L*dlkrh(f(;F*4-A^s`Z@jgAgoXJ&0GR;KMyc<6XL(QId>^3hGf)`xPp
z@>uUZX4J9XId&EWEGUx+G3(kXPYm4{q1^K43Z!!;F^g@{>F%8+!=%<ICWP#UfT_3i
z=U6ymN0G+8&xU4r$TMOSEH7uu8x67i*lH)CX?pXEw+tJ5z9bazcCbzuc*lroi#k#b
zaotq&3?b@N5)?AmlC$`rrVTOpHo5#H9(5em%(JpYqGZse$Ione?(Bk?5=|k&uE9QX
z7VsVE`ybl1<Ap1w19eKmUDcr(<uUFP<p*o!>dxV8W?p4<VGlq4e4J?Mg{uB=00VMh
z@qjQN28TdoazeHj!pclc<jVloW`0qBlB=ZlJ9v~8Jj0QQv1TZPRx%E#(8O_LGe-6!
z-zl;UONNW;ping<B*jq9Qia1>6snGI6yEBc6jEBt*GK*S)Wr9<%g9sORsjcY>)V&B
zV%-W<ccfK^eUx~k_$Wt(b@XS{Tz|!!k>k5fB#w7q%NO}{XHx!!Eg}CYjs_j-qlDLd
ze`H_iU<Q(A^UJ_w7tj@`35!@<dY<U|C{c*1L<9=3PQ>WquWG&aGg~UQ8=LxrqGwkA
zX*!9kasa#qLXYxP#B_1EU#3s6#%g+d=Lc;v3PvZ$Ih12yHz&W{%+fY$NoQVDTY6_4
zIBVR8wgR9c8>m^Ki7nEEqbix5inmU~n3E}HP6YH8V3iIwr?gslsfDLPF9{4B@dufY
ziR|~@oFg-=vIQ(vzJHzNzPqNAH1vxKyv>(z*4^m5VNl^qagj4ASn(`T{Sw>Mn*;LR
zISOfw9AW~7Cbff0BMYMiJjwkUdoL$*11742Q4>?&vt&Q^Ih$W8R_`&YBo+fdpQNrd
zDj%-0VF}hE$z%Pt8oL~&%w}#V$VqZFZgtO)yyBJ>yl513)>5JZE1gi{)r*Eajhqw3
z3m*;B6Jp5>lix@4?HnREj_=UOIJ7oRsyVvkaJ&(dA&R`}x=`w15-T$XPK4_D(f{0L
zZjitg2B6E8a(oN=+-PQtk2EKGo?Nc*BlYecH$OpGz>42&SOG4FqF;RL9z|zY3^q)f
zRSir&ViCr5mfK$TIhXW83^BH1b%p;S@zzp{D|`#F>@w<io?z;bzox;NH?KYgo5b|f
zP1<LwL$m8s+qiq`ICWTddbztcdD@-LYjjkTmVL4Bu=HdW0^)hi5Q$w32qtpZM{x!k
z?3&9H{ob~jufNglKXVL?*UJnMXi!%BVP}(UJgf<V>=a0NTUXS~R}O_3Vcys+4d?iK
z++{gX0&5GEB^~yVpBxT^YY|=_O&vuIZIkJLl354r3pY0H`68cGd}d}XSWcan3Xwb)
zLmidS`Wm`Yk-4aIb~&pSI1iD0;5?p}9oH&eGqM>QGO<07HNx0`KA-Pq=VB%fb+Cg(
zFLpe#U7I8iQFdj2q&h!)v4n#;kf>_Sb`WvnhiT*!_0V9G35ys>2C9MWOzViNRht+$
z>>Z&X@<C5swdf{{<!9AVoD`(I?|sSS&xGw)(d(F3>R$2<YSkq?-A%$U8`NQcCw~lq
ztAPo#DwTNP#~rCzN3hB^__=EYeRY7gt%}yhx*bu;f2oUDM3(Z(0@-Ub<?;QcJ?)LA
z@f06*-~_}~j*Aqz;8g|+BgH{J>o9twN&VGryih#x!PsS^=8Lm!7q?;t=bXpSSVB+5
zCGi~R$#Xf)TMU7>S8Ai(1ouM|)%BUc_NLVU6??qo>@s}v*`>FM2k&E;^b_NDs?z7_
z=&frnjUi6E`pWA6y6|EcjD1>Wnh8qu;IjFwnQ(SSds4suJy$*P;U=gBx*vIkz@t&J
z^D3bh@qXV|>&E+L=A^~@m$Z5ActkF<GpSRw&@0^(qgv#u-DvL)B3m3l_GEaE%ShC|
z#md>M9%IRE=^!2H^VD!CkM$f1?uLx3Xp(4_9I5`!o7l5RQCy{P89%rqg-jR8=NL`r
zOuQbWw`DR=)p=Ug_r@oI?)Q^9#yef0o)@nU6BT@FsfMzV<&`@{5u-u4HdaoF4`<Ci
zv+hi!C4in$2u|1QE<I^=a_tqfqkK44=!*VuWLLn#*q8d?GNvgx|9liE=G@iY&!-bC
zdqRwg6UM>!Tno!tMEL%oU?ip;reF}k1wIC`#;bc?qqwPl%ihvN#zvvWn{#g<!qK&h
zj!sc(*HbnB+Lt%8Q)umtM<wcHbgikG*%Y?;E1ijFkGe%6H5461ai>V`FK^MYaz=~f
z>}>wuXQb#9Q3^!IuZ%w^#z<U8x8X;R0RkZ4V%DW54?xuapfv^)MNb4ByXr&>fPB0K
znC3vNj)ex$v%RpxhdIIMjTBqNkzvl*C-MYhHw@lSq|-m4Jv#hGd;B+F5si4#N046~
zeU*ZvI4nsTvg2rpwDXWa?BrJ@?3$bR<EK8&0`e94`uzSL@mErGiR+9=$<0jf*RNCY
z&}Nwr4!yrFxHw~uvKuBV$B*x1pl>CTX_-bpIqe`-d4}OJ2;4UqAxIraD>4kT5VKpF
zWJwdNqp<{_6q*GTiwA#D%(LR?NQW@O6-3XmJn(+tnHyj@IoLiHNa1TBgb^+r{Z{}`
zdr+<la26KRNVaMJ^L_;G5+RW6Q%t%Dh^11sU>^}U`qYzykw7qNoB|FG0RBsWWH2Qc
zwd=e6F@W~4@C;Gt<*-MlBLOeb_Xi<X0QJcCOtRJL64N1&m@!bT!}ir((?}eh04R~`
zK)9o8@B~UQ%sRE^)_Jm=brVCNk_4)Y>wp5vss*yQgqYO=;`aV-2&ox(DnPOj2owP)
zrwdqIN~)3`@E0Nmz=Mb#4}L%!mw62DMx^Z^79oTWKKB7>nJ)Pppi0veDE@$ci696A
zpt>P>;0W?o#D_BHr{h|bQO{VkZKRy?V$&c6{TE6(r?IfHsmk>iE*J0A`i;J;t*?T^
z((-mE+SJ3k)(aG+<jZaGwXfxh!tthn{hjI3x&Ky&xQ1wCgDip26o?HLF963AS|bVl
zZumE?N#MB)K%I%RbjSYNkUwos(Q!asaMtqg6#A1q698J{Ol$!g!v8hTG(5>OB}Iue
zCmv>h$uj}|yxF`>d$R+B`yUj+#$ynC=lU*o7D2jBmc+ptBWZ19U#rf;^Ad@0oxs5J
z4?aJ7!01tZ$nH+Tao*YKsO={xEZ;Q#!v&t}k@roW0C3{tX!rtqy_H5opn7%kVdaI>
zKV^OT&4dIfyW;1>1QxDag(dH}gr$BJtCX!+OcZtV%lmnxKvy+4!=0UIn*Sq@QpC4l
zbD&W7dEw@wgpXVqL3Kx}U#S$n9$*ZhdC6;A+PhO~n1B)x=?kEp0*E@{ulFww8h^_@
zMB>_1Ir@=j=TT&bcLoXByk%IzkPfQce`{t--Sn&8cm7*l<=o|2O8(o*eHZR*n*>-1
z8g`6(yz*mRIU1{fET%r=VbwXj<b1#sorSiZM)riwy6r|n2*0?{&3?P0akFFqbHzPh
zAPel^Q+PT#({ZwxQ91VUt%NR(dlFR<BYaggH6a$Fwc49mYj@?UxFft<Fr5si*=_bi
z9q87R<q=G-;|}s}aK)7LX&N_iGs&JY7M-R(n(s+Gf!Y<%&11z>IleMWP9&>HTb19g
ze%7DF@@Sz8LV8Zor+L)j4Tx>UC&}kb?qO1+=X$mGfDJ34Fl(CNZcfzb`<%ZPrC}v6
zG8X$vT<)cSer33X&`m~eWW}S7vb+N9IZvtXxvG>50^%8=k_XX5b2i`i8u|M3hWM<y
z$Y)4(<V!`hf{pA@;di~rnAw1UQ|G2c`W^WkA*0HT?MImaoUcVBU0!ak@Yn?^b0!mZ
zy1?bi`V_rk#ajl@<NR;ML0_o8@fL=Ejp?`X;Hc%Un#d$d#k#Tee;mn3-n|!@bgK79
z1DK9&P4VVV;Yt{~^q0_QG10S1^X$`>nBL;b4xM?q;0;$on)72&Ez+{(Tf6Ip(;s)c
zKgvX=i$h5Jq2yyO^3AaRKPVJ#0B+G%k)+os&HFn`MS(zA6m7Lel=*QRPa93NNq+R3
zq{C-v@xIeHrq_E#1g}gCu)wJvQ-73}c&!;o(;lkZf@yE<R@qrfsw0A!lasma6OI8(
z7uOz_t3&f4eDCwLYzx-9Vx(wa)NFCBa_tQYFGMeKLU3!4L20v|zbypC)Ns|df%n7A
z_7g%U7YW4nDn?b_vGWSX%xFrFFP1CCx`)S-?Q>RaJL{7SGkGQIrQs2I4(W&r?|xc>
z>H=+2<}}vOmZ8}x$C!8cCng(XD>e6mG2-RWZ1NrROI+R2i;>+7v!5D!yhnk&Gd0=`
zxCZ@X1*N^lKPdER5$iypn9uL(Z-HH0O^!%fB5D3GE8jWZZvYJ|4$a@mj#=x&*)t1d
z9mc8J79y;FBurJS(OWIX)W{WoU|R{5=Yj-mDN1S{=P@TAiF_7`&%5A8CBgu{qH%++
zKAWf#nOC0A?2Ke_3V!yWSM`<)*Ii2=ClEMI?c~xwrgl_4>OgD{oGhW$uCf=>+Te#|
zY1urFeS&-W(KYC)f&U*Angc~!g@v16cDWHTyK37KlL>*GPt15R8{mf0{X&S|m^_W?
z*Jj*1&9afKAB7}vzL2euLTf#V`9LS8t8m%gu-PlmreO9;lstW#F={09qloWm<?rp=
zHxALOCnukGs+uR5XEp5?|H+-8JI^01f7^RbP<S65%%ZF7?rdy(;P~@sN}6ps6P|nD
zIpN3M=W%b!)^ys2Z&{oJ$C=05Mruss@Ccf9ZJ&FC8)Mp1$N|FZzFq2$&CZxMk4nZ?
z0Tz%{Y`*gHD;f2aC`C2>tIO1>HM#aIk=6Oqtk+*~3jGB*8yU66*x@77#|><g1Mv+x
zaQG$N#QAAE@}yW>1{76!Xg2e`YNW$x)=?<-chGG_c^?w!@b9S!0Ll2DM*x`#;Ck}%
z+}MfWf;2`rLsqS4A)|qqeqyZ?NTL@fYu}#-nu7Eq=zX+CK@Z);i5wFW13SUf!h!Je
zC!PjCdH=x}Z3Pd6<hYkJfUFB}y3IuVZgl&nyy|cL!wcJxg{}p14TS6uKm4&%*ilAE
zu@KjrSc5a?UYnTiDphg|*6i5A-ppH#{l49bP!Z2bao`5LR9IbBqeDo=03!GffpT;4
zl1SSrLGc8eTQ!!}%ra^g*ZX)dTZ|Vx&Dt4QUaH6MZuynYMffHzmA0sIXsM<pj5So%
z<4vr0z`An)g94@DVUE;gQ~ovO;WA|_&B7LsVtGqbLBkPSzz7ol>4Qy`dah__{y`2-
z-I~g{Bl=<6M>FeZ)cAU&L&j9UO>TdFWU~3NlxW<k3wnlpn>D;|UzyVjtvV0_$Jzlo
zQ%nHx#gZthzW_-Mno}0C_XNcQ2)T733ot?9$Xg!A?emd?rfo9U?0hUkv$JZk$XTEI
zS<wJLrr~`Ji1x6^xz_rT?BwHA4($s?<|ufu_L4l(?L{72TRX1``-g78XODDdmRc)&
zV#ZcSI`OhhiFc@i;Q^a1B1bwoll{~A2rQ>51abCrcVvbpiG6zk*m@<YfnU8eY@a$3
zmj#TDKt}|ftaFZwbQ;Kh*gh`m`|IGjLjIr-TWL$WmW3UIP}vZ;L<kFWeedSv94@U%
zCE!=BoaPzKMIyc;oz|p+IZ&ytL3e^;dA6R0(OwKQ-(G*$$aTd>$#bBYrX8=7f%jn1
zWnsq1QL`jiNe5q3HE&ScUARkq+lY~N4!Nq}LcRdS$+Zkj7G>g|HY2+&Q;nz<>W6}K
zBd%O-S30D7*bl4{84*bu7QNs!bbN7zWQ#7@JBtN#aOE7va*A~<G4+NX#Q&<OMXPTv
z`|RcT+$89FDTGP~nd@yWh2CZ#p$&D;P<ys=_4bAA2yL}yO$N}*P#U@Kif6{cqAEs_
zV4J+d!A@}fMzTxxCll?~Gjb0$hM;^+yO(!Q4YM7wlW!1kW5-uSF91L%Q$GPf->?V{
zGx9?g0Jj2GV@+=EVgB}^A)nMru3mId4X@p_K}7E@$7gu5v>yFR3z9PUnIQW?#AKcL
z@M=~?{ay(BeVg!ah4g#s0T}8}*C;BJ?B*O!@g)@&hJXIN^s6#!G$Ggp;ODkarU+OO
z?|sU>RCd_$<r-IAH?3bHkf-{R+&%%u)=fKsIV8_1VB@4G64uEf|6EQ>4~$ez3Ix8H
zr$ej+by6fyLHUaVdD}e{5B8W^3&3M_i!o~ie*6{Sh5LkjyvFg@3K)lN>g}DaLW}Il
z>3jI9gmP8k57x=Il<e<-V`1L9Q;t;^8(1!^jztPBJ1m*|$<3?Sz3*{R8*9`|zDZ>a
z^G4cfZ~2D^6lXyo7yoPbzY$;ol7I>fN~S=J-`qRVON|ho<JQUQiQ$k91z&)qOb4sQ
z?x^%1LLnP}PyiMh`Tc)dXl#%C!>t2&<m%+ww1+I{zD_*;Pyjge@6!>)-;uRz=IMz1
zY{lgGaosfXD0VlrUL9}_J`r6}{zY^p0C;R?U(~cUF9)MEc*-)k6D-Z%d~t><#_uVn
z<8tOkR)Q+=bvTXX`Xa1nj3JyxvAGQ?Wm}bQhA~t7dVwBjbHP5YObrhgKTdh*{P1`>
zV(pIY$n#a@uE_~$2SY9m*F3OH?TH=t`U--=GqV*-EAQaz#GF`UYeIz{+uUCvT2>(k
zR&hO1%^a<$*oR}Rd!2jSGTLS5wX;kcf{+d(Yw~#0Pu`p}@lSHU#x0bK=RJNB`yQzp
zMQ9~6t;uHZOLOv%N{qngobpu9Ewx9xxm;;{zpK{OXuu2o@i3y{p?=SO6^yn*su57c
zU0D24EK!BS*Yjo{e8$T$kMdJ_OKkMaQ~TDr$?&Sa?GfYc_{{5X8KHyrvTyjn!pM-u
zZI8g1APnSJ=?uLhM}Q(P<XdT=;OwnwpBu5-wZoE-tLwTNOCT*<>7(9W<OEL`GG5rD
z!^|AUr?;S=YHx-LMlz3>sCONC60FQzXqLtzP^M-Dry%%uQ>bL)B{T-a*e3!WypX85
z$E|PS8$Ed#-40%z!RLEW{+RbtCDrv3fK~$Tnb#l#K%(07CUpWSjH(dr)0N-~z%C`J
zCWPw>{KzB);l-Q@V(`M_kzuL&>I>rcYwgxKTAD~5o7~yG9l$Tgsulb>Tzh?vwlHUU
z^?sW{Z$Q|OtHS$wm7!VwRO44-y4WfC`;sW$a;bY}t0@I2cBNTcq)b;F%X08Zt7||u
z@<HK3LGNv9J}$<->r||?>W>3bX)5%282M%>rQqIiJ+|psVY_&&jZ=V(sgCU(lDv07
z4^zvK009204?=Sb=0Oas%H6hHW>0!u!4x6c@#rRFHk?C&Jak?N`qD7K_vKVqxXYE@
zV3X-eI$@tw6=Imz_X_cbte#yav}Ois6&NI9|B={zl18rp^|Im~0t-B}YQ0!e^d|QZ
z9!g5>R)Rf$ZhGKT!f6$_y<SNla#@8?YL>I!pggDwrgybTvKR`AzixOZzk9Cuoopd$
zw6oZD=DJOKUF3%PHOzv2H9|_}T>1x7o?BctVOJ*{m@j)@ud_bagLt5Mda9ec)3R@L
zvw?e(D!3}XLuPi<l6C*3EL&_}Y$d9hd^U~roEf+*hrdMMvvrnN4=aM!!QfAAFUR~u
zYr+e`cnQa@4WOV`4#@OOkQ=_O(A7;34{luu4bk@Wn0xfvNax7DW<FGIsl-?6S?Peu
z{Q8qUCdLQe{1q|MW>>VEM!PA(wY&64QLb6c2vx7$h2sa<gTa$qBh?iROo+%e2Qs?c
z66Z9?c=wLKTuM678vR=OZT0o18JBUXayMVAB4{ahh&XqG?}HA;c~C&s$Eib??>bs$
z*L3Pq1&>pFC}%Y<mD?T|l;3xAI3If{cB<g(=>1wrYg3`6*@DQcm1@0Z?I2vceYBBL
z)=Vq&&$p9s?!}n90;l-VGdZjvpck9j8H*KcUsn$7@|>xh<+{)~A5J@iVD_A+akud~
z7F%1<P1U@<86)5h?t7unpmw)Wezi%g$4b9Q$F{u*LcJk>Uonp}@7sO1IYG|loqjjI
zjNQ(2T?t+oge(+9^Qts}-&<H};}qOb<~klLrFnRe7#rK=a&!#2DL(<sx~RYP_-WcG
za5si?7M`znp!t>0Qib{;GygJMok!q>ntTM^{f;8>zW`slZiuwXh9wJmbFOSh^uPCc
za~lHxf`~oj+PRAZY~Q(Yh~pp@*q?n|*l(!WL&%O2*CCW86o9?%0{lzBl?CYITKw6^
zg(6-7I#)2z#s&8FsA3f$r;|i1-An}nR+(KM!11(CGjTfs&2DW&{)U+$e#6XuQ0}k(
z-ACykeoFuA<3FvOw1)p-VDf`<C-JvvQwP~mMI1sszC(!T|8D6-^_!&=oO}T|Ye6vK
z91xGX0ZS+B6Uyz%-{O%Sz>2CHMsG-({zq0+H5~>^)^f`OhC(z0(ug9!m-atse1%C5
zRTAgggP5L`+KDZmI|E7+B((aO_|T4_#1}-_NGv->ik!xZ<e8<Hqm`o94W~7DvetgQ
zD|ewO2(JlsrZ{z1=Gdg@=H9GIqEjIZcK;h8rcLACW^r}|=9dmA$^V1vrLd=Rs`uAT
zMC@YwS#_996-{75*k{E2SH1~KEl;|4e&s$+NrXJxw6d(!@xa0}Q&Bs7kvsXbm1%+d
za*(o#=AzZ7<q~1L{XDkJ-|I@x@V`Bz6&gTUDOSSg6iggwF_SZ%{_HY~L*Om;SK?Fe
z%^1}@M6Oh`9wxpUb}O<YQ%+22ys~%OW-)2CbD<eWRu4CR&<#<JQCOq5KQ;1LyicgK
zt}6Lx)Y`N*xy@!ELp|so>viD^Gj;J%CHy?jWsA-i=Ig&fTMZs>9KMcutm|JUzo(B2
zY*Q0;`!IwO&zx4t*xq31`T5NUy&3HgyCTSG6`PSTrAqScQRyvQT<XPLUT9&%`Y&)^
z+?gDoflcxUTj)Pe(X4<Q%jCoe8#{Nqhyb*J6+4u<&?Sk_K8jShe!SGz-UWf=WoZ1D
zgc*TM|2tJ3yzC~@yOXZrC0nLfKVUsSW?^kKtN=HNs-4!#C1eW~X_7L*t+v|m&a0eL
z_wFT9+-n^ZOuFR!KtDS!FU$+dJkyI1lmCOlL39xjc=$;)n50g;$KT{VGUQ5g1N9Vt
zC3(7g(!yTfHPN~zr3+ImReH5U#!!#S5+q;G5-JbFg+9Ush7|0>F8!=ch<p)Eb9!su
z9O@=Yh&NGN)>`>Whkx(x<U8E-aOLXp{I)ScwH4F$iFeS)jmHpb|E=ytd5k_tZ$vM+
z<-FwdO@2l7bBt5rIX>JNogLk<A~(Teu2yXoWXBp_s`K=HvnXxIjTshDMipM{{GLVl
zg<Uf&bt<raIy=#&lhrThFNlWe)N+I+q_PYYNvemR#w^dXg0yHFa$S#=R*>5KXSxkL
zDu&ONTi9DPM^P)Uno!n{Y)cphj)6BfixZ#JM}XcUg$%&M`L=&hcr{od>C0UXlB!{~
zcL?%w3pAP<dYdE{D>vRIOU&8@@Q;cM*;J-WwVmRuVnZSwBlGV=eN)ZFYO#%+w?>3F
z?9p>F)kN)9@R0ghoiaTQxkGcM#p5(@gLD<lgL%6$u_S17UI+RkLN9R_(oE`Coo@4*
zkLsY@D^@^I681g6_M+$bf-Ahu?{(x~@{kr~%+(TNch}}K6O7N)!$*Q1@J!rDs+yt3
zwZ+@XCz?p;7m~hO@?ox8g_F?2w?AikHgUhy&X}_QtZu=LD9^;h52HqJB0Bz{pxaZp
zQgwSQ&GsHa5v{og46HGPP<qZuFkkj;>#>cMRgWLk+Dyk3ZL)>sGkGOFi)n4>3waZa
zG?wD=ly1jJW&>U)9D2%Lyj|^Q4dQE!ltgGL1#U!tY^|R@6TWv-?CK5Ow_`WS=5!2_
zc&<6JRsOqVA)&h?b~ko5>o{I=JiK$-uzs(X*(!>n#^vfW+V<Qh=QSxDg>)tPpINxM
zUwJ~SeBV27a<xGhBXR?|x5%Knd<S;BUzv4H^UJb-aPGH**R5aETrNqo=<M`5Hok;{
zE)HJ)A;1sXdHq_;u0VgLzNy*GLEJ#9v+3d0CSP{SC5Qn<|Hz$&*d6k{Y6wP?tWh`5
ze;k4-CP()gkEY-3ckO2v%6!w+<$RT1=6p5m-;cQK3JFa6fZctv&qcg235=E*DPEN$
zU*HEI?Z`GRKoRh#e`9ZCv%{glYr5n2!1lXuJGKw7{?7tcPF##<Gr5Jj_(WJB{^>aO
zPqie_27@eJ^+>~Wm6Pw)v;PNIp#IHxU>E-mU=5}I{f8I-&mEcn@p$;BQPw|vEKeT)
zOVg|s62lZgg*N<?3XMK8Ybb7l{AMyS1r$vR9OxbGZ9u9=T@Oh0IDS$19sSFPog&4M
zM{~G#)IV#Io85te#{>JD(M{1Ae5DNVe+<_kc=pm0QVALezQ6lworv&sUZo0E1h%5b
z3zxxIytl1I2zlckh~X2mXklouv=S0wLO1AYBl;D`oPxJbPj=SU*e+v8q8-@tX;>Jn
zkfklkL=6_YP0AEF6c%m^JJ2^eIXGR7VO=n-j2?M=DU0#Kb$_ZN-L^FL3a(Q>%WQSa
zj5=S|O4QD)pH;NNTn}rzdVOus@7JyRgJ(w$ZCtc#$t?-$d6TWTK7;4Ps+H^9Kgb~5
zT{@_5p7vyqIInTKRyb$l*Q~<^vO-n^^+Q9#rOTcV9&B~9Opp!~*7v++=rFYIRomLn
zj%!nz%fe~p?QeKXK1`tGG7sI$ppuzE!$x`!=U94>pZt!d2e<=xZp$7*&)!U77HArH
zx1jl9TaswV?yKE5XFngKToYk&D?cl$jhkO)W>eOV!lyaf*jR`<u5kom1*2HkHL(~A
z-1jow&3LzA31YUpW?lNNvif*PWPJ9lSd?G4?d!?AX34O(iqthY$<acmtZ@?)TWUw-
z*Pq}fY*JjN#Ej*_4YgD?vnjO@)~w*uZA-MRS2nJFy?UHVqLs)iK$qDqRwe6Afyz-c
z_f$BvXTTdX&vPT7narJ4bRu4vyLff(a?9h-s56S69qebg1||wEy>pAg)EoxqMwr#p
z-4TQ5x(}Voji}DHF6f9x(Ku)+zl&>sH>>GCKU(nX{Gc#j^$;quH25Bh`QFrZBz+UY
zjV0#Fp&`AOicOcD&9bO!b6UBBzmJSWz^hR_E3+rykKP0a$K<!awIgR;K_bdBU(Hl?
zmDumb@wyHJ)rky_C{MWUI<d(-I`^_RL2$`5PjdwdQs-+Ici5vAj_Gu~TBY1w+0n9L
zal3e9X!a^AW(>;qs>d10=0+NoW_V$DH>R0et-;7UJ(Py{5fpP3e{Yj@RUo4g$bAzx
zrgye=qD>Z>QdzBb=l$>1`l4R0U5M6}^NN2a{3D~Cb3E%($iRcHGs^73$yVR#&i_2<
zcY|9=NQ+*II$Y5H)brtixtGp;zF!}M`4w$Tq7+7kKG3<yb=D{|(`u)^C)0aMe^2DL
z<5C)M#Ya3(=Hfg1yy9le7y4qgXH;9X<4r~DNt5hfqpEU3eI&nnVjo8gJpq*9GBLi<
zQ&*8?*K&E)c%4tRIXd;()?YanB-+46Ks*@}cH?`m>h<+a)vl7v+vxkulW{ytpwHa{
zwYRRHdj6FlH)j|>!VI_JGqzR}8P&Mw!6+QDtM*QGmq$LL_3}mN>i5En0<>B@LxuaE
zH_FSkII^>V+x2Qy%kztwz_^L?GLmh;l%{{RR@)Q`{T(eHX8J+q^kYYK-v5Ev;Bf$|
z7acUf;UQc{lCsiT0Rf5T)(I9|yxcyACdK(ulACmZ!CjK@qZ3G(`UJiq0nH<G^7`M@
z=qnI&z&@9P3}p9+Llv5_<1l7GmGz(Z*T|Fo74`q`{<;I~udp3TKx*=z_t%+|{S|=A
z)cpXwX<P(obwBbLK1E#mmpX%T7fRFz4gps}h%_gRJ1hY3{=4BIkl^=|wN9#-ar^&6
zhR;ht&J{H9;0)GAkEZdlLN?B;m%%8tHZ|jeEggHU#-Gi*MXJ!_IAPbAhw$1khuhWC
zV$Elr)SdZ|daSG;prK2;0+VI4QcA_T*%#G*V&knHx+0#o!Y+b+Y<)y9@zXs+gqN!#
z?=o(J$(P}(H)kWkA9><A7EC6JWZUsFJ0tJiZ?lKyR|9h#DnA)#JRH-i*cKyAy)qZA
z)H~C}?{>ca6{(Upx3|Y@(VmrZ{jNTz#vEcoRCy=0^2?e#a*SaumHkqJ$8AGZRtup^
z<_}T9bn(nRsc$=tvo5_Z^g5oYFSc&eK(hTh7{8AwC`~*T{?6Z_s1t)2MOf}Ftw1o&
zhhDvbNv8;b^B0OLh&tsXDP+cA#vi?S_MV@9wyM&fxkym_>9kk7?U=6is!r+X>$Mlb
zkLn9_5jCli%3k%@7A|@lHaL(envIIee+<ClUB+j;obB~sUB@$#E1R%Q`fBQBGmTKk
zY5a7o2|V@2PUSH^1t0GH3`YCLZxS3=$X8m+Qm<$gopsd@R(>4k8=taR^9t~EIK1%v
zxNMIYc`pM+w)21u*)22>AETW`3Uzgf;(DD+jmyg5{_(b6P-m%P>mtRhkzGUV>)`MV
zB!nf5d|ls1B~i1w+OU{*jfK(Eej>IR6ZSg(ebk}gajw0}r_rL_!@*KIMgzYsQ4#Gt
znd|js8{~y?fntcSOA9mhC8uA#C<&BiwQeR#f}$&=0e<OZ77nk;vq;pL@=b3TDL;@)
z#%u?jk8taUn3#nXCE*3-Gs%(1*^!55k2A@i{I-u8APWZvu5^>C{aXqbL+0i*{MMkE
zvSYzFh?hzyRyLg8xve}tLVR+`Hgok;LUEdy?eRO@3f1Jh4^tWQQCbKk?2lHDNnDnW
zuid3)y|0STH8^<ZmL&|S-u3ILi=-0wnzZ-HzV2-S2w&eSd#RM--nF_{ZQ~XA7J3GC
zum&lcY>x|X4Zp0uomkRjbMx5)q@GHs>zdt@Ue0shjVC>Q?&q&j0UZf@&xoF0!E*9|
zx&UdsNn&+{P8>>a@367i?zFp?r(Urs#rqvUut!Xq)-pi=U7O(ArKPRdJdJFamqF`D
zeckG&MXoUOJugsDH8?BlyNYnno1Ts@Gw6?<Tod|rVD%P*(Gar5=)0^GeNhdR9o)^u
zjX%yJh^I`|`eA8UUytH^g;Vjz2LTK2T$LsW7f~%e>`o#fq`ReL0_*9Zs_r$1G?grz
z-t3#;R7-enSEXq1?R;FG&8Zhb`er(o;qr1gN-Y%Kao!x!8&X;wvb_<Foj&I~^lmYs
zEVAzjBO|M)A{_rrEP>7%MP9bkWg!A!T_@7#0kG{EJ_isHnS5ljYmF1g8rRO9{|#j+
zMe)W<`_$8oyFAtBtAP=E|C%YQ4W*OhNs>UzCiDwp{2{RK03MMi7z;3ZF^deCf|McL
z{xrWtNMdOaiy1$;@QeVfV;~<km`I|B19NT{08sqk1gjafk|EysJ2A-&*vxK;LN;Ff
zZ>cbLGx|j4_0O$Z^Z!In`u`>s-X<{svWT{BKcF}8w_SLIp!_>pgWXZxK7=B^(-F^|
zpfwRkZy-J=(dPtT`a8x1ha4&wWdn`NI>1Y<Zu|Gvz!{=Gq6_RMN~ArZv|xXiuK{+y
zf?w6GO`xo15t1Ss?WdkyiqU*=&Zpl4N1W>&3##0%@C-&li)=YT2{T=7{jKGgZ<v5c
zICr~%#+&ospD(VYer<R|h$-Z6PNNq%7iyDu9S|$-riG9i2wcSkL_4Ph0X+NB2gt*_
z4dViJhc(a>TiNl0Zk|fxSHla!^h2G`pMK*qYo*`&h{M)3Be8zwc(4p<C`DGCa$KPq
z>?s*3z3gxR&#r?`W3vYhJQPQEL_>XyclO#7#}bYn7v>VUo{Vi)OtASn3r+ee3dUU3
z_I8iasm899?r~qw7k(R;ckTF`M{autrq@f>2uhP7Q6@~U&{B}UM<3nBy7-dv!k2PR
z3eY^N;o!ThW>cC!-hejPvZ{(6Ui+-4bz&)1Wf=U{<K=nicfeG6<eNCQEt7b7?2Hi6
z@UHgo6lt*P9Mee|oH34YhOq<sNka0`@*0QD{=TZpTi5(No;S+)81qPrj~*UGiOlml
z+KPQoA=aV2{@d*spBc%46~lg3!)9ll35gDrxZ`MfMQO__Z?|Mp0@gZ7WkJ}Q6{K^R
z5wFu$_sw&FWJgn9Shy%_Bn@P>?Kv0;@#Y|Dq4Jr-FHSCd!Vep>0#7CIU+(@&2yI2y
z+UM@tI2#y2;d0|yRktihO+l&JUCe~wa`t-^I?8;kdYxP!^EgR`cp}jE`y@Z(01)@y
zSlKiPRPHR1vkQ&koRE<UVi4+QMJGx~NY%U$?|vHO-)OJ@rY7uF^yd!~WztHwBVDu!
zY1ykRN3HcUNySRXA7<4>@!;VSBf%=~a2)j7t1^-CY1%=xC}DGl7)eh^6-nP=-s^_1
z{IpGJMd7lN#aYW|)N&x(&DUx!wHSq7=II}g)Sf5FC)kY5h*ee%&DO%@)`K`0@w+sF
zH$LDDEF8oHFoX&vQ+=Kr$jhM8j{HhCJ{>apD<p-8p1lks;HTy9l=}wiMXb#?+K;>(
z6oqxsT^T$DbX0%}qv;QdI_rbL+dS88%yf%QaeVC>HAAkGDVmJNJ!3Rk-R?7-XuE^k
zhqi;_*%>W2ULLY=f%q>yn=`bL%3H95Xa)9snArtLEOF<MgPA&I6_@Xq_gJCXQ@RY_
z)?bMkdN8ByWp^b(qTZ}EQMr)6+|WD8bv7ES5C^gF|MlqGAPW9^P~!1}S0zQP&*%qZ
zuyw`j2*M4w>0|89#n=78X7#x90WKV4Ar(X!gOP>G${&_7a@!TbQebS7<+gp^Qp_Th
zA=LS>?#%U93NFv##+t;JldYUmyIbaBjp@DVS+~l-1-g&Ep(hI6pQ(h2SEosNye~=Y
z4wqUOLD{)D6jMgr(Pt*ud{wx4eGM9Bz-T}!2)Hfi=#$R(^jKvORA^D;xjRtN7Sm@K
zYWQK7KSV=p*!a87BA1j6ixvaND7LOeD|R{Z*0&<?8ln)mX(Gsf-ZQT54Wj-QwbMB>
z1qlaKrz1Cr^+lX>h4E!CSPuu1LbjeqnrFX%T=Zg~;rhgSEy>;e$UV2Tqa;mgMWvzg
z;$YLzm!5=m&eJz8sYi<3E3MXNeYVj4jdZsbIn>o|b~bjh$DY}ki7r;)Eu;L~JV(VJ
zptt}LHh#5(Ou=|ON^V}m+0Zbr63mBlqSibsM1#`4E!JJe(X{r!Mjp-U{4m|FH=eFc
z`WRv0AG1Z?CY+Ot48t&?G14{-HzAglAvioi^Qm1Ye_{n6nCwNFT$gE7`%<H;!Em!a
zo3PcdJJ$P2%7c$D{tL9B(e+A4xNNoMt)LO5s>Bs+#WL67HuGTt3YI%PDGmwv)$Mf_
zED)hz5XuZ}1Rn99!dt$DtvGC72Kh`{I$SYfcaJ4fK0AC?HN;!;QpI!G$mPeih185R
zAzBCN1H|{6Ke^~7(2VSw<>TvG$90^#m<skujT)e9JnB_a40OghcYR4_uCP4}_((PY
zC|mAVBud%Zd3;kD9Z+`?V*Y-Zsn+>~)~l1k+3A@u$;~78L7CFrw28%@c>t*{ly5f)
zq&Mktq#{@P9rTv{^cmAfgPv7~5<y#txoe{aHVkPS{^~FpwHK$Y`X*}P61Wtn1kb%Q
zg_`b(Y@cim_vEdp0Pg$1FKfTPvv0G8mMl^g8m0LYiu*LD?26y$<r>|tlnySii<wIu
z0;r8Ds?kk0iF8q6UGDRc&t*9mYlJVnxES>)ir~Ly=s8_s{E$CZCOrA{Kr|=m+C$xK
zi#s5DRzR_QKa=ov?`a7t89}#p<c*2p`QQcC-y(Dfm?g!XAy3{|G{1PRcNw^lXYBb6
z6B$(sN;|%-aY}{1xy}&(;$qs9yFB%dzq@kO)kBdcGHo-TUONiC|GhdK;X9_ATbU~+
z#TlRZXXU32)JQalu7^HAcjF(09~th)1|&AhKOh^te=8!hMG4neNLe|6Wyjx2$P+rz
ziOdcX<1ooj*761DL}uqs{5a6R*>SA*p<lVA5qOudC)HzzZU#_a{WdlGU&us%_n`Xc
zWa_{C{ok4uc%Ww^({^L9fLX!CzX5B0^uKvvZBvpM&yclscg~O-b<+TV?h76EPh0c9
z+nfVTDNHw63l4O4od2x*h<|D9FnuSF!gfQA0X9Oye*))D&a66g`whl!w9YqIsn9d$
zajbS7eD!4o`dP5$i}cS-(IG3=KYiiIoWg>L8ipFm^ow5K;$D(@vZ3u}9{?UFtCeJH
zzOiRuo5#+iQL{UE%k9aJE}U8!->(bQ6l*!GD@@b+r7Y1%;tPiLRM}t4DIhzB!}!Ft
z+t1{oxxh6cye4mN;@Na3?6Oiek<C(7-p|scv>N2ws;98Bj&wcs%2Xd^bJ}1V#PwCg
z9QO{&-Cer0$<)bVS)Qv-yyqJB=KEkfH{YcZW53=T4CslV>Ihh*j+3=+45I1z9P^0e
zeJ8uQ?o;66G+#&7)NvKX$+Cq$WcAQAJ(T)Zl5yBQ3$?U7pSy5XG<Lz^>;$+N<7jmb
zRhWjkI!#Wl83&`iKBw){p@?<m4r$V@%*LwCx7%?nbA6KVYSUX~V%>S${)3t~CyyaZ
z(WK3_yB{~|s@Sj5i9G`dmq-Yw@V@VB)?#`6IVySSU8CMyP}Pq{rt*Tm>}>C;@O-DN
z)AQU{r&YQxP9ZYEiLI02e0Z?95l;1e!7nh#2q;%Ng>M<QpYJ@2vlK<5qP#{KjC)eT
z(tt@>yDgSffTca-XnRwv38JZo;9yfWV#!k80;E0nbiN-JpdGmC94hS3c+Qjim*rfX
z0OxUfU3Hvv5SYE4lX}Q(aDcs|P6r+?ks`Rly>Ki^)t?}uq74D24z4IV-*DmnoYt1V
z=)b#5G~O90{5bp|K@De+Z(<`RtIo8hCdsT4xRG!amI{Amsb`=>vCAfy_Y+pZv1jx8
z{p+@x9sHP1^0-Z{WI$2=B~17zk`0NmGe_DC^2VDODl>OF6ZJc6I$WJ9^E?+eFczPh
z+fB{|@C|a;ON-@y{0g@75XD6MjY9^ooqKWicR~giy~5MPIH+NvGfWl3W<w4n)48Ny
zLiLZ=AHC%s;dx)#^ze)Rp`Ey#5qI~++9Igg=jiQc6o-i}e00Dym@Eb;WRVvpC)a`0
zqeOJ(>RA@PRZ}~03Rn{V-UXCaB@Yn@Ar3JNmqzxn;U0-(Zm%q$=V>wL7NW}bY1MkP
zH9@CVuO%<H+};;N9nf>b{nqD@@X_YtlzFT7vvv?fu!I|VjQMNJXMKu#A^=yFds!j+
zSG=^nyj{@UzBL%faWWr4TjQqsHbKoberV(ki$=ccVhK^8z7KbU3%B93<+TempAIhA
zy3<-r&5zBm1Q%6QCDYu$E3Je6d7y)MSz!~<Qk8L)lC9)HUmjC$QJb@g)}nttyRo<%
zI^rmyJg3)T&RAV(q_R!ii#egw!i(oHwx9}9C;LfeuVTOYGsIKAV?m6(m@~1se-2k1
zXabFczqawTjG&6MefUTl>WDAR^qCSjQU%?lrHYYKO3*&1Ksg^7;Pc##rYNn*200dc
z^_ihkzOrzO2KCha0DW4Y4u&No-=6~?&CjUGpn41epFQ?w*+-+Hq7kUePS?azrXTAS
zZ)U11NLf#BTKXQygzI&ir#doHu~|&A38!bYMb2YGBn<@%Hi}V-4cCc0$H^FVIVhWV
z$Nc-sl3+=rBsN1|lUvzM`3BHhjj9=o{-@IInt>(9IX$@cfTtVorLZZ7v2;#lR0Awt
zoV>RbPWtIyI)@r=l>6Wg_A#BCJl1$+Iwmnu42u6^=sNs7+vZAN_UR9OvvwkHuXacc
z(H&ZjUqmLgNw?=4t7;4vOJJEi73byN*i~FLOUBGq!jsaUSJHRlhoSF`8WHp=yO#<t
z3)~JefWit%O1Qv4AEE3iTV^~n%b0;(Sx=dPp_iF<%;*m4B1|jnGX8zV-M2x9_+TTo
zJwrE6E<*Gigjq5TuNz!p{Ai7W9ad)BDUDIu!<EB7PY}WVj{pW93cc4`TAEuQ5&O!r
zuEtQ$`IJ}DLy^Z6i=Uhw1;>4I1Q-6GU|r|r8Z6k9*fea~EMC)PVZa<$K9I_i_u%^>
zoAQ?LY^Z(20F}Xg^ee5vX<8*hV?K?^vW$p4<dUopu08hxZ&h_fJKf9jGeRaUi-LA{
z9Xxp)rY<j8g47$9B&V6}RAzeJ)K%(G_d&O)H#)`ql`M=WUeGFW$E>u-a(wcjkt(#h
zh-n3tCpKKX5q>SR+@j&Ru8y`QMIL3eazNM9@??0p;;4FPzTA2sGCaGcBCOrPk$8S3
zT)pO*S<ET-@7L|^b0Yr|^C#8irIjs_@m9zr9koT(nKB`Y`{%bV0DZZ%f5#&p0kn|4
zoiXx5k+(pFErd8`t2`D&G*Tj#cuj8oD;k0R4UNbl(R+}!pZ*UTVM)2+_9vH5dh-Mo
zM%Dct6`lqfQ;$fR-g8_8L64xVSH@;Z4P3UjV>;NEq}}<`k1jSI0}ZSt79;|H3&3P=
z=%Qyw062r43rBYxWDrP>p8y7KIRPWl+FR20egTQen{`!^C>JB5e*{fFQ|Rpagi<Tl
z?+4pVteND<Otu*u{^|qtYx13i2oQ(<$5{#mjfaYN2w{<gBLGMF?p7QHs9Wo{+1Ju4
zA_Mm2>UkOuV6-CXA;#PaW;!+Hm7|rd&P_9W-N?AhY~N7yHB>@d{4N<^exc6-fk9OM
zLEgMC-S;XsEmcve_(H&kBe1>eG!)J@o0{XUn*N3E1rWU#<~0xh_F<W1mdIep${GOk
zoEoi>6*yDy|KepI*gDIaz!_Kzx>BA@T^_Tbj}r~7@VucZ1{GaFR_Ot@!ihX*KrUNC
zTyu!cv1}hFyGNd)?S70n54><N?H7zf3roJ`7L~GlSQOR87MJm{JuBkN&YfL{$@}<R
z@>t?LI}ALNE26~wRT8$@ZE|DA1?fIrL*{x-93s=0!7fI=Ph*A5F)4E2Lcmv35%{tu
zc8^#mq*a1nO@Ec#56TUef4MGPJ18FjCxZZcH-WaYbKowA)&KKXS;#lY<L~D9qL~2N
zqP%9tPn|@@L;89QH|t`XJNImPmCOyL>n?-E1T%aJ8rL3J=w`=aH2BL-<WRobyG}Vm
z&(bK$y<~RQpUzQ<G8!i7nKK_JtGO9<6p=QErS}{iYF4~vcll}EkBxu@PwgYafKSTd
z-z#F3kv)1I@-GFDZ;FHpk3W%a=dO+^N{<yw=%Yk!7QjAhRkFg9X8~7dYg4b~2fRGV
z^J>XfcOOqLI87P6QJDPKi(g=aX7^F%%RF5<eAVU(*S^~?rq<yjT~YuTz5eYFiraU&
z+WFf$*$`n3BJN8m2B??5J=-u;+K!s&Ar$C!5zhew4kM1x=gAUIIPcapJS%|Y4FE@A
zchn$<P~Gob0Dg9I#2bkB@9>%Eq4L)g_^ca%&nkhkb_mO0;tBLntcr~E)fXSlPz?X5
z`Z2|x!h`)O#DfPonsEkzRl&6qpsRedpTq{_(Sib_0Q>9SFna%M*BeNt1Hq6CQ2D>S
z0i-vAWTv*Y29`m$O?#sDu!OJBlVM50-qzmMk&^gD=hMFw&R=<P>C~#O^%t3sSSq-d
z4{PN}QAK``1dZZG;mBIjY5jXz_YU7)J9Kh9KVRK<N=9;66&KkOEnBumUGrFV>oQ4b
zu^0mk6=5shyge6AyREw8HrCu7^fKi^q~1u;t4+5;C;gO;y4}sCbD7U|kpUf0b{C(1
zw%lL+XKc|7+w%8VTG{yD7D%AMp&Hq6T@MdMtDW!|Ok1@=-$vy9yDsA6x(mpVM41sv
znRPpsRUm1A6b~Tgd_42X{=ohFrWApb?9jS<m^21(wh6c=e^7jk0lq|G7)gV{#}oI=
z*G)3Ec%~|}*rZF=m2@<ALz#t3Ty}|oo6j~v*a{v<m0AszMYe~)2r$l@z?T+-`18Ha
zOp<}56Kh0cmg2`1Mlwk`z&vkYB3gpj6g*YzhlIMfBd5L_)h0NBSN`-Q?v3XCnX><@
zv1bp2GHZV%(YkFe39YHHTGx_jOWxYHB)>kDO0_bfl6#1fF|Sop#Gu@_#-?=BPP(jH
zc}eJtc5<n~$RM{OW?aUMdFS;#!`l7Tw|{(p_`{s{oadb9Jm);md9Gy|M4MoWwAe3H
zktIjnz#G13I#$XkXm`5q=o_w_U$rURj~^{7x3pkrod=dlrl;WFXLqqanYLcW7U+Bk
z&5UUue+)ql7g{^)i~0hBE>4k@X;;t+CYg7U-lE=x;LG~ltWjQu(G|&^WoqFJkN6=G
z)xUb}XqLJ8Q5us@*E6ocW3)c{U+V+c6}a1K;;?=LhEP#!ilpuuqv1-e0~6wBsIx)=
zXD*Vt;BGAA0dAeXN!Q|IS3z9%=hz_g%53*ckv1B@4ZRN&W_2$o6_j^hC4JLh6k^GK
zPUnQvR5$t>#Zmop`<IC_{nI`zbt&Q`RPFfALrdRuo|eAB-rh@M`vGD}!@a;U$?3O~
z)gy*i+k4yB7@q60)^@Sqv-EP}*~KokCHB?2krsm6{OZy?p=XtyWj))e;5Aw}ro28d
z-SNrq-mQJxDZi|mbJ+f5{L1`H2ZbZ=izOMj`YoY;=Nn$riAOxq+sE%V9e7-?_G8em
zKeg2zPGo;K60o?`SnbY8$?YYF(^ZZ}xN^0r4ng0AHEBEyl{{1Z;F?}Tk6$Zcms9kr
zC&bD4$~$vxulGq*0)5ho(M0md4>+j&J^lbw<MogoCJ#k&Lf<Kpq1FbFtWz-};Q*0}
zb)2P)q|gD+Ey#=yCYHrLmrIzFA#irk5S(Se<O{F$rCQS0`d=2`9Q(l|(=6HIQv$H$
z(pi?=4Fue7(HhYSoioM318(06le@B275Z)TRGv0=J$>TfW>XXqzhxg^XVu~SfYY8m
zw(R|45A>xu6B%>|69cy9nCv9DO~<y-ULs?zwh&(%RmjCX=)%aGgTI1nF!l@+Dn^3#
z-$dk_SKJ$g+zQl0D?Ct7?&4En0}gNPR-UqOZVcRQDqt^kVJ*%$1Tk)*N-}eU73O}u
z84Lljt+bb97}(^`fw8nK@bFKULL~kTu0gK0W`BcZ3^D*@<umRq$YZkK{^C3*3b{=Y
zMt;$_{2zwE(jfWz|2(+Q#wvX!9TLHi)^wB$ki=6%ysdP&&xg;o*4fPOsY`D)tSV0p
zR(Z?y3AU7}7?Qu?i35J3(}`!OOg6B?v*a4C5>>CH`?hsXiCui?(Za;2vtGLkNlDsK
z?~9qeZeV+d`?^zrK0qZ}s)}fb*~AoSQ7%FD62n0C$9aXs94^X_BMvOjQT<5yuiud`
zyE1#E_WV5fo$`PVL(Yf&pC0p9tmAj&LHtr+)=$hW6<%_<b5`|J6O~cZu^sZ`G96^0
z31cvjSNLpiiQXB0{Ij)T>0ZUT7tF@xO^2$k+J~Ke_+rp;Rk7*w6o=JJaEW^;frH*(
zbPAp>GJ%+|3N@SCD_srNDPTN^1;}5`LcXhW5?{y>IMH|foc%sM=7;<^2eH|NEHeHK
zOEVBRO_JJ$H}Cv3KvB1~5BIWs<r{vxjinT)Vz4DObD!7Mjq|Vwq$3F(NnuJ=J-`dW
zhYGc$PxwwM1FC-j%@*PXL2!TZ#94FFj7bUcC5twvP4h&uB&AqYXp=6;=E)CU5r_F)
zHG;Dcuc{!V1<F&r`R(lnOkG!7L4I<V)zN<|^yS$(zXCI3I)1GZw*P()BuS_IVkINl
zhE@(@N63@rdg^e8{WMIhw8!ll1;8$@aXTrv960;E*Tf$;x{hujH(A7C9R*0ia3U26
zy5UP+^hEczccD9Vz&GBcH$ia!$eNKg#^o#YlQt}gHu(`WXa3j`CD6<T@tA*Z{Qmy`
zb>nlCo4PWf+R!#AXgUbGK5+an*IW4a6j=f%m||yV;OrD1K{!qmhTDD7paJXqvOA@A
z*Ts9&XW=RiJ1*xbiKC)ktIMA9O*+#G<r-qL)=9pKNX?K<(v7^$(zl(+2ja(g&dg@d
z4!!JK`-S8#tx80`<s%#Mds<jO7E!wOH?LOpy2FmgZTv}I-^ihsAl#2z`~zW;d19mm
zA>w0WFy2BjRHAYjsfR*=yC5&{7Y#fAp*Ly<=^VyaLdyfmWfbTYa4=1;E^mN7A95eK
z6<>e1--%ya>7m%{*6yry`mCi~s4?fDyHY~*@s}IrlQuGY%7C!1*&4#SV<mK3xlVuN
z$9mezQ#RWhtZprA{iC7%50Pi|>i(Q?@-Bz&6bFM89|$G<60Mr}G`<UGX{GZoS~<fH
zBox<)O$WFNPY$|!@tMyW-6;KQW9~h1^pD6qlJa)<X6-ZDrsW|6l)7!9H+Rf~sD07$
zGP0Cu6wWdYI3VaEwE1V?FHlbrU5zSZ-MK;()WBS+|IcnXD+|DK?0~z^#*{vi5o`Ww
zQ~vC}_Z>q8&p|YFbwisgq53NAxU>NBTR$C=b%^7A=aV`%I;2yJuA`;f+q{>Pz&}&w
z!-ThXa8v7!<{Vk~>o?ktwH+h1dMj`oiy9Wr6dU;7Wm&@I*Uiu*vu)>tOF_9oIr7Gz
zZsgrP+;~fdJj5RR2An@*0Olnc3s~A;r`!Tgxhl+j6CZH@tpx7=K}}FZ=dJrll6(Zn
zQs~k@S&^Y6AL-F-Wk_O8A*u}TWY!P2V#Lmaz-gO<Yv3Ko?o)=k2iuQU<j8timCD&n
z&*A4dd-0=p)hSU@wXhx|Ecx7lY{#P4GWQ#H4Os<Pk^HUB`rl~tRy;cW!Q#8gTV5XX
zgC^3A<t+|H^+m5`Q^Oh>Ob+jQJ&#?9e!eGY$5{;aL<{|!k268xJF=6CNT1(<(&x7c
zS}`B%F=z+6FPH-Y6;uczNzP9%$VigE;4xijnE0z%$)os%#Yb#2$U!RQ^T))sB6hDN
z@{L%XXqwPd<!Q9b^Cw~+D@s%*W!!CT!Yp+onu8t(bGEwd5rua|J&86cx+JiWWQS(z
zd|a>IrI{a+GN9pN>PcUJIq6@BI;e@5BUo{U#3QBMaoE21)9Oj~2Q7RBdyor-EU^n@
z;n%1zE0NOdBnVEwL4ST-05A6{WwOg%oH^t^o<*rE8>1cfY`+-6?jOciPzGTcc9=Rk
z%!6z21cO(>c*w*>_;z?efQ~((aq=mp2MtlpZ-4|hxubNwG0%3)9_>5>dAO!X=1|am
z7(5BypWq4)v0AtUmG~Crg6vY=|9QVl)BPX{r863$#8A<wFcXp_!anQf5{oPZr=Zjb
za)B~|qx=#(ri+NuRykmWWk&Yn-8D}aO)%?o#q($^WVDZOLO|Yh!p32Wq@*ogkFprg
znPLJFzWaQAAv5bMmcTSwq7h;8{|82$28R3tu>Kiffzq{1z*-EZNL--g>JJ#NLYi+A
z@Uj)~0-C9W`tj4)OQM&&{{~(=Y~Sa$9{SSa&`LQ14g}0oe`cOr(L-32bl&8d|Lxy=
zoFbWsGa`?sk6Jt>U&)xr)f=BQKo7B^DDai;%valy`(EV;APGdn86<riM^hzrb`Kpz
z>FxAC@Q8Z)X$c&(bBe;RkRDc-g#>D^;Q>iR1w#f9T*H8@@c)gKaH9jEw3wTN`aC^r
zz#{p)S<My(u67l5N26*8_jWtrJ!c><Q^Vxb02a_n93rKaaAR$iH}WBiNoy}rUf1Ai
z$d;1FaKsa+a#{QKt0^khdMlDkjRcw^&Ugp0rECt5Jvhv>=?ExLJ%0~Jx^xF#t$)IC
zzw=_GLN{@fpW^6(rsLdglSYKXsCe%HmyC53Vx$w<2UT}BQcZH(eA&+LSl*^45#RF!
zd2uzzb$4$1I%mXDEvWq3zS9>D-keyGxGXztdt^Uxx&K<+^X6IUfdGo|KF<MO7wzoR
zz`47%z^65`vLiT|VbY6Cyv7GcX=THb^XRcFo)vC#*%h?4ye&^7bGV#%?Q5kC<~psD
zO70uiDZm*F1}))|i|kX}`>es?F5L?OOL#TUIgzg}%~drq(C(H=^^nhV+D5{g@~{IE
z<1>P}5{B1yem|no?V4PybkR~pb?G`CKQ7OS-a_mT`z@C5t{V`x-0wYmp5-yw(Y<jJ
zBUEUVUT*cnt6b`VJv&pLe+|Bn*lty!QEd4xODm`NBN5-+WZ*Fy$k`e$A8hb-wH-^t
zcIHy|x8<m<2wv4lH--x9vE}IG9IERSsSH+}utUE0mFDFC0Zb(7)|L~Lc-f%x7y3q=
ziQQ;rDNS~Y^jf`(B^lx3K2eDEF=hirc=BX99R`4_VR`^(U1I(yPs181AdH9F)a8*=
zBl45Kl{LwTN;lJz$wH%(<=CVQz7Nj^XgeX3_mEH<ZW|<?JW&hjj7a#qYuHvTVtx<L
zEHkQ}Fivv~AX&R$ND0(t=kRQZD2C<~X*f-qX-GzdZKly}aP`^_pOQ1V)ZKdnOH>96
z8z)>FKn^OkQ$S&|%<k#Au365k2hJ89j;kiAW!Y3&@7Vf6DSYt);tpKQ(I=@O&*d0Z
zIf;8P;TsYysGgE*Pt51=K(eb-@47j?V4&x@LqZd}Xbu&G!auRqw>I>qOaCJj@D*Ku
z36fx0To`5y%fBDF2vQ0ZmsdnzWBgT9q-Ag&k%Z*VJ-=kd!aP(qDft^b_?Y(Me6Hbz
z)Z=ofBf{IHZ0U<aVf46wgVvQu6jRNb#Wg|m0%{udN13&VJgzKs5}W&Ayp(=o0smli
zfzS0;)}5bNK?2Xl6UT1-Yv^>0(NzWJ?^p*%l}<Ajg1{u_$3Idvac-QYDx_={y4>b8
j>vFz3q~&aPFE>58kR-dpDK#YN_Ba?vjivV9sh0l$_kj5m

literal 0
HcmV?d00001

diff --git a/windows/manage/images/aadjword.jpg b/windows/manage/images/aadjword.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..db2a58406ecbd5a3cd017205443448a058e881e2
GIT binary patch
literal 62295
zcmeFZc|4SF|2KR}A}S>mVG3D7%C0bN2uUc4m`bvR$eQIWg$NTuS<8|TQub}Khmd{W
z_kG4X%*;9Wq2;>1*Ydl6*ZsVn*YAG*c&5%~JB~TF&+`7fKc6#d7j+2QtFEG^0@2XW
zK)1jjh&l}MD!W+RgCI>!=okb+4B$H!h!(t}0e^lzsJ+m6Xd4a9*5BU`S~}XT$BymW
zY3b;9(9>^S3_F>2GB7YQ(9<*SW@KdA1s?P}_b~6?wP)+~){ks;-|7Ya?qZ;4*lO{A
z_Mm=+_A$^r-quJ<!wYTOM?<@hhFS@sz+CCTinbQ@`$4mfc01h;FeOGN&>&|om_9A-
zHZWPb?b|_X5AZ#-eIFgmk&|b4?AN|c&uhmj@g(>i1K+u<GB%xNJip`}d#|00><12V
za2^#96cRorB`qT>Cx7bv1!Wc0i)!k+SFh>mU%z2sa@X{pnYo4KLkCAEXBXE;PoH`F
z_&)dZ4+(u079R2XO=NsRV$%EM4=Jgizhvj+=H(X@mRD3(Ro8s0t!rs*Ywzgn>h2jH
z866v+n4FrPAuKJgtgfvSH#WD{MFY|PTGroI_D}2D2iCO>oWXYbt##3Ca|RdfzU_2J
zPVQhit4)8~Za=TY69(3E!SAxlcJfK;;MwljH#4&HOAQ|-Y%T5Q%Ko#3dHp|H+20oS
z_jUC^yJ%^^;nD7c(9lNa+6iJ3>9YHI;x+5hCKS?&IV5)9al5R6Q*^0Bu{URz8HIP4
z{QcQs7S?@VYZXR{Ea0Jxms6jm(>&V-<eVOd-HDth*J*tjTi6`ye1ddxj!*hhp`j@K
zV1vGT&RR#4_gT7mGDCt3#HnQSZ!4J%JrE@tjlcdJJvFW1N`;<!oO=nE-5E8G%RvR<
z@U}1};MEoSxka*)GCVa^{1CLTTExGHE5-;^NcQY#CixHs_V$!$K7;y##&1YcAywtk
zxSt<NQK2$ZLnO$p22GSLr9zBk^Z3VTQ!JVNMiaS@3T^$o2g2Gxg}mzP;E73hJMiOf
zi}=jy!fS^DA<u7lWcE9^;IZFd%vgYi-}}sv%T_fQqFiZajrbSbx+cmDUWkM!FKmgT
z<K@^5c^tPVXURHISBuQ<GX*y^xGYkk9i3EY7!x$O)l{jG3iV6TkQm{iY*~2aA<t<r
z%@Qg^yn-Iej(CdL7=mAy#cfUZ5ea<f(Bdja0h{y;jW;k{+?2;~!$Sj9h%Ai5Z(32I
zO?fTw!3g+3gs|WbQJ&fo#Z(f}6JtNO>ID_Tzn3MmXX>Dr?Rn(ENL64Y{ZR@l%_bQh
z%6XJb;qncF@eg5ywUr9drMKgzM#)>790hu2emf;ZyE+7VS>~94-97|%n;YYA1(#Vm
z!kcnUVBqB|ncpHoBhn?XIcda%(cLpso0xev!oI}?n(HCGRnBV<3#icTyyJ$;oBBy`
z*<qYH+{4366tgYEFcC9HBdWBx-Q@_9Ru(cb87@8(GaURc&bJ9%oD7UI33F*tzVCSE
z0b}QIe@S2Xfs;+U0$G3Lhsf&s=+Pg3I<wmo$Uqr;m?M@bjQd(t^khP7Z05k}=VKRp
z_Pk~CygV2K!RMs3l_A#O7c2&6X;o?UxQ+OhlVENlY3((!*D851CBIc_j1V}cA<7ip
z^Z>bcj*ErW<nY~SE`4WlGFv(K4wW3ZC#q&o$5<L`r|qPU+whXJ$64tiO!iui>u@Gf
zz$S@1>3cA(K-~L~WYiQDDx}+SYTFKmb?J>FAeX)f(>{6%w;&dcxBZ|^g_vIip7Lyq
zJxz9W+a#L+nKXlkmqh*|xsnL#C>7HGBgp?&x@8g6vB8yx13wRS9h|8$D-G!wJoLE*
zNGQA|Lt7%R@_$FTcMakV4rKw6IXQ|W9~z`W-hyPMkVPcOum=8rSGeJdnH;cJQ7;Ki
z$R2SjRE|SUy=Cqk1;U)xj-DD*_#@2kfi{1+hF-Qqwsx#xOAW@jff_6UK{rUhPK6q(
zU1q5ez5d8+F!>k^5+n&WQK3y_NdTyodn;}z%~OzA@TgGf4N2MkoYm}O9o9U85hc1&
z>#lWuIJqh35lm(|u;xv97Y{bQoy>-B@>h~0UnO)_!26Z*xHfGHMh->g8(hp*Ja;$9
zr8`%NM=JObx2_zW6@Fx3LPNgA{7piL%$|(oT_5GQqYNlx;Af7;&1VvYRli2n#|_++
zPNH-ycYe3tL1y24Ilu9Pe&vWV>lK>c7yVKviIsenl3Xg}E}lmi#NsTlfw_eqn^A$1
zm$eQKT=@L8;QKoB#N8uhM^q$ssFhVY+k>6BdF01kD}72z@q>9A^(;*%#8I#mCFtC?
z-<Xc1Wu+g>31)F`M!V-`?Oq9sO^ai82$uBripkr<x3CW}QQ0&kId~{*FWlVXvJ4E}
zrZ);t%x_JeR~yCE=;Jc0fdyG}Mo_%C6$j(3jn4t55k0(wS^e8v{ZTO>xspIFLeYO|
z1XLm&sDvUg=3HAAUP}86>T@!}BqjhXGTHH$sZIn|w>TNGajrrAHt|+T+W9}|=U%{N
z_XOyX%fG&OA4e2zsD{TTinsc`m?7K$w5-iwX47w(yK=!28*d6xq0lHo=WyB}?7ihW
z%x!$heVsu-Jgi}ajX1y6IALy)(s~B<35XBfyCT%`->tU}Trqu|3Qdg{J8w;G%X-#i
zZutknkimX1#(B^q320<O7@-r{4SYg5u&~VUft^oy1wQ#Dx;#L1yJWy@+APl_HX6Wh
z$!$3TGqO^e4rZf(nG1N*U#1=bGU*9CLWwRCbRM*m-)aX8vz4?i&^pxCrfq4R=ULzv
zGl5#rrM6?qeP+PrIeH2Qg7+!yV6vkMTl>*)4##T_bf)1n!k9M#zlcann2yWVuM{ZF
zr#qqnvki8CA6rxDE3o}e(g)5f$9KMgbOUL6)Ly&^&kGX@NoU)*YIcRXd|qzMd%0`F
z=KN!O`CU*WGc6n5qvU(|!^CDuRsQ?jMwdCR+cPNTY^se~^K{l2Z~p=3+zwi9%FZo(
zF#6GlFMN~Su<>Ju?R*Lq5*h|h<5NS#N@in`p}Z}B?=GE7U5#xzH7IXSf27A99FN>_
z+?=E-MWhuy)bP3kLp&DYR}n7<)@+*+E#ZY8UDtZcT&Fe1G~7|Qh>-J$+7xdODx~C$
zSs%xh<BFR;SAchGRA_w~F2{a0q(V(4ILZbF|CV{^yZM1GDug|RBP|UMtCIP8e96QC
zcrYAnF|w>w%S<NqQlY^x@K&jQ>kT}Z1YSePF5u;P+R&5L%RdLCLJVu~z#y`5|1jj>
zuMvL^|MT@@^iwoZHHUeFP)vnzVhAf-uJ{3N3Y?^D*y1x6CFeeEO)ihJiNPoQ<u#aS
z6S8mqJmPMPUaW_K;$baO%cHJT$kUK4Li$b;MK3Q}gLe^Rp})SSB?4W0=5~b&#T{z;
zw=4Y1qW=E{{#PfMn4A5qUzPL%E=G@sY*K`1iAPP3byYLWFk4c9AMxS?*o01y$VP>X
z^#?calx9{eVsE<J5t1psnYfjAv+GO<LogK*79j2iO=P#4yk(v`<uCMh+wY5c%x$e?
z64{yc0q(jC#N}>g<MRZIILkEIPi&hfNyZPU(DwE=^qk;rD)d>u4wxJ*;0Q;(YwDQE
z>XS3*o}iLlne?m0mriu%N#?BQeVeSlqv*|{m$Pwg&c!b~OlvcRp1i%qBV21^QjkKx
zB%hN;m&dJtOQ^>zBvbGrE4D-*c!dg4A>d%W+~Lh}Ds&l#BGONYcTG^CSP6JgAYx7z
zZsI^MhGLShV-_+gOG4#T$Pr!)RwbX;+Jvc42vAk#)fyxQSS#l5m@G{yq;QuCm1?5y
zL?JG<RLDJ&a_V;<l>?+S@PR*igcEKBh&BRYfHTl5vtTD5d)}e=+ir{sQkKj~tb@zd
zTBNbg>5ktWPT=}6q%mzOw6_(Bqe5di{CSEU6-vfn$+XJ{{!CG|>;3Op<1T;t)x#T^
z0h-K<CHlnuZK0@HEaemc$Eer1zfDo8N|sCrMK+{29e;NT5MS3vHdx_G;3|@-(1tj9
zFBQ58Pj4X)h+Oq&j?HVrxXFOH_1etV^fU^vxuwd7^na}qCIEXeO@$B*aE|Cs@l8h}
z75a)k>G^vsDUaU^wpy9B{I#hn?SGr^-wy^g8}VPymvoe*h%}(^CB<m5@3N8CqB{za
zxa3RXtNmy-mAw2L-+d&Vd0j(kS>~^bx}t^WdtH2yoo_~?Jm_*r2j@qB+-u{Mi(P6V
zC^g(Q3*j#cpPVaiZri@Ac30+!-El(p^mI1#<;^K`sUsoIxmhzUR+(3U!K=B(!=J9l
z(-O0zJrk#qz3DIxKU%<6!2kB}UlVgkism?G1>tuC7Cq^>=O%6ZUv5Zii1@OHx|Z8t
zxT0yr`j%$zM&hxrUW{A|+)imEx`q+v9v0GYocBZt(%%vvxjC`0RK2j-W6pEc(7{hs
zOz`ECLn&_I+qQi_Bec&z=O)uRG&}F$fiA=lqcNB|?cu~gkXB_os*#APA~z(Zr#G*n
z_x$U&uN^R;L`Z8gmv=mRR@mf|SXkh9{AjC*YvfF$Y!Qi9%C~l@)Z+ZGp31Ec*B^7p
zKIoxBzVGpIFKn}mu)G?9GD{k21}9(L3#?;Fd~Em9?&WTW^A$b1#uEZ0N^A$tI0EAu
zou6vw6n5zTI%3tEY>3V$XW9nOt|uT2_9ubyU?nnBp<BI!l#|At!}@{fu?OwA*(F=b
z?zD9b!eG}#X4M~31pyztQss(y)1F)_$Wzl*H6R@K!<$w6Mu1SfKeTlrsyM3wcqod~
zm-1{5y{1l{@|StDmionw29townMC6?jm{(GPAJk*_e>y(K$c78Zo0pvLX{bw36u}B
zKkD$XVP(Z`w}+=OZtg+u_xQTB!>ll2#x>8Q)WC74zJ$MO3U&jfj<tse*)|>cbjiY7
zYOIih%)o=&a3BVGZbpTGaazI<1;4==m_I80LSBoU1=LCkcl&R~;4&WVJMXSLYQ(2e
zRD?9-v}NAO4w<$tUbf+XQ1tAUS69;|Z2BX%yt&!LK7kPQFt3v&F)Vwxv4)#mGUq{A
zo!+lYl}A|?qv{9Vez?SC`|YEpi!-B5Yb6Y<g68e2kl56SpDJqmM@3sG{`cXOh%M!A
z7>V<7isi;XvQ$gmImt;G@O?;o<CWoU2A$7~wS)OwFAt1YOK3V83sJ&s?{v(K;3?y!
z$;p<TS1fv@SKD4z#_|`wdYNWAp8cegR?t-^I_+`aRUGrQ2xgzv;N04V*GP(D%9b6h
zUi`PJ5KN$-GZ_`%{UxbpZNFwtl0SnDxpv{sc^m#<zMVyu9`CuoKJJSauDTJi#zzSB
z?#u1mH!beUFQH~iS2Ab1a8CNI#LKUD4vQbDmAjucI(}bk(;ILvZvi-Y46LvS#R4EJ
zCDeeYq=(l}Q;N4xsse%*4h;DYoZ)=wc1u|v{-CCLgong5?UxQ)G2vF2v$D%+gglCH
z9dY6|eGBtJR$mBIXzu7JhJMgUIwvP)72C_7_gUbsVO0LJ22PFf%@ca?tC-ZpXuHS=
z=*J87>#s6_-`K7_5*cWuy=7Kk;7p?7`YoTKwkH4EIQHmMo)zDIKYd`oCGDlW0xOpV
z(NT?OE`0|Aiqy&XmA%d$U+rVq?zmk~DT0I|X5O?uaYJkPMM8#(jnq4y_=2|dua9#o
zUA0L`2llZTT2wDcBwo$fR#B3ru>d?5dNm$IWD(4ZTW&=D1qXIZ=7>^<IDCJ;kR}Na
zQ=zUeRmkxoA4Oi<T{C|COpg2=d8E-C?;le3YD=c)CuyPRr!P;nTWhVU5$Js#`VA(p
zwJAv7rUc#=oBs}5Eyr-*Q468Xy2#9LTkt>~Z?BA++0C>>F~zh3AC@jH2Ad=kaYLve
zuf{)4Y}aomHiJaqu?B@6JFH5SthmK7C3#=+N*r{aeIGs#?a|sEZP!wQ9?_pejfgY#
zSw5T!QBAdYboEx#(I5UC<c20v&OU{#f~9uTLzu8&{X=EyDMa`ji*~pmEKcOF@lQVL
z(oBVF!N~psbtY6u^q1?s{hA7GoxoGf7Z%UzNW@zyg(uHB@w$d}Lce99!^unhar!4J
zxbpoNpXRM+`G{qw+`l!{q3T10OwsHvuM;(RURby{m(*YH9}v|)(aZn-K!Ib~wj;b@
zjSpkHCXyb|F=1wp4aDKqsgQxCpe-0U6#j}v1-`04uK#rTT3H~1`h^2LYpno$kts?f
zo>pxan`pJwTxwEm4l><qXqf7Eq+rh(0YNN(7OfSVjzoEJ%!8Rd?PF#O{ylNN4?bk>
zQl>)lgG7Ff7tvB-;x!1(M&KWRoAAf${{be#YqQA9xMP%IGH-T-Pp&?I{=jMPm##kG
zw6=v4mNrUNGh0PQzkD@51Y!^COvImUqij@bgG<_WlMI5j^Olq&rADQ+_$JCzG2F_P
z%z8`R@hD%D`S?ZF?^?aOh&B#HQ@7L5)5f6n4&buut|<VxbGKKQ3bphr6*sK`Q1i;B
zAMUbj+SGp!mqp^1!nF3o-7;-dXeCeUV>NvF)nC}EKdjZiduBVDO!lZjh=?P%ngta?
z*#TsM26Wd>m<Kmj;L?gzbPjG_Sta=a)l&nbhL9PlQ05`vOECJwgEg5O$BhAS`Lw!@
zyi)W8;$OxBj~_*Cqe8Rg>s08Hej5#CN3$|3r2XrnA;0wO#4QDCY9Qs|Tb?2v{4N5}
z-5?nFRtj!~KQk3)HMpS?1dPpX4Q5J6={2BvFkEXBhm`5UQ)<TR0PTEh@g)XN0PMIR
z?ZL5T%BqcNt{M9)hw+EY`18D@)O)nVutINNPglR|2~~K<hqQ6NI}>|H1Z%gG<5fo&
zqL=p2IgYM<A~g0ZMrpT<6}E~i_1Zq#WP3WeW0_M+EaQ^W!?J?j^*s|Td-|i!uuV$o
zNuO9rJ>4i=vZ}V>sU{wrD00;+`;d{8hcpPB*Gnf&3ACf@{z`(bR%yo9H%=5wDBGGQ
z8Cb004_@my5o}ob-2Yvd^)=d9RrLY<;CwKFsr>V4!<j;(3WcS9IC+ZG1F5|m-N%km
zqVLkX=eplU;eEJH)Fo_D{ZvZ$o~Ji67zbXot|)ul$y`R4YyiAY>K=5_U5h1TK2<m`
zkYbX0BWEo9&ey2)V=W6OS(?_odFA8pvhWX{`o?++Ral-suX??JaNzlIX{K6*+4|Y=
z{8-I*&fn&41VPZ<kOvT(dSWgJU7u5-0XFS-mk+$+4gJzhpPM4?q~p|@X?>tC8!hDy
z6pqgmAZ<)2JY|h3LgCNHqKD#P8erEs+^Ep|({*G)LMAzIGn3*81o&N!=Nw$NhYF4J
zqG@n*2S9`gnjn}enBDjzB{r_S<Y(OSQG-z^{_)m@4q@(DN3>H?;4Yntt+*u&HxxIx
zWVnEyW0OUmg{|t(gJFc4+i-KjzhW00UTbkf45&xfF<Z(`k%8g34NefCvMBToQmQi(
zl)lGjnk#X(6<>SQv1uFwr}Xi<2C^j;HO`dCvR%0>&qeCUBMUbjq(VOuM&ih<O#r;;
zuVAvhobHo@PKLJg#bp<UlrIPmJNcV)n+7S%nRj12_I1;XCOySd(8b?F=8#N>t!D$>
z`dY~0TexY%dOtr}(c$jb?1FSbCnGCNg(^=RPAS`Nzgs5inQ7Wt4(TlW$x7MI@M;d*
z<NSUZk;DY0v-$UTL{LVbgw7jrH`Od2GTy;FVy$a+@SC#f)xd;1Q{Ub~0UWOvt{e=P
z7ZfO9JZ5^Cg&0EeNmaYw_+C7)R6MuCr0ouYJ(+Iqo{HLSJNAkr0kx0c3iaK79=*ps
zr%C;IsVuQ>Y4h|O1<j8e`0C~hvk$IRddJ^M3!uAMM)P%aU2Xbi4r__G_&CO%*+OY<
zT6YxXA5XBdO3TD#d<4esuGPz{`<cnhy@5p%G`#_L%`&B>n`+P;#)G~6^&{3si(<Pb
z4u#4tjxJaDslEvuI}vi`tlUN~bgw|Y;H~+Afn%NbvrA+;tme<_#E4m2zcXsl68UsZ
znI|z=tvNBr4rAYCm!cSYuRpmO%ifjq=4s`rXtCS7obU?vbPhoh@1;a{Tt8m*_09v<
zJ<)nOP4n`jeq?!z_Zc{kZ9V-OPG;V@nv&??$JZS$kQ5BBJxDMg8oE6oOo?4|*iEZf
znngf8bH6me-Q)N|lan$Tr>Rr6%h&!`14{uz%eltX>vxBq-lQ|T9LtkjaxmGJPfh)!
zl=X~*fnXJGKk)&8K(mE`xP|a-UYg&UQ(s**y>;!C$X=T54>ezm;QZdHwL3Pbnzk8V
z_;$Ch9u+!feHgDAw&ZqPQAD=FU^^m85Qs}Mc&#_9TM*Q-U&>3aqKJ;}H9jr0c24Bc
z>`>lw(NzJJ?3dHQd8c}M8y()E$ZN}F+$v_?ntUvY^JG|J*f-<m^yBu0?tw{`Cyjbh
zyfXvJ;qnQ?&21o!(YBX)*ho6L8h7COw3X?B=Q-E1HJ&<isTh?D2l(jn-en1#kd)D<
z=kHK`QGC*FD3f)DQ+c#k&GG$B>EcXV@hGOx(WWTkt2OBu1G#hYnu)a&uZ+TdjZ)m*
z2pL()n4X)&D80x|-REVFOc!M|_FW0&fi|wBemIuDUFh4;HEtBxfMWUKZ`m()J8OSw
zweF4-aWU=5TByBs+M7Q_|FpeYwQCB(;m+UgDRR>ibvy22>qjXUz0oUet5##5KYdcM
z_M1>2tekU7{UBN+$HjG(=!ajtMl>9GBNce(v}3{bgnWNPt7rMSMPACgx$t$*J_Z*?
zrwLDXd5Ik5Ld$+p!?>Aa7Ofi>Z6;#kYMA#Kx@hUN+{NV=`f9gEsOra>nOK;X3cB#!
zoM)V1IQva--{X^^H@#Wk+6;Ltl;;M@Rg+UYC0`|pRi=pHMn}-=-X}Xvf~!?;a(d*E
z-Bl5MYWR1)!hbP&i3grKKQ5L8uB+ab!YZ;1SL2psXK<?<vWQRnrZQk~c~L&_+yP)H
z<GtbIchG_2dY;{?!^S?SpX_9RA@H63aVwc1>-AI`9zPZ<05FVo3W(=z;*8Bmmb>6G
zS-?+9oBiS^F&pa1ez>_POL)^Txl>+sW%@6?{U2ZVZ=ZDx;F>;o5j&~f79K}fN0CMW
z?T?Qj%pw{Qf#^9!Kxrm1WAfwh7jPSDvR~si@gSAh%C_psO@0L2^Z2M1i5UY=pYL1{
zC-0LoK^Qggd`Pi42pK)jpne#!YM-I|eW7ZZ{~N13leuNp6aH@1;h$C=upghU4sNpO
zmsFsaq~0O?t_3(!AV$Sw9Pd1QIfYO^;)xyRX4g2l8u-Y>`tI?Gr8^-;0redBxg@Q7
zitWEAl-!vz*gfc{plq7hb7t{_<pH~{ik%1Vz3Ed)S?xQMLOw8hXwcVKvYD*>J`1b;
zLwu+${W{NuPv1U^&%~F$EyW*?z&EWe5o)kv+K0-O4mM8^qY{SPLtb>T7|9%2DK7Fu
z&%b!2zxev&-4AVc({(+ompeB44JSPHRs5s%GfJ`Kk4=$E!tSTrm3F&d=p>6|lppCR
zmiCZ|@nE$s(KCOYW{s}gBf<RO?4q8hxVvz>Cq4NB4xgKEjn2siWVnU3c;qLAmx-k}
z<WQ%487sbQJFVZ$iS;(2yu(@AdU>Ae!1e&F#XS{XIO#WO6QY?QQj;nfr>}AJAr&&J
zNw@1%;%#1VKak=6fDq@KUTiv|^&AmxJKQW4wK0y>%<cZ{mR98L7dFvj!|N~iG!;MB
z{gtgrRU&F!N8hPke4^xIX0w6*l5{w`(z2Gu)S&h1YN5g&|21o8E&O0jQ}=qcl28j-
zB+*5@YH&|g(m45)$fd%2Uy}P8#qu^JihVeS-;9s~b6U<Xc@-$y&NB}U(i8cr5gwxL
z5N`Wa9uT8|Y|Whujvgvje)n24Gv~!_=(JyWvUf+Q+n2NjiI>o|ZH4G;lcu>oj7(my
zhN0eKP9%)KRGPZs8miY?nunWtv#j}j@Lq0+)`IZ;M??CigxO)P!EH*SmY%G!n_}ul
z5~t0qUXPso80(m=Ps^yrx9v)aYj5O=xIcQY(joE@LTTnu6w2ojvtO~~Fv%}FM%AD#
z!zSWp2mkZelZ8I!<Jads9UrpZk-4&Maj-!aVN~S)h|bLn46jy8%EHX8=7!wbj@{du
z?!-<TSY;RO+`wuVnqshT-14~CthJ-w%AoDZx&RY(okDA=Lf|MLy8!ycIQZMYhuy!-
z%7+;ZTOtul8CExxNcdO#vIVKKutcGVuP}*j0G<w7!tEsgE9x5DxES~M7U5Z#>WDP7
zRWd&F{N|o`e-W1QzY)Q{Ye21Ena^O>SU*vrZjo_7q^y&}rvYO7FA!DSC)#Jke!EaC
zF$@qd?~b|^OUy@J!7cMOHsJbFA4x94&&2MQ9*vrBHGfdG=2T&sx1ReTH2ACAnY&`0
zPnSmJ#~4?zvK1f=^U}9MoP5k3gj$uI-W#=)aq`r1D5-v<bA{XBM07#H{FJ9QV~Br_
zpBWk#ddPF5y5-_*SFGLY#2d|@?V2YA*CUoQGA(!}6f!@}2$$N!uJ9>^F=PpGaJ#s^
zN59LFbx<B%jEmv<`Hf<to3F^+sgl!c2A?7-P<ubR!)^)&&OYwUZfpbZoFx`Wx?J<0
zpGfSA*nfQd%AUQZUET&DiTm>xb~qm1O{RS*`Bgg5>hd1p#pL=Fhu(l!=~*+(BRIf?
z?8#={50`U``>%4Juk3LzR4zW1lPE)&3V(Pi``v&%YJUIyvz(u<w{82b@__zztNYJM
zy8c{q@<Cl(i4*BrU($~s_)gyp1;Y_Vv|7%I7wMNLPG7wA+11Y1iLvPQ3J0HHj$74Q
z*1KMJ30wNSaD{uhv|305yV<<Jtc^l3<>{gs0^-B3q|V0oSNRs18zUO9HWK+OA7`}#
z^`gQD-#E;u@9eg*bSWxdH)bGQewTo8MO(K_T3L`&6e{;5)9*SJu>Nu8Rv7CoiI$(o
zF&i(b*Z#Wh_$FU(>9&3stuhoXS=p7qc)G!)!c(%1xAne*rognA<Bp;)l{j13T?fzZ
zIydxwm+i#H$8CX8K6&$lLyNn+2Z*va@Yv_>igv@@#fsKuNmCu0&mx?|Wtue~a)wN>
zvIyV3)53D_+q^f^W2HySSGdOQ-C8K`;8OId;mt^(H`jGL4Ktz)ZAexH?el|Q)^6e^
zDXx2x%T60!%JAKl%p3n#X`n(DJd@%gb2rs`h6><SIeGd#E|Y<`IUsg<2Drnk#y>^D
zqquhM*@o``_q4o9lXms-+4IY~|LCgSPY#Lig1e4)CR6O$Hi|}dsSukJ@WYsgTcJ&2
z#Ng5q7c->H3AZVvzl87+TUO2H9X#2lZhQ8CaJC3b+TBfs)K_psNqs~oWyF>w&=ZG*
zPp?kka^Fy)!22Lrw*kRAC|vocU_HYgJKge^WX(2zVGge&_l{gU%OCm}no)a8_rCsE
z**<5}3)~<!BWpf<=@Ln*4g@jH5$@8cXl}g`#q#@(Bn5X{)JpTG(kH1^xQcYCI)Ty~
zIZ@G*jcu4FK1v&!7i+40hQ*kyj7Op`Mj5uW(pyj=HNCQxp~$Rcmm;<HKCz6H<i3+r
zS$#)r>*dov87N!k`yY&_4dA6iCF!@hqmyR{tVLO03Uu2vw&g9e(mV*@6p69jrk3Eo
zx#OME>oX%QcWgurd+SXKl(If;a>kt{xEal0x(j16*NoG%3(GO?vX-ZcS#H_V7QW<g
z3wU_uki%anivN^`0PEg<8BO?%d4gUY-U=~AX2|lyRghV#uZ~;e0eSHj-^@N+BCjtw
zF>Z_0Ui^(vuKg220U0HsA8qiQ$iIyn0YX^;39}dgQS^QVp8pL*d1JgditW+30Ek!B
zVcgC$$I-*`%kj;QZ{9EjW*c%O7i3-ODibh_XK32iEjMkvPZ>VfQBj`uBCgvR(>Xd5
zyrFoi#miFh8rFrVM$#}JV59`PTMvs=#T4IaX|Ni04VTaxXwu#L{sWVP?&o%ypb6*o
zk7!?GF+8r)_VFx!u_|(s%q#ndCrhbdxZl!H-sa=ke1Exxj|<_4?<$+@(&7J*o)h-;
z_#wV;Qy<|k(-~&$t+tVrxQNm9(s7EVP3=rbUMhm)ccXu<pgatF!8FA;hEaQnA-&bH
z{KUuB)~nVk)h%uwvKpUqBj%ZG_g_xoZ>g84{@%-`eFw4;wbLEVtFAXPS@Ul$HXU~T
z4&rYoPFlm_W+{_-JsFwc!k4aJBiT6?cBmRGr5;NevZ%f}pWDCanU`nfpvHLJPr5GK
zz!Qa^TW9uH+E3IaoUiH03luBmRgIrgI$RK;SB!7#(QGT65BQuFVkM-W+?`}JSI<>_
z?T~u-m9uP5NtW(fKRl(7HlAYyw0C9wFy&ghroVckf*N=9K2~`sB#Cj7Yrg5xQjf~5
z*rzk*2~V$%y&vljRbT7w{cIHe@z@=%_|dx=fa66iv-{KZNyx_+U49VnF9iMb^(Q(|
z)iH!?D&a*&o$fI1=8c3=%*LTr%pZCWByhY?0dU!cQd+p{*fQY3oWqD3|Jvp-Tz3Hh
zT-l#C<Q#uQs^kXA2<`m{^#jma*TesS2bdoXY#KS?yf#3|>Apy<kt~_>{B2ucqRMn~
z%ooz<7XUZ?jQ*N+X!Ymg?j)rLUjsTNNygFOd&wMe5@Q!U7uF7!#bcJjxDAn71kg4K
zb5p&;w43LmDo!2ERvv4~mTPtuUAvNsO%b__VKi?{RS8bmt8$k8#7kAm^7X-k?t;#v
zw)D!$-L7};wawkT7tZ#EMQ*_)xI5tv+t+J?7PA5RuZdb^ar@jkY&x=-+H+g2j|O$r
z^<1w?Z|2n;lYOla-zxj&VE3yt!Cr4UJA1DpcRZruS8EmuV)2y))`H5{zHwLysR}+J
zOLZ&Azbmuj(tJOqCfdC;Y9&Xj7F49t7gt^!s)>)o=1Aq_c2J?bg?D+loRDwneZr_v
zZju_Gv9OaF%&!cbrOD~fmpg+Ho`IR3LH|+Y>#6W}nSF+(q3MfQP91)`4|H#y1-l;q
zd~y4&#laa(o}T1o`Y+g}SRdp-v&peTYR#+#J#V|u$@1i*#08&j=zubtqX~c&I;09b
zE(4Ajxup59%u~{*u6j|sQ~aHwvbFjIvM?iHBr&eHdj4%Sn~Y-qF$o62QcY)MTU4de
zVWOMKhyEs>m^8~pN`hEPC6E1e<s*H$skFiy`_22*ChZPSV6AmGo_5!4Xgd9nVp!O&
zne5_mPp;D13VIm(`e1_wr~(PcQlT@}D3BQDr9vZC0mPai&GR=1JW**=;d_<dnOZ4W
z+rQXbc&4S-Zh!uWmhe4>8t*%&?!D`9z_FveW%qSAWCkib%7j-73!e87dwoA~|M!E|
zf<<ZU+Igo-Z)yD=|MDcVPYi`T?m;8a7FYws|38mh*V8oetdy@^+&X-w<G`_(U42G1
zqKrlpez7v5YWu2xG@kgdGa#cyP4MAxuJ34|qz-|3EjPu{@vxW6eY!SF>$@*cd&FM5
zeS~lQwroaaEq`>dYHkX-Y;KsGd|yF4{*4oScPi>@pZ?sH1={y^c}b`LaYmhCWkXu*
zrHO_8(Xm2LujRIizBOOneQy6+y?4o=J=W`L*|=1czW1Sgj%{yS++_*k`W|Qc2CRDS
z(;Po;&1=|I={3|_GhTV~OZf9kD2`)^X5)-@za}tBPEP-qvqlfIfIXPn4Fq6lJBF<3
z@?y4Bwlk+FQ1)`$>J3Np;G~WgrhL=9K)RWXUTIZbrVV+T8^NDYX}da2hODscE~=H6
zq;m+&&)*j3dL4Xk8YC`otKb$d3u|@zJ&T>Y^XE^0&UUkm`_9vds&mHS{mcQ2zXObj
z-zJU-V2Ky9;Z0ib8Ik4y722=cg{gH}qR%eK?GE5@8s4~FeQ=Yu=^hX9%byjzhsnGK
zXbMd>Oom=iA-{xw+`JBN)?b66>&*V!rJC!U+IW6-f#wN^u9uQ;Rszu3TWfZRj_*GX
zk#<V<nS)dNyy}_^7AZiFmy0hluUQ4-(OzW3B$wyh53BgDHm@X_XHN}3tt)7w#jZxo
zH;)Clr}8nTuXowVaU*_I=tz{-=3Lz7-amurg19L0mEb(v=(u){e&wU*&@M=+^{A(p
zB}V+QyEq_SiZENG%i`KAkQWLhP$5ddBP{Z&7W1|TOMdPNcI(r%t?Wy%3iCW57lgY0
zuq_~+^sj7-70Cjwlg_}+$pf;b1vk|24`d6dk^Bd)<z{*xjQ^bTCjAhi+%Kcc_KiMJ
zXIQIYAAlq$<4P!Nbt}3tD4tnaPP9+-jT1)aHZOesESTNG{SG(8_mHx;eV+b&9=_4f
zD!J!)ua(?0?a7cc3tIM<)f8)`Xv}w~JchtM94DZaq@THWuLnEj7<Z@%g4(cS09l{5
z8VNkn)4!v7m|v&5*EH{?M>n5MYDE^AdAoo55R96F_q!_<X8JmM$lh$_QGI4~<MJ2f
zlAU@tgNA~Xt$yqfe70I2^=84LM9X$9H<Gp3zes0|{hL~wQzL^Z!oJ;sH+MFMK!&^3
z%raGQCCwN~le8XrCJEBeowJMF4mX<49dzP*_qXbzZHd_cZ0CdW7gS?HiWquy0li+c
z{FZrGe6*7sA<hYRJt6^U%!9K7>f^5fm#LM~0+*-sGd<K!wEHItssM#oJ_72nWkEno
zKLCg@|INqfxBkB~0>82Xs4e~|0)R7vij5?9;K_cbkowUSulK-4hm?M#WPl_Chd~6z
z`y+ZS#vL5~KP8#meBd#Q^W=-m58-vr(g4zlXvS64PInP}M*{vuWnL%G3H;2!S(&Ku
zx;5FVIrr+QM|aQJ8$#R#C_#gznH<}6BLfRrr;|;*HwLq{?DmpAXPf%(N2c%9bl~De
zbYHc{&!>_p%(WJ^$}<@<ZbG9SyR-H8^<NNN3UO%<6EN!9MGJl9DSqss?6&TQGbs_*
z>m*+uIE2f8alUmm;!|FJ$s3N9#V=K^NBfI6gwloBr<y~qNL*w_$tXSQ_hJ}&`qD#0
zON&sNlZ26O$jD0V?Nj_w;(Dhj_{IWsOMsu}E=`|}!f<b_rs?wpJw1o<d$=Ju*dg_-
zg<Rh%D<#M#Q`AQMBUw9sz~a*m+Z>gEy83<h3aeYLzUEyTb3b`7?2KT#OC504a@8si
ztS(Ph8&r)pw#@WI`%EWUyfBhqzVuc!sbKO^st<y{!hH5dj>By|*|pEOZ;>HSiELga
z`fCnf+A_$}BU*E}6RT26CSrD$v`G<<kF?HXdyGf)_VYbczPNspR_>C1n7%fCd6c~f
zU!>6~>hR{iXT`{MzTCF?jJZ37{xfoe-<5fl<tiRlOa2(sejbplS<PM=HDAchA=J3k
zwVFxq(mEVhx%k|`CdPGGQ>#*6Ka}BUDZ5OMR?m@};V~UMTZFu-nIv6Z84Ii{xi%&%
zuyjPT$~d;ww3E&tP3Pm#E2gs6GP6=^Ze!vlW1bjQtM8!qmH)6HJzJCqA^Cbyi}?MK
zT>M%TPXbL&e(2@q^mM@x_QTnpcZ6=GKR!tNZ3urc1Fk^$+7tv+lhz_UT;C5=GA31h
zY+(JsP)76Wsh6B|lNOU)wVt)n4J+b?d*D$6v9vTYE{)uzPkcd=oc3gC%dx`EPtUEq
zkhF7p`QkuvzJHy3yf^CbTl;y5y(jW7h4*+Gge<R#wto~`JZ{>Vo!C0ZT|67g`ubwL
z#EUmhqo;56?jdx_o(wRP9`8W!m7bS0&{QA1**@IHCn3>)bj-_Cf~$7f41IFEM9bib
z!i_Z1`%ka7okPDV@N6U6o(vmnQdqpJV!OzyV}ItIc4cA&dWfebY_Xmg`(}i>TLr`H
zVxrqV0YC;@3@)<JJ#<4mBg5p0nHc*~{_2?-KGQwdqxZg+TRLGc;<P>j`#DOr>5W#N
z>YGhVO<$^Y<74`oz{tOS_%YY6wU5W9-f;$Fik<IWyLo7x&C6dX<LTi)2>U-n*1Z5(
z9|nemj)lks96(wV<>Y|=uwWoOX4?+`u4%GG7@mT9$iKE&>JTA*-ip`}wkh~52t4mx
z|9e6j0SW1V5|EJYKsAVb0IoqLgS{7Fj7gIU*ar_|W)cLEqHchtjX)w^0zhe|>+t-k
zKG04B9v6C)M|plK6TyCY%RFsD((6UsR5zL_Y1ULoF@ZcYS<$quVpJ}Z)9S@@&&HWl
zKBh($*Kg7-!0!fTfx6k*#X2-1@K|nf-q3bq9yO`DmYzpm!!BpkAgtC{GN2zkwW$z6
z3jW9D9c}acH>I*pD4reT)J^L}ZQPHGaYEx0?!%Ltq$L0nfzSVk{xmhPWiQ+WK*T9@
zjx}yF8~(rCzFHu`Y@hY#b4864Jty-w;|!etvz7lJZq)xwb3F$m<1Q<iI2@K@4^lqn
z`rynMWoi&O6DI^<TjY4o;vUsutwV+eRia-6?u0r#Ham)a%kzqcd<khWLucz_adReZ
z@XC923SIl2L5OIGl<92|O_QDT+*C+#-{>IeU=E5R9D+NWbCwFRGJ6Ae`+5u8u+n&w
z%mHixIU;#8viBn`G6!&n!dD5hlu&CeDx~4Cxoq2e2CmNe-?V^`m_IdsThC>kSB;6w
z6?jyUO@w}a6XBSsI=m#JxB7515EntvxELL`8fn^J7}ULd7#<UO`*vFab3hzQft#f0
z@~HP3A?~@T0@}pYA^d@weP6vuG?XfFkz1{r)!xp?!$o#}gT!Qx%LNKhnH71h)%{w$
z-_akdk|Cdpm?MShUE&~~p~tG1_A)zpjhrrW8TY>s&hb)>>v>tYGT)IWTzgf|V|Idw
z7DI(>MX=Dc$<X2x!ASU^OE5dPu^~Fr>fq6@hIea}9J*_`yp_^1X!qT~V1$q_f`8qJ
zvQ>aRw|;jMW2MCHJ%p!1y(mGo*Z9=$a7WM3;-yEBoPt{fnZ<2wf18c89&wSND2O9q
zp7XoSvonqNiyE7Wc^pPBH7_qQ4;#A$KyHF$mf5u<1(X1Up@EX4&@j@(mhBvwlv<~m
z8<V3Iu}xfahPjc_#0_P>|IldumSORJsLtoep0lqP_{^gp`D{l`-YDH(Xw^h#At7Jy
z@n)Z&e62RXQpY;=dS*QKSTPM}dtx4Em*Nzx4>u*8K7lyU6#Pl|{b%XC0yJLvY#zd>
ziAN!2ow%RH<F;7L(#>MP{@tEkqzFBt)Pb!Lf$P+eEl_sqCny6oJG8&e<5t}c4LKO;
zRM_GXq<<T~4Zw|E!`oKDTsRB2k^^O%JCa8<4HWlGOs9+9UN+q)QprJ>ViKPanZoo;
znIJnue?m1t)pi2)*x|Hgzi+pLltb(cZd2RTsK8U=`lU;DC-m){znrYP-Tp`-L5wvF
z3&hvgek=PJuQ3Xf4@9De`*1wCsSx5I=s$srA3RxNzI>>obRFSU5l1{!2}-sU&3EKQ
zJUT|4=qz57xyfHD3#RRwfN<9Xl<6l9*h9Rr)utHeg$12KIcYEmkm9t-=l|zAV*kfS
z{GVUr|JO!L?t#nX5JkndTkb~*xf+krBgP(9o5z3{Bz|_14PGW&k*75(@0;kY*^!lz
z_dg7labJ<Wo_rRaoT`<(?HgwVy=FR)5sm~qpTG{4U5Sspc6-hO$=a*3Rqh1tYna>r
ztCoqZLP^GrjeGLKT@5Ml^wk^^NX>3n0Vy{>GSIJ2nv=-uMUmyyF!{0ZzReG5{Mac0
zf1!`ne`onHIfLW`agcrZl;exErVkRO@<6nm26sJ81r!A7R5>N16NSGN_!F*>F6Y5R
zErT2CJb<*gvj<pyK<UwLdTre-0w^ttBY*;Dr3dwC@gj&~j@ITZ3h}Zk1(91BF_?h5
zKs*a<;0=PlpQDHessiEu5^<$1b7AMc8@-iDW5HRW-dEH%_1X?F*)d-9wLj&fJHxCF
zh5SraNdEm+*gsSM^UOAZW<ig=2SBZW9uz@LcW0g?1_ORxW{~m?y(06Lc?7i<1mgAQ
zghfh#!Ow909p{Id$HgK5&qe(V=m-C`0S?6TU{RkmfBL*9By$w8BdL?(D+<zznQH$o
zoVO(b{jQU;`5n)Lo4fvZ@%#>YEQWMkQ4-uzk!UQ^hq}nWLzsEEz;MbZ?_1f2g?V0F
zcKFU_Qy&NOF_o#AitU~%pU4~^)RG$no_O$;tVKR96Im_EX=J&%etR9&{8;he75cNl
zR@1+7_oVoH@_4rL$l`I&-3{Z9E~E?_dPnZuJ4d=}5)6vums<{ZStsYO@av~RY-b=L
zT8QQ`GzBGXRlvR76$#Z6s^4#7yfXsOgjIXG^bg2NON`&f{<yc&@TJz)i>=nyd=say
zhp;KVJA-QZlwFS{YPxH$wewGNo-TGuC(A}Cq}3_voP4F*|01@$Q2l2m|CX0OrlCb7
zVJQUi%&Cx8L}?Tx%ivQG!h$Hmwf29%xkwyg$T$h?t-w#bJ^QQfGx?wDKF8rQc4qSZ
zs3CF6(@gkRNr?16BwSGQ&dYF_#2*K;01q`LP@zL6KfQqEAn*b=(esXgqp1P4d}1Ic
zlRXO{&eK!4anVOON@#;2U=Tz<&~93Ex|<}r7+l}4+b%V)xDeFEJ~PfMiBj%U(c(+G
zp4~CGI4@@AGc$1AHmKKv<&56Y(gR;&>8!(wbl7Mnlg5Zu+@4|)TG-S|Z}ZuJnKq~B
zlUzdQ1ebo;6#C1gf3etYQ!BHS!L#@7s}I)Lrk!}%7yL-}JWeQD6FNxac{X@yB3q`Y
zU_MXwQ}_3*1}W`}b&aVDte-QO_A=iNj=R)smSQ-=?-4t~6xb{}TK7`P<o>)JcKALQ
zk1svj_`p%3+6bD(ofqE_0-N0+zEF=Yvm>p$lvc^P9KU+{z?}(t=D<qV=a5`khF<5I
zCBeqmb=!@Zke=z>PFpiu_82GL@SgJBFOqW&q1UZVb@q~iDsyz*ixILvy88@kq_V2S
zMp>V5d}=+RQz^7?&dX(Pw+04{`zroi_5l03&TMFtn{{eQf9D%`yb9hIG=A_*eMFuG
z%k|Mds0%75gf2D{Sja_ksN)awdZqT929*Os2mb;C{*>_ke7>3s6V?xqX2~<h!kZAK
z5h~;XgR0?OsO&{@baEw{#E~OTITnty0i4hCVvq?zXy7h^-<c3U(q&LfUgv&+3S~tB
zYP}`JYHb-|0FF_3Kap<B3~YsUdS>$f3PWI7@_s(h<(GAA`e*A{Ny)&CAKd)S`+y*<
zED5*tO3@Ih<kkoG0C)eOU#0s8TbMyVq)!HP=xPU=vb__OGND1At1KGeR{W-#>!aT9
zo$yK@*`=S?-K2zHmVq=pAo-74&rmxQj1szueA@Xfj^4$eTFqJ)hYH(oM;@H}o~Luz
zyRy{MNTQy_cXysS&GW9^9;l2Nu_W_6XEmmqipAo`DwB7dOTGNVgW$h>1GbD2s1?|6
zzDb2*EK_axd^*2(RSF*~_Uh_Wx^*&o%)cXsF-+R4AWZ#-Z{^&UGa=KAGBdk8{VHL_
zsgz|?2zxC!SnJ)8PK@C#TuzVNdsV%+_r4CYvJG~58=F7AvgiXJRFE8=*U<c7uy`rY
zr!T`#D#GdW<-1~}4M#fBdeO${3j{f%*;3_m)g}I<(ZFKPhW2Pq<0SE}q5YZ)?{53>
zRv-4Sj1Jf+;1Ak%ayp>7gpwo`C1jx5Qhb)*{Cgn3OzE8+*F?`$+{K?VQ3!Z!Pglcq
zZJy<*|NA_%G3-1OupNcOaeV7290=6QHG$%L4p;bNe!vhj`0+vA74?hvUB|@5zKsp(
zqdvf8k4jHl%0BEn?P6pj@T`n0tLtTlzth4}&}epURpY~G{YE(V!pP)W0r8#C_MPt6
zKIHFiqkS+L_h?kKn8V`(@z8YwtHyqd!d+`WjN>HNgE`1eV!5lwF5TZbryewdb18o?
zaBcO`!xR-+OSGHDve|@7z$jO0-N~rtFLS7U;OO0y<Xw`lwAvg`z`sW7Bj)!i?~cx@
zY<c4CyiMzM&;!Z5*t03j<O9p2gdd(|YuMeR^-D<m8sA!6QJxc}tAFtHqt1FyAxf;m
zwV}+tvxUa#x7h+GeOBb$&wmj8^5Oc&iR+vK^zWQV7tV+qRR&dOxyu6=tWDrQRUgk}
zJEthT`le&tK*oh_RO{uwS^?#nJ2Vry*ga#Pu~HVwnaf>`H*#;qM2~q`C&FberE=y6
zBx>&|h}#?&%rA&MX~Cx|`sJn3H;bL$_{Jgco3Y2Vh;UrZqQG{N%~J%6iYS`%b%;A*
z-P9yjEm^ZYz&R6W+?NcQ-ncI}M;2c^9GBfxwGG8a;Tv`)_tm>}%vw8iGN@<svP%ea
zz0~K}4k*V}j4;5<Cl9Q3oJKq)=he_dxH!~ZC);cnQ&}UXk7A*>U1;l2vYQ!7i^f_~
zE|Lh-BBA%|07rHU04T!;N_`sC`FjGhJ7tgW6r6ndjmbogV-nJ@Vlk{`)jq8%k@U5H
zzr^079MxB;&;bRzf%i|<VvX*crVo5u7=HKZ-EZ2#uOG{9lQ`uM&r}15q;v<>dwp?(
z*i-<I@QPz`%d<mhGP?#9s@a0}&r6lS?arCtjwSpJaZomw>91fr6a{i;E;#LG+XS>l
zt8MZp3qF;TH`R8f?|<F(q{LacjHf+Tsy^WZ1v{6Ax!*YWWkYPzjHCLy&2*D`ScUv)
z{i`Oo;rkOiyBp$wE>>QEQSfBbSC}Xo0sa@5W-7Fg#oZlj5Sj*<y$lR;8gsx3W|rQ~
zh~D$YJy}WMi{Y&Dxrdw_V~=;rZCoZcy4~_m9$DOFMC7Y_6#L@Cv7-pqSuCtBVewkH
ztk96G-AmWRd^3SZ$AAO&5uTJ=E$&`hBwtV^tRo)o^dN4lg^BYh!al*8!Hs470fgx&
z6&lUK2eQF48P~w}@M^6MY@O34KWMAt*&ZuI`3&l}qqMkON~GF4Y@{{nWegcEop?U-
zAkCXUdUM%0l)#6mTj!BpZWX=A0DUM$F9mtXA{CnvNFdt^w$gS(IDBvca1fxDe_xEY
zH<yRy)v)-)7Gr(%<$6o?_w4&))2lpH3HwPG;o3@<b);JHJaFB2Gk>Jtr9xG-!&;>6
zAUi(w4ik&Zb|y!wV&S<vzo-w!4tVS=K9k~Q4TF1PMCar|e6EUUCjnG&yB^#N6Z~)Q
zg&AA}+y2TNl-JldZGcL%f2zM(p`o1ms}IvN^CL^5{KVpUZ-_2hbJd$U@7<wcRxSCo
zLYPY;_MqLAN(?K_llLyQ^T#_XZU!mJP@Z2*qNlJBH!CL-P#Y6nw|gH<<b6BlIuc)!
z<*WN8WMJZ8#^G1DN5W_mun%0M{Yx1_)q5$yX_)D(ObzF%e%ueyH>RK#@DooP4Nm#C
zCbK`UR{u>GC#NQX>w+(^@n3Xu<3>cXD<j`Wm;~1w-jE7V@=>jsc>h>BXZN|?0@WH(
zDZ{zB&ul_&+~hsHF6cjbuds+1uuG<V^74;Eei^S1W=OLw1k?IlY;xVRlY^0dAT1oj
zJeN@HKeMrr6V-KjEEYK{7(S44aGR9U%v(~&u>4zwc`?3E+5QYif*1~;<+7_T(vt?D
zvkR2o{k`7dZ+RS0p!gdnPSFxI{-x5UiOAbYPW%b{Y`1_P#^;~z8;Sug>*hfqe<5T5
zc0XA!BCj(6j@$N!_65(h8%KZUYYz7O_S;TCWzF=-Nm$^sKf9*E)5>8Fz<(D30wd-v
z*Ixnxql{5x*9<uLEbz~omb5KJ=rbT-7yL!)rEQ;=iiTo3>2emHn%%yg+K}8^b3D@Y
z)kp2}s+gXc!)g+7g~gD_`S{6{HvPOG)8V=|`!#px<P=JMZV-7s>c?vO22er}f9Th3
z#by<#oRj$V$`1Tsz@o#!>UYjoW=TdpB4_y;6fRDMp1T{$uu#Qv)xIdgijIH(Twzkc
zsh}u3TSw83we@}3_O;v<y|tV#&r5s@$OzbR(ezfG>-N37w=bLDZ6Kh_*E(6w3;Gqy
zay4r_q^<5rWUM{<nLhuV?3mQW^KuGr59iWp(PO0!rM)@w!uZEn<Z0h*mriZ(7&A3q
zzj!_;XFox2#?{?YCLE?aa(#!=1*`P*IemMI)vP9NVl?>8styG3k<M-0|9al3IrU(9
zEz7p;rz?0X$J(vtk7+WUMY?i<<H1U6%%-1RNNnXLFi2K6NZH#|=FQq15g1U+;+wx3
z{NwPAdpd}ULQ^49YFeT@g7scelo?rCuS5=g`I1w5>h5ww>RGM_{g2i1?ukDUf<k;J
zAcr*Cnp1$Hd%flhGP<Zac!L2L0My{}>^iO!Zbg^O>(1a9vinWci?YMlE43>eKPV;h
z84_P;=e<&|_e$Y+W}Ied+RMlAYH2U0_K>w$<b6wnFCG#4NLQRqi7V+vz>cm#+{oZ|
z)E89W5VpU02`L>~3t7NrzIjStBhFytQm)8|-e+NN$x>l0!S?!)t5R#I^}#rbcK9{A
zmcxk2+X2?h2K@z30ph(nEAt70tnclRrEfEOQ=5s5tv%1oWEq*p<GX@-YwDkwMANDb
z!!*;84T0&KeJ+vx#ZyOvgvna2GNb042Wz{X2%k@pTaI6R{jya=Zn!Y{i4>`c-D2$)
zG4)<fOKjPK7+KSqRVK^Tn$wl=BF9zGjxQ{_hW|-I-(9_{QtnTCG`99NDvrlo#?ve&
z)BM54X>ya~6>s;FSWohJe(#!L^kj1Pc%zIAQzmGma#p6~-MQPx`I$eIml`*rJ?HWc
zdDcISULh&q`tIK~tT9Ws(r1s%jT&iU_ITU>x!!d|oAY~WCr#`TI#QvJM#|lDY?mxQ
znbn&gxxOjvPXB%;t3FUw-?3OVbgxxj+LGE@z^iV#9&}4$kNzR2iaeeRN;j66EsoD_
zZoJ6^@=BQ6JCi<QyE`Mojw@8z#qlCtu^-oq{rMgw^^ZZ%FF)XD*WzbPw<3g=JD<AN
zKI;;yoRgOo>E;$*T%@6w8?sY}Lr?it+L0Sa{VoroJ5{^eVy+{s(*|+Rth2wZYVFlD
z;bLahtr<}~KfebnaY-%z0FPDfRND?S(GNzf&z$u%b%&jT*7Ab;EF)J7Ejw8x!w3TJ
zXkA0qn8N(RhYnUx?d4Uu%KL_G+s6<Q)RASat-aNB9`W@ii%E|?iUW%FzBaj*OJB_~
z^(>R2LU49)n$Lr4F>G(nmYM3PoRM}d)=hk$;C8PkH{^JB_bs1={cZ=|Sn-cBuqgj8
z(%v(m$#vTn22oL}Ac)kURH-6eN<gHEh=79Bi1Zrip+-cC^dg`rM5IfT-a)C-d+%ME
zgdRwU_rbOHxA$IqoqNu?-;ewV@bb2&j4|ezb56xslXA;Fe-a(GoHUPo<p~d6sf}5G
zxXomrrAD?BDoAA`W|P5grpeIw{H5r%*XDAcHv^w`epae0Fozd>k9UUM?qcNcjTrx_
z=JA~J?2$w6!{iH++LH{X%L%S0-rdijAuM$9lJC6L=UNO9F&-*ItWBCVl+Pn(pd`Jm
z>>ra!*lr%li+bJJR!W$U7C$h~PG3V>s-!1uBslggv1hTres9Y}3}mU3CDt(i#EGhY
z6CeHQd9`e<Il?EshV9W6jg~?|qrV6csCOEsINq>z4We<YE1%I*HpL$7aag4scjpS!
zo0ZNuf5*{9q8?*w@_V{dNZ74=+@GSe{u`#J@eig4ht9qxf}k}8UqBBo)_~j*<|W^2
z_<{NzClnQQ!(y<0@3a01@MpdRV5I$S9T3e%ukZeL#=YxC%Dwp)FDR0|{&cNp{QqcP
z!Qaq45Z}M*3HA$6h#=|zf#;p`C=W>^Y8D345h(@pH9Lo4wNNE0@96o<i)G8RCUpnG
z*tt!VYJuSP(r|+PyvJf42JTZppMFzxsSZWk(N0UZY(IK*;aO^IJC$EEf%YJ0edWN@
zD(Dp#tSYrIl5D<x>}mW|`wJt|xn8?BXD%!i$CfAiH+T*n^OrVxq9RI|ZLGO&-Q7B?
zgMVa5@K#k)l6YChM<U;1N1gc5fJGquRaHP&L~<0nV@H}o<$Mf1hj}>IMLUFdZY_HE
zJ3c^{h0ejKZMF2Lym>16M>;4H#63kgIUl|txVIR%_R;j?W}>a5Oyo-SLAT_|7ug$!
zzX(E#wHDoh>DM#iKx4Z#(3^Jwdjf6Qm6oO0rbr$>4rN!rp~o5{Rc%`6A(?nCa`b*{
zh7Dvw=#KBm49&~%&(gZt=dQL8kHgMX$VfFDCl{tq!}M0G!l&Xt5E)I%+wCY?Q9L(u
zJ<BQqMMMPFXFT6q&?dUjHYSnhdvAER60>hDF>f~FeuPrAhLvUpy7o{YU<TXwootLb
z>$VkZeEEySmhYkzOX}kBWRR+(m_;Si9$pLo6q<UfdMkT2ZFQZVM?=yw1qN-YYeEw}
znZ`Em1JmzAJ0xX$*vtK0Y*x>P6&7^RTeh7mgo*zmFg5n6^MVx_o_ro+QJoW_V(0Pa
z>#UU{iqW{2r^%EbDLOv`;>E`D`|a_?vN1!x{No+l%1y_wkTiM56HW2ry_g59>hqDr
z?^rG~!RZq4LGN8`?R(FUjr>d+(rreT6yVrklv^8nNO~h9%s0C|Ua4BowoFx5_p-{G
z_&dc#xnYIM{3Ql6)=|p6Sp`Y{{*#U);~C|}i9atchTLF}7?K`)_b8ggfwVHxr1Fi~
zp~<@LNs`(Fhxp9_IOdsesf<041m5jGMs338!gUv9tFvtNTMyzRArbkmloS_dQ5)mx
zX=QX#ijFi^L<-dRhQqXO=8Bys(X;(tC+n@Q!Qg!tof~UtMd#mm@WnvQ3%o6uPs+KD
z4(vo|{mlIzSF>c!Y-%QzE+s!@`QW<z;_G3i8h`o&8_l|qrVd(3<+#Jj{nij)35>20
zCVJl5wdb`q!e4cpD;!!bEh8FTU4|rAxKwTK#>qeIYpV(;<s(_VUcA6ls?ajS=t4<r
zy=nRhGjkuk5@wEGPBP&NPOTigPcSh(t?FndXr@~wl^QenTBR{q%=@DsjF;{qm>6zJ
zjyco(wQ1CoopT|r)O2nn>2F_1&dGC)GPFyobB|@q@Q;ss=uc;$jNbQmz+k&F>&-9*
zX=pC)LazuZvnwA?Bh8@cxEb3h+&b@~uH+GrdQZ1AvO}Ppz|^d|8z*hU``uR%@d8mk
z-xDJGIKJQUv(2IIGlM(J(;ByQ?E4ZP`vgflJREJ26Ae%QF_Jh*=QK9a<H~}f92YQV
z=lh}@RsA-?pPe$B_ECjq8|i+2t}Fvh+N5z6{`T9!oEvHBCr|WwH6Edj3sY93r>9pF
zhT~(dHgt(_P=&p&CE%*&>XiB771Ehs(I%tmukPUc6M0&#b0;EP>Ywxq`A>S~Jq7p<
zn6~Y=MYgb%Yp`Px-F_$)s7aKe|EIK$8*75>h!o((k5FICp+8+fOtqd36MT|dzc?@L
z1*X6iAhD+3(*2=R4&?P4BY1hS-$CVqzXp}>?0<_SL}=i@T{-=Ig!_lXO>iW4PZa>$
zOCUKBL{I<IE(gb2f{PRW34$L|r-r%zMqvNjq{RPaG;;>6I1Qamn<0d5FoOF#_5KU}
z2O|LicVLb^b^mkyQPKv8dcEZTCPoWxy7u5MUj_=oA6#PQKe$9b<e(a`3zIeE0o|8h
z1mmug$Ztuoop>1-zHJ#u8R=IZ5uOO)l<H7w7*|k?(bDRteMxm?imL?oI%!dqk37N1
zBI?_wu+{*c+nZ_I8Rxp48J6#@J)g&7y=M?^iF`W}l{=RiB6bw~nqBt@VWueK2rC#5
ze|0+_<!I~3&;@tB{7u9%E%<BBjpLV!-p+I2w%AaOKnH+bHQCnn$Fa@H$Sx=k>1y|}
zC+G}DZ<Kwue?8yPd_9Q5V~vqG-G@`{oe8?+^PSQyj`SFxJ^SjsV-^Q%|2*S#Nv+cO
zLwi@F@}uOw`LPW6`DxzP+sL%l$*Oi@+^alf%}3oL*lOQ8mAa*{p)z@|mC?tf&85dC
zFLmzn{1}x6m0@-+u!%0-^1im+l1ef@*)@yc=d37=nO8$B@4k9I*(`Z6IO>Y5&iRE1
z=keNz32K<Y(q#T9kLOcRWOf@S>$yF;_^D5XS!Zq80v0@+BZSo#USp`SzBxFk5GT+1
zqv<Zy(yh$V@3-t;QC*9_fRjm8Di7ysqE{alb*{$R7}7)g-8|%|AUMP(R%~c&*+W+U
zB&Q?ZUaCQs$Vh;;4DFL%T9aq)8_gAH_9{14GJ=?Q@nuX(H~KmH#uRJ#1N9``N9dZW
zr(Rto$MdA`xdrqz0tGTGUYjN(qNC(gTz1T4H3|F1MR-`OhI(8&jK6nOppgMJNN1Kf
z5#QUo)o{!`lggM~y`q~U?a#Q&rFtil@*6h{2A)3iPI-B^H<F@xCjsNf>%72Me$cHf
zxpR|XH9B01xqk3+Ti=&*biwPN{4RxaD^@>quMe3<tTzrQ*hJ4gliOs!Bl3ag)7vMn
z;~tt5(9)i)yegFuQ)4Wkm@*viNLBvaMwU!hiC8QP4^^hpK2P>zGB2CuIoEX|CBFi*
z$FfZ5pUJ*M%b26OM*KTJWL`%#R{W6ByLP2>rdrmRasoPRk78`P9T@&`jlsL>)lJ;p
zY9wVOMya{xc0>Vyx%dTyDo40wYf|-Q=5t2x9tjVxVJ{dn=KM&@p^jT2K#vU?nG?oq
z+WH2o_s3%ti4@QFd)U&yiSN92Q}}kA&`}8CmCe0^3pR;5IS?G1*CykmEAC&^=f>h3
z1js&rg7MF@*m*7XjMIo9Cb0*pw-PC*H$tvMDQ&fd9WXCY;{@dO+qcW9j>aVMm#;ue
z&-?xeZHG8-aD9(XNB^uqF8e5CQ67gIZ0y!=p?D$V$c-ao7}_W3kSy{6TA++yvxc*i
zVVqRrRo&$z=`1ya8potwN`Bh>RQpV;J6!BUXQz$I>Ooc-XKBUz#&Rt+_P!~lLl(M9
z9aScS04HP0=oeLCLK3`XPe*q+ce;qCH$ruO5s;Pm=zcqJ<8_^HF2qW)KftpN&ehyt
zFYI)0AGmlJs7O!^R}{QDp8rEz6Qi6q!?D(uh5010m6oU)52c!E4vJSXlcKjEzjU7F
zLUhq*-tV8!e4oov|AY}Y*ftpukQPXw8~1ixjqZR3F4-bdVy2a;l%0Bylpy>@2DWc>
zO&Blz%o=#|ZO&j*sk3?Rhz<4VC9x8cvWt2HVJ4KD+jlNJUdk!mjHeHE<0`KzL*dWB
zf=~E5rGUf6Byp_~vqARCk@$JFYOjW9+k`?n7J|nF0p?V>W|!-3rf^6I<jb)c=nR+)
zZ4T3?Rfg**nk-JX5nUl>bx=ARsri9rb_6oVEdC8I6rInvr{23BU#u)bSI2BCr*p%R
zHObtMnK{uUc=?;_xjq$&mb`-3(&X8QI}onM@mGnm6>takQrJb~&FIax-R35!WxI;L
zG*5d<y7@!D?sGCyz}ANNi4|O5banG3?%$hu%~>8|>%sYs>us|ukH?O{Ji~qQZWTKr
zyPt$aW;`zvWUrPL7r#!8eF!fqD)LC!ZL4^-gSYQ?53iXk5(j!KaycK~%)*6+yugVG
zh=xk3LzE{E;QZ6k9JRTG4o^$QH~L=Pz2(73YGN$1OY=5Wpz5|#!rT-~!_0$z5yb)1
zmj>_b=R=jfRGuQzF13F>vI*`q+>ku~h;Ox)&_@3(+$Y+t0*X<@ffzqfHh>O!kv0-{
z?H7S9z7MM$1uZT7@Qc9G6dt!|iIO_8=!vC2S#p2#(2kZLh4X2~0~~idB)$05BV9iO
zTakk_5^sV>z;$E$GQPzgsMYt<3nsQO*B`dxXw+sYPhJW__gXz*!O%ZKY5ycxKvRB=
z+KGm~fE---gJ4-Wqk5VDZ(Cd5e@UHC|39dcdy|y?JwZAn5hx9RjTBkSEk3T2@~DY(
zBwc|PXB|jU@1=!J%Vd;ls#}ipW9dToIR@((*2V`5Un$o6-wRoVU&`>^z2vJM_ic}*
zgz!ozWiVT5Wob1gDMLNm@WRh)<^v{U4p}Ov)~#C-1WeH{DJVs+#HHGfKdwR9V+!pN
zd2g@7Hzr(!+BX?eB%G5UzaYkYLgXI|?b{PS7+?>C1y+@e+d1|ytySH1B9AUHBV>87
z^lS{W-&H-tf38OIT>tbKj%T<88-8zj=6(fvS}S$#-Rj)@l#mT2&G;61^UViR{!kQb
zLZ;kz6iQ3k(Gx1lwzCIbV8ZIA9w@deD~t-PCl~c1Wpv~$_sZgE&fSrI$@>V)(L^!v
z_+|Ao2iitKZ%19I9sEct^7Su*>YG6N*3QCjEC~G~NP~8?GPx}D*UU&1tk%#<3^r(o
zl`TasMz%OoJ2t7eR^xhn$}qb?ox8W)Z*$4IA4T3~?Pcr!G2?Btx-(xJPww)9B)5VR
z+1(dnRAEdb<g-v(#GOX00Txl)nE%<8R4=vvaX1cUSsB?jdi8=cdsLmI=9h&y`rRtw
zW@{#<>xt@X8pG^U<H`j%r|tT{4R52&#x%}^oN$P)LBXW8qk)04&9xVd(gm0OuYYgu
z_T64#_bWtV<uPmx$3A<qmwFSw{j{%ZUNN%nZ68o1AF6y&@vL2ME<z`k?Zm{;<vTh=
zI7Bv+;z^5owXf{QLh5SU?4JyvB*z(jgs(_Hum-{%ndqkPb!A*ME2~2MjKAS$m!j4G
z)h%g4I{ho7k~7YJ`*NeK7$$UfZZ3)Fo`IUd8*07DhO*g~c~M)BG$*Pz&+b49o!s46
zpz=pq5hPUJZPn`|6+X|@^^&KcO<O_JOw|>jCxcooM71)pU&^vSHAdr7L$a2Eq3E||
zPOTV~ModjNHbRJBmKCG$ZH9J_Swju`c=??PMVcTppKtpvBdYX5w63GXqeOQ0WU&uq
zgebmG0sbL6)q~6);$Cb&sIVFs+lFcG^7oCymqxAYtp=8EP{cvre);BE>><E@R#^Ee
zPi{RT`3YK?b`}}T!q_h$x;#WLU{*Dxzqw@3%*oLFPF22?#PQ%+_jhcdP(-Q~ap#Xu
z5)6*&yz7VlO{yg`3WL79r|V5XQc9>&)lQSP`g5YyC`w`1^t5Z@JTKEqZh21y&KOHq
zh46Zcq&|?28f|yw5bt6;bpBlv`i+bA%mD;wE>;C;zHA`ae!uh=ffFUD__(|U%BJHr
z`!bQENFcEEeX5Jb0GANQt&!jMoPre!R<OjSBe&~2PrPpYB5=;c(;h*Zl>f>Z6hyaA
zji|5cH>hk+i<|g*;QMBF99d*QOg~f;#Pr|s?nwcDat)!3|9bEzub9~c;Q;QAN&vh!
z{~KN*0C<JWf59t$oL9F%KwA=(n;?|UIac~{@rCJ=(ywW!(mp*g=iZ1c4I(DXmH0`H
zaNlGu06EVmA8VlKf+k&eV@izsyc$%p^n$ri+k#ha*(R+3O=Qsvf3NK8s)KQn1TtR3
zuT#blrb;CPE)!BlP>q2(11|$Lt5**v?)sAi`v*KE0693Nr@Td3pEt4|GnBqMt{YLn
zUOq^Mq<lA`N%FeNzD&~?!nJ%<?|v)tJ-qY6>dVLd^)dAw$5vU*ZDY&<v=r~Xt1^<{
zu2;<?=0)QaDBqqZ2*bPj0}sXP=NOHq_}jNvtKzdi+qj7*43`}ws|b_Ad0o8HqiLk*
zqXg#Z^7WKO78BjfnzMOR(>}dp!ls55y-mDt!W8~>L1H#Ky62APBVC5lq_n73(WSIo
zhLRzoF|OLY5uZOM8;m;3UE%IhaP^^0%I&WSp*|-S?0_)b{6*k3k*D1&4a>yD-YFd9
z|M~2REAQR901HQ^Pn?QAote?4PcE;@F+3tdEoqKVHzIABn`?S|&UREuK8uoekdbGi
zGW<mlDtlv9meyY_E*<NlU%Hs+eM_(Ee)e^PuIJx^?I`2vt}-naJhLK7`&8sDy1*-V
z839q>KBH3R>6>j%@iE+Koi2_kE5Ewi?IjVxbI;+IYw_WZaLVyK?}>Cl5|8yNS0aum
zOFp4)Wg0?J+KwM6dTFV7udXXH!kUp<uuEzlaBKcAGxS~$r#%btO!iM@R2KY={;;Y2
zPm{}2K&;9H(7u@8UOjW*)hozB*Z(Dp$ptza2HlB)y+9t2o$kW4`vgci8qGuyI}7Ve
z1oo=1Ug8~9tRb>pa9<EhcA6{j6FS>naHPgk0D`Z(09W>h@&G<(8+oLNPY1!xP|A}`
zqgEXK5b(eJiy=x5GB8Dpn%B5u?MqQ;kOb2z9N?eAmBy^OzBc;upjUNq_Hye}bydn>
zI|2LrjEI9_6}wdGNtKvDm4_drgsHxsyYSTW>2k?!(m09~ILFkhJ_T2quzsaB=1xMg
zvJEAoELXG1%;-uzC&{yp+RE6`p@d~!#y1gRGQjcMg7SCUJ`;bOzMo5qt+*D_sJ63d
z61rUICv2t?(PG%;aFN68nc;U?{oYD6@j>`Ow&>4vpDcmWD#q{m_AZBNp-@pHJJboC
z^Ten3!9#|{_B9n8p>Gh!JltGyOf~i7X+ie_XEa7i?HLT{&5UlZwGZ6aE6L%y04@GV
zZt=Y=wLSR7qwn`s-(7fkqpGzb6n1GXfo^0(+ZbkiZ(GArCL)Qwcr~K=y|SCwJ6q~j
z4vj6<wq1|>&mnwFSxc!H>+7p@47Tf4CCBQE*&Nd-j*NE)217i*2y7zmUNLo=s)=Mj
zxmwK}ew9N#5_4xOZy!=JhCvw*EG7=L)ncU?Y=BdF@`y#Q?!)_AUC(Ksu~|R)Mc~MA
z<VC2^+b8Fg8W%M8I4>ejG(2u{+%>EyZ5?iJn#uRD?UJM2T1Ibpui)5O#iB>n!~R^<
zM_-T)as4TBWz}}x^_WAf?E8#@(F0KHc4ybhamho6QTPMWT+h<2O}e`!geZ<FFS1cm
z<h@sRZt13ekKtenmCfx9G0$gfw^P|edfTLYB0JndM6Dj$k+8+>q?g^+h53J(5LlPd
z!fI5MABjwa+C%T@xmf8gy(D!SzRUMq=}<_CNr-BC^30Q>BDY5m!Q*j-2Ra$9jff{&
z)aD@EtSvn3yOXRlkRSOneFh!r?H29Jh3yixmfod>UofZF<}5(FH&g|Nr>`F18G2nN
zWEi{EB<%M(lp>~iUo<S!s9rNyS<x|%V%3_9&=4Kalymx&*X38aZ4{Vq=IEF?(P8)5
z)UUktnvSc$vs>JzOlGfK&o;gC_tUGQ^h@c@D2;RAOtjUhG~pc|Q|c68QoFs(>jFZw
zxdkOJcewc;2pPP2DEkOlONmJSX){yQ8Uq%ON!V7wX_le?0oYSw-(UdFG8F^UDP3#i
zCozsn7_Y^JCc=L`L>-&f6ae95+#UZwd!FkgY&-!Urv|Hlpzrpamd$}+iGCN>DVFT{
zLGs(&da?O;xk^G@jPD3!C-g)O-*^RreNYDQ_g}oW>z5BIz<L1#<#ew8mWj%NW)}}+
zv4{I`>?K#&3B*zkGD!Ee0CO+|UC%`xU(7$QfcU|-H$Njsz?j;*Y_v~6yCN$ZsT0|x
zejo_)*g|#<FEpnQebA0#)-|)qP`p;B%R2j$0wHm}mZ2uIB~`fslTdXymvm6*0p}Jw
zu6m-#Q=De=W1_A7g<jO<-t1-q-QtAiF1RguYqKDUvg=jL3bTRhCae~O1lrtRk6<76
zC0c3oWc}wuCj!c0!Q-Ca`z<>{RbHvg-ik>*e09>R<TxXf6Wg1M<C^dCln|69S&O%K
zs&h6pvWoJsnoziD(L>CqTzNiMACc4O$-mT+i@JzYxAb6{lNr<}x%k{k_3TXxVtR?y
zM8`?3QM~Uj0(-XVgJw*w+&FZOe-Hy;v}(+ItVG-F377WZK7`&-pHw_ThKJO{UVQ+W
z7E^4<bLN83-BbTcz!asX`bpv9W#17f4Liw0Xh`W5lE%36bKR7+PSb>FUd(~L*41>g
ziozl~P3}8*XU5=bB%n~yj3w*koxSDyjGNmUL=SGc85WK#Mz->b72dLj>3DX>qF27@
zE5FL<&#de%NPD+Q=DwQW0@1CEU@T@QusmUaNGL$w?JVg%crdFg(7)1P3_1BI;2OG}
z(wu^ERxPPeJJ*tF?~34m8o4ni&w`*XPFTU~6|(P3>ed(OzP5w=c8(-N=!Czs6~CIg
z-Ihf}qkSce=IR;AM@d)>G6MEzMK~d>Bqp*s#)#u>(TpwgLclFa>i2pa5s%1dvg{f;
zr<N25Bv)vu9_`0wyNs*=8A5xdkK4|ZGZc-T8xH48y)-D2vkB3PYH(E^>gNr$LTUP&
z34L`^AiZUj_KnAVcPCEL7t$xou$IkUSmH_6mPsFRqPuxU&n$4C;S#$R!FgUc;w>Vf
zmAHv!M8YgZ>D;UO7`1SgpZpx=bUWjd32KsT5t3vN?nQoh{ZQZ*eG%c2IuuMGvXUu-
zhD4d&NGh3wbgu)I4c0)2u$EEGm6!=<OEbHy{2lUo$!|w0sWChh#(mX6A_WeQ?ADVn
zqpzfF3n~^5SYXeGJ0r8K4>?MqQi~x<2CCyaM3#vpW+&4ZuhQrB5PLJD*@uVAj+gVy
ztwFi$lez`0z9h9O%aq>c(^1SM7l+YXyT{$^T0yerS%?P>BlF?iuT7mj=E-GwS4v*`
zh;dkN4N}u}Xx&>x-;N#(3)$QU6|N5D`s^*tw`mtwHU?~-tC8nA-{rqn9WngqSwY}i
zl^s*-QSbcvo6V0(9+`Fzjew=3K=aPetvD+)Z__?$$VY3P)wv%Q_}*l^qx14iZcDpJ
z1bJbAk}FTY^r+Lu^AO=E=ar!~=vAmC1oPMzQdt$TW~4Y*5r@}fg%ywSFAhg{@EL@?
zsEKBg8?An07He!|^j7bNf^yfgiNQOyX&sQyTt#*VEIX7_J^y!L{=WXSTi21Y61YZ_
z6CfKXg&Zr-Lve39;D-RR_m0;mV*K$+alZ&!eh~;CFlC-}qd;dOBo*W@J}ZiC!k!o2
zfD}CS`t7!_KLCoxpLYD9)9m?AEI`|cCT@Tp5SIdmaHqz(X89L^UHy@g5pdk+f+f~d
z`ESz9A}64D%~)4(b?eYY-afEe{)gi}Z(DpWB49iA8(lKfwg8GHJ9UlZ?3YTO@9j=8
zN(<yn!C!AxMYVsuWIaPJ&E+!-JF_}2n?6sj+$`?tdG$fIZ*aM;%GHfsH-g+bv25=%
z&F(C!dF_9gmI{)6+41cOEKmr8U}j`f-<m9&8@@5HwOO~yClAe_m`l1WPu_lKELrl>
zQQLRT4;j2aY<LXeNTs?1)J%%YnnZQ#(vy1g0%~L5Ug7nGK17v_x<!N!1XgsLs&F91
zKt!=LUX|^3B5RaN9u3DQA8e6$-J~{F81WL@s4I31Ybc(xhv6^D*xnt2cc(tn2rg9%
zW>s05V(Q%Wh=?giIZ<n%mPso{M&Ias7{=Emp7?qiFKQn$nN=B}i%(?r$6Ld3F55Mh
zvnM^lC8M0TTN_U-ZisxhaHL*4jEW|U@4NJ1OGHhk;(Pb}<kK@AKFSBKL*Akpw()ey
z)IqIu#;oWK9k;_S(F!ARO^al;3};^6rbtI<(sC1hoty;EyW=an_euvB%WdBq*anuq
z(IAZHi24RRw3k^opI&{@c-Cy^mQ8%<f<2_kU5Ow1sIcyx8RFizo6fbK`SQ!L?wnMb
zhB@ZtnF=lTvh;`!<-tuCNs)J@Rzcw|Jyesn89VHOYKYl#)zMVwTl3xP-uaU^y;n+=
zx7`mMhrBhRk)`UgEznJJQ{#Sz1)-Aj3z`G=sbzFmLM+aUQ1rE7%L$oYFtU#HvKVZ_
z<LZoST+&EXx+!EFRZ=@@&Y`i7(1KsLXbgV1iQDJd^c&CUjoOCVGFiBX@uWmd911mU
zRE|>WK69*C=#qwDp@`3vR}5zaB1PkqWV6k^m~^2}OC6V1ZwKTSEb2${K&Lg%ydV`K
za(jML_PxbX!=l5}CuF!LqL+@V@{%7Z*|seka=MfcOwg#HEk04TaDzLg1C-I3p$370
z%NOn>ZBO0|MEDa`>V1*_zIa9=iTA*FTdaDUdK%lTZ@+j8CL8L`_=8QuK!#~tneM$q
z0XO!pP;O!6#6^?qosC={PS`2P=_Ni=(qib*IvQsp$qjnuM*5b~)5ZDiW<^&zEL{>b
zc$I}nCcaxu(KuG>J^#vmzV`E<&b<GjD{l&dVS}8y@_?AQ1wD1;1<d?=HE)2E&YE2X
zW{g<e89>I3PN_~7(P97LqtXGAlTV1JGf8!(0aFnbJ;N!oTmu@oCO+gA5HiEPb%CGz
z9kdqXyf;{X&|e2BsQHfJH$^)(SJl*v^pA{{PPxfKBo>JMnmfp{cbz5-CR|W(;r-o%
z*lnX+SaEBFS=nIT@GQa?*YxZITo)_-me>Eo%GGA?9PD-Ew+GApbsckCuc_M{?VEIt
zXN~$5M@a*i0Jh5TU&f;)`DFP&)fE$et<Xn!^fsxze>WwiSD+3%g7Ahe@IAhNm$%oj
z=5v?v>hX`riEuXE(vgxMa6X5pRV9`3?Ai@;3vn8(ITROUKjl$H!`?uPdNy<BBgYan
z4G@NF(~NP4hSu8O@8o;d@b>@^=che+`6X1f?woJ0EW=4k4ckfKT=l~9=s5@bG)Ar>
zXB;(`L(o|>CZ@}<4=a=6uRAzAyata|eQVzxQz$n*@oo__-Z*Z?C-vb9{tZV~1CMGB
zUaK_+>`u}{^?RS%D<a2d@S0wqk)zMRK5IP!2Po1N+5Ti7iRDTx$G_3j?MB@}s>({D
z@p<rVQpIhtgp3K>yo}MQCo-=_)a?3>dM>|Sa6jja%?qQrs5|@Nl6Q%3S2A~Bjj&H9
zyG~+Uek%Mq%B*}S?Muk8hlwW5`xhOGgu85y@T*#MUyi9mdS~KTI8tzw+i&XlBh(F^
z)W&>seN|Dp<9eA!{2-*ih_hMho1zfs%$rM@TdoE6Tp(xdZ0>JV{x4-Yz*YuQmj31Q
zzd`JjI4bECJP8LD<X?=k{NW42`21&{$Z4~qPmW*=QlFrJLPYKkMut>-=L*zEU_Vs-
z_QP^I9rX9cYi3b5*nX%hd23{#j)DQuo&ivR0k;hXJkXxn+N~i6{NKPnCjNM*%h&G>
z`gY6Qwb!opodveAeOXeG1?5-GYLpuV?VDZ`d(cNvcmWI8)$r}UoV9)X=B0yqW`*$=
z^Bm4}F_Ml_Jj(9L^U&A;^y8dJ>9*}S2072(yLy~J)tE~_J-xVh=BY$DU>}fcTjlj%
zOLPb3Fc4BErY}P%;c6S5VqH~tpUA`}$9T>srLWT}AICV>4iv*XDzQkK91)xLZ*Rh0
zQpnTnNQxeXV!@XEO<oj?n(fU!AKRX7;#W>I2F1%O8Z2K5*XsAWB4kK*QGM`07_A5-
zjO9}Kh_qx@W7cZ9G_k_2QX{>xc6-J5_UL5gtb#7#d`Qz$Z0Tb}?P-<w7r4m2B0DVQ
zTZKc10fXi(a4R0DcHK?zoVn{kK9&#=MM~D;cyfL~c2d@64p>3nu55Q9(iVB7_%r)Y
z3Bv$}wua-<DRqDXNc<Q8hXdES<hc`hZxW!K+iT;iT0#Bn#H}2^zhoyqBs7LCRP3vQ
zY!1=LCM@&$DdU?5!ebNdc4#&}B4MIkb6>Q?u1|~1otpC2fgfKm?c1)9AclyN{@d3E
z`S(hy3<8AAVmxP`gDA{B0)OR-k&oz;&V+iJ5_*fuK*n{ifG+_iFIhY3gSKQ5lLErg
zFB#7#eX{c9EWFGy(`+PrRFg>+oiWk!y(#1BT(@H(1`Mg7ULA{SXy9_$6?e!5*PL}m
zFB&h$lTex$XUsYoRomlM{Gzcvo{2M!c*?rkLPd-QqHv9%;Jv_W>I)=sio1l8nk6e-
zUqpsyk+QHdzbUMV_oHrM5I3?&{{U<nAdX-Ne^tl2ZhY4IL1dO%rbxdcUnEKXfsokV
zQE+$fSLVuZtY%CkCkz<yaL?Wu#tVb)kIJDa<897BY1PkDYtO#ncr3(1*&|sapMP*z
z@bhbHJyRKZ2@H@krEu~wy-C#t!Atkc`-(q*n>}<74rDWpgf2ZhKi8w-%X?@iNVm97
zPU6aA7vm`#+KcNhr(CAU&Ajk)<}u!~ks+Z4a(V6Wp}JVHYu(U2`K8Zyzub8J>>8~c
ziFC>1uT1Bz=Fy#`dOP&1%%GzTiFm$Tdm8Xq&7=CA+<jh@tX<JuWa5!@BKCCZ`ol}r
z@3crpHVYQLyCf6>Co#Op)?;zzj_{u7P4HX0eZga1P2?P}GYF3i*RQ+X9r`eGS`P1f
z50?0rf#S(JuBW>?G9)o>#9uUzQ#nRYTG{8^&rFw{m=R++6KXqbD%nPJ)d%ib3X6d{
z2~4Ky%XSG-#m57=5$_$;KajQAJ&tO4lEN3D7dXuBWV<JYzxD-m^2}8Rb@EDkK!ynb
z(U-<-^gwy*VhEnP9Evl7th*`O-VXigo8%8JVHMJhe0S7A+{|y&+EnJ*oY!>4GdxW2
ztk%SMlfPZ^Q}2waS6`yPEu^%XC>}OzT(V&xJ2p&wjqk2Z==MT<3}NqHdPZjxo~1_>
zB0y90QpuyB4}}SAeFXIKLb^XsxJ@3P8F|D@1=3@FKZhY?K0Wi+Cfy`>46rr4dAZ<x
zeJ5^t7|)9cZAxT1cE#s8x>`F+8Qzb`snWeg{{Y4qaun86ETus0n7ER&xBjm;31%D}
z=$~euEr=Tm2B!MB3Q#s~Ewx3D?{TWm3>W@R0_CzG0?&)<>D1>vJ+%1r`80#)lXv=j
zz@e6(k$rkWVC34O@B%p}u5I-zTeINOQ2Wj|@fxR(CsfflVI7Hf5GzP~BGQMuANw%s
zHdichKn8`v?QD3W+|BB87S9`bNKBv_FfM&62hd{{EQla+Wj$a07XcJWjF-pfFGJce
z1-r6wU|4w9FENe7PlEOZPZ)St1;KUiX!F-k`kyvVS*)K0v%GL>WJ3@uZh$$zZWz?0
zWw1sk-f+Nc>X6I%bi$2#wDm#Fh`~0~%DnlXi7Y`YSA%t1hjP@XZ^c?4iTOq+3?%W1
z+~`pPg`}auk>gVM2W+kN2SPT`V{H!KAWRq-kA!oSSfcSiGFAS{pe}85u@In<Cw`l!
znJOY1lBfwmyk@k=Z|d`3C8{hObb!^<bPDWmo}dtHDwwN(sRRoW82Wz;Q2*@QN5I5@
zu63S+hl$9X*C+<Znqn+fcgYxF2WjQh{FN72&c#a{UYM{wd(}Nmh;@OaZdLBt1(QZE
zCesNKLhzo*@N{6<XsYI46fCJQ9b!vRDy<mIH`s{ZUejQ2;`OUEE0dy;SoE$SI$w@w
z_vYNz4UyK&F|<zj)b=yo+TN8aTa7+sW~1&&(M|5JoijDN%50Kgq0?)F3Oh{wbVjv=
z5bVOv;iN|B<}0_AN-gbTCVk4-?+#9zW-4%(3ALO*Bf)vY`Gr_KakO#VKfA#EkwW^9
zI`o6C|L8&ELWtw|Yq@z8j_N&LOC3#&|K^T5tzgm6^Op)117KSh1{ExRdx`~4u><Hj
zb8G;1F*ur~azR!4jEfJW&QM*qD5cbfPK?Hq16E*ag0RKygJnKty0<MT*1`)o^ByM#
zK(ce<5S*fK$AXNbQgbWsvF^AzleGcitB5N!1DbW^KPOH!!n-77<E1Y1-Om_^D=9Zi
z_~9!A!_jXCCYXwL^}NEV!foM<YJ5ej&Y$jv-0JMqB_O!SzL)P%Zwj@_qgZc(5O~|0
znA&qpZ7%!!oU5S{SmlV`TzvePC`Of)a0@2x`yJFg&w*a_Noaymu?0OGI?wK}d{))o
z#?xPDl`ZmTWE8S=V(q!K$329{aI=6;iK<ljiMy;R{WnpQ-~cA!Wp$&n+=Ts6bk7(B
ze{sJ6->YS?u0MkMh)@hR5#|(dJ+~L2GN*ytllDBn0{JvUR!3_EJ&(IV@p`USj9L6a
z`HGn-KbyO|X-DDL4k0eTRZ!cXkNb1V<3~>kB+h(56!aA5vo<Yj*D71_e*)m)C9bEo
zt%yk$Mmd$!wZ&DBJGY2rpD8WCeL4gS-IuPvPu9t2J17Cu!DtNylvBLp-$33#ub{m{
zV}oqOMDs`@zWTsOTcL1ZL)5xt9g)`Wy(-p9!>6}s`}P}qyQcubnQBz<NbxF)0;k|?
zw@KSo7w0Y_ka>>zshbvM7ApfT0we#a3(_3vpDYl&kQpv*jhv69wc6=PHL^{1Sgr}M
zAeUB|j0-=t;<+fw#{D#ZrvWmhDxG$Y#C>bUCbC;2J7o(b<dtyKZX5O5d!dcclDwXP
zI(F5$Ee2z&I>nQvy!bdDYf^*n7RfX&s-I?9M?qqcnNxMkFo_D+_yyJlreobO%;%xJ
z8fH(Gw-zf8AQDlOM;F10=t1LKx_KFy2R{r)tfXI-r6e_)Hkg<(vOTQwj`7e|x2GIi
zEO}jQr!Q(5)XDArj)r=o(DlYy+MxDyM|9P}x`KfOo)z(#@h$z?gu=!Q#=yq=50<dk
z!W^hSePBJZPi?sv)z;|kiiQT*<@0ali?(@ld^R*vb393xiED1IzV}7HO6*DS8wHNM
zfB`4EjsXYKXB<`LySr$wIr4^ZPPgsz>2niWzCCln(lWU|bsd&HEc@~Y1(UVS8+o-#
zbWh3zU)kO{Rub9Fjg)=7O``L#YF{>FunsagmEIaVpXWA|q31>u*cs|GV>K>kbx}(C
z$99bKfrPljl=z21^xbUN%+6`P;Y87rz|jW9gajXUr`!T5-v#$~JiKhd?H`q&1&7g&
zG<si~g`8Qx-Pr(^W;)|r2BD-aRb_>J`HjZK2KOu~G}zd)vBudqFI+Gm;X8=Qdj?~|
z@P1v>*_6HJlZaJ^j2*juIwo(8{rE&4yROdjOe4Phinvgt2T!-o+_SQ%?(7TE0o+<h
zTQtYKkjxD{_p#tTjE`gHYL!pTH17yJqu63M-#nzttgfrc$&dTVnJ}e5$keM&r%EiA
zS$e%Wkuov^Q<?T75vWzxH4qOPEgRn(p%42MR$~<4PLU+zweKv2@0IninY^%;lV@PN
zvFHkL9fqzkQNZ6i4e@#X+ihc%*=E|94FmrQD*dvv^rqvj$;~*LsYZME*I!{=DitR9
z2myLZdK?V~>XWNri%i3O80|5&WUm6#xZ+TJnbhi2afRIL<;~J^k84q^Jdtjpl6u}>
zEaOqTzC;I@$VHsy=6I_=OuNL2b=xg3v!qQ}QS?iZ_45I~>V!_e-rzp(fFs|9LZ==3
zXggr`yLBC;>ourmAv4t(4d7UTzA_Ikp^WS2h8Ex)MQR=ob9nix)8WME89yB5d=i&o
z={9jlzAT&d`qSKl+YdtBcAtnG-qdh^-eFm%W3XNlvc{@3KwT`Sf6guK3wkAB9xa<L
z4W-U&+BF{Ua?BHpnV(jTmkO=WlZW%i!IOOq<2cS0r+Dj?IMHpa{vx<pR|p6e3K=3Z
z4hbq3E3+p{<{8n~v)3Q9h>^P4#->bi@y&%ZM}DauG?%n}nqH)`hO<Qop6!yYJP5|=
z<&_8(hUdQ2yE;@i$VD%!{FX8f8|Ltf;E^-F{BUTl?k1Yc&t>WXuM~{N5TUG5@uj$^
zq7N=&P+wvrc56bJW|*6!sm^t&=E}pCLjRjSx96Ub^GpVefCz=xEIVdu1!-*q8E-Wj
zJAiL^ZC30y&m17%g(q7cykJNM@sBaQoloRSdWXhQJt6kA`#}&UwGvZ4OG&FRSF8OH
zjS4Bv7`|Ry8PTW~!!NZ_F8tk0sL+~~j7%P#+DYOa+;J4tdCO%OMhUkMsElo9Sn7#g
z^6;B2hFJ3+*u|C+mOx_#HcatQ&T(BkS>3L92t^%aosLdCvAfba&*ptViT-9pc($57
ze`yQD!B9=w&J`p1l^TScMRdZWaxv^sUb({*g7T}UrJu-ZuJ>cdk8QM@{rYPO`usBq
zlyS`E(GCrUthSIM>w;^})p!m%W4GRf^cw>ibtAL)9iPPKuj086tz=oI6@2)*=6yV^
z%&WWt{N{>Dsp+3N5?m)}xmj3Z%HCEsuVwW1Zr{4i@b<**T-%7sMXYYeCc0xTBb};z
zP+Bp|cKEpbSSioe_M;6a?6QXVmViTElcY2AWUs!Vl6|>S->NQ)rd2?jh8wz|!2n8#
z2sIua*C?}1=B~OmGi{Q(`zic`e(TatZs{zeXOkc4#wzQcIo=AR?$<qH?90>Zx^btY
zwrh<$pAt`{!HjG`E}jl=OHkSv2~b{%_W%KYhzRdDHnDVqa_<6qckURr2FYyU&b*`s
z{tDuVtgG+-lntiF!cW1&k<;cm-~L{n$bc?9gB5R`_!a#2@defY#mDCeoeinqi548g
z;=hg{L3A>=+j*-1!-H&uQ6pLpg8Cg?l8E$&?6n)wcl*aiJ8tuahQ>T9%BKHD%(5_C
zXAOoO-2(jhvNzz^FW*Pvuh(0Mo!?8N3UkBdZ0^*F=e=xbB`2}Y$}t9rpE9IVLLgp{
zitp}ck;N@rNa*-XLnIBtR4sm23q2Dof|YPwHZ)uvP^9s=rlj|VFh=e;+VI4;5I>1O
zGgQav+sVS-yT?mk%B=g)i@m%&n7mtYk?es6!MU?B4+zdCpL-51;=)}{Rm5-|7<n~A
zEJtb{)z^dzRrNe@NbNZ5{S#W(7&%8o57i7<Xcr{r!32-HTPsSHe{$c^|LHx<^)iP~
zKPAXLAlAvI&DPeVmXhQo8akU;mC%%GTY%XV5J6Iwu?K;^7#-Ua?ub<A;TW^nqNvZw
z9OZ@8x^w8I{MgjdiPb9C7?0-$U;U_sQ1X-eT-ofgT{h1p(hItU!**%k4zA?y87SJ-
z&mN&t%q0aNf|(tPUOjGyNVIh1V!}ZwfFZ^JhS2{P0o*6`rJ1--Tc=p2IcPVcto}cO
zz^yX=|9#1&nvoWWJ(6M42Q@F697|FowU=4$H%(bt>Fz)w-TalF_}oryPJd2&9jjVe
zc@zD)l}3ZjXRBuAV>zuROxawW)r_6kg?78b??-pcogC%pT=S%w62_Ys6X8wvoZVv_
zyVO&A6`8gs0Y(wiRvZW!zmEM`5`Jmkh0uM}1}ID*@;)+2Rp^IMVX)J^Z86ESuE&Q9
zZ-*Ap5kd3n)&h0Z>*c~mYS$`j%6gl}*Ur|z?W$q=!gncbH@eq8N0xEBCt$CdQcwkB
zzd&jr6(94%Cqe#ZE1Q$*SCbCYu>Fq|={1xKLFMHW3!$Qkl1$$h<kgE(9+OmiPm@Ho
zO5*uULoAYJk<2m&AFG1G`4Wd!4)lHAt5B&jI_OM~Io%>K|2iAkb5^G`JR{u06waP#
zv{`*G^jd_Pb$QbhqS7xHzIRi~$Y-CA{YVH3TZuz3<WS7R^K2N(R_(FLJ9z0*oj5b9
zjw>%h(DB{<!Z(Pm*~(d+M?_7P(U#%4rMA`rHMZ71mRIFPh!s@E?LV%pP<vMw2?uPp
z@akd(??~16=F0%RDiaU^#Q~8^5BMBTzk*p$LNKu73O_mm3<FIMIP20GW|%w9dlg7T
z1>n~Uafu?e#CY#~DEbN#oe?f5KMn155S};z-#(ISZ~-L@l>`J$LLgN}XfCdS!y=P_
z_4oI89r%Go5Gc~1%ZywZ21kRIs6V8j3oQ%q6VDzz4PlnaQ2ok^1}HZV&NTnykL#$d
z?>qfpI*$E&(4$?z=D&jFpyB<=yN@rCz5jaErT=o(RnkcY(Cyt!K)i)PG12xeBVmP$
z;5q7E1-Ajzj|RW=A0UF*8s3UO1I|oP$KkJwZ@05ebcpdDEp)OMC&V@%-P|!<q1S-D
zHBJ1n9<;3(;ZG5~G0j{vtlRZU^z)OpYo^N?5Zf2B3PJmfw{Gh?%ANCwY>GU(0SLk$
z)gnAy|MCL@B#^8A5}LfUEzUxCO04rviFG%SP5+&m2V+q9yAWbPp&7vLt4KnyTyIx!
zq$D$Q5(LJ0x~KTxge8A-^YDLgbD%u@XG7H&(9C=PDqQpKt{ean^yQQ-q_BQdah@{B
zt)9ZA{*wHsX4~sCT{&$IyB@vlX*5((Le<P3%?LD5E#gb(!RrlBOj&e=OzZ;XG%9EH
z3l5T~o5@g;J$*|xPp8KrGgLeH=A(?&ZqH0h!2j9ylS6Qcpi)U3Sc8t)Zwuln!M?Nb
z2-$QGY)L27%yhp9h<B0OpMQW7F}smRhd?0#FHr9$qzePxf$CWmw4pGsO`E{Tj8RAd
zZx;{8ivmrHiWgAYJrx%i4$=jp!C8MCy$_D2+>a&1%>X5ZZ9hH)_YRyoUUUnbnd{Fp
zQ(`1xO=pp9*ZQDnq&SewQ%_X7p(`^BkX^`e+Y3A#i00A9U5dW<LGcqcS=Jt04D)5^
z0pvZ14C#)8vUHIXJBN4@a&&9c^tD=aZ9za98lPKb^9}Afa_6~;o_kDt1yoFE(~v%h
z%;GAKKpp3mkX;R=lFOWPE+=PZQ95tEGG4iVP*V{>oCV?w1pia#UN(T!R$w8I!GQ(h
zk8oBFy5KL)Jy+;#ILJ`ef`JTW(m$<xzW9Hs4gwrM_~H7U&^&E?qZn}fR3rZ;QZs_r
zbOn(bi^ji=)I22KTSuB+$;s^bGmA@s&oVXjOm61dMcN$}KX92|7&v-mzQ&guUEq)7
z%AB&koi(_pXYg>))QgE{^K~j&pGrz2i?Y-gPu<Z+y5?l&o;;fAT(tZf<Mjp4^8(Tz
zXKHc|j~K8h&7AXo>`FYAR)O}Ztr@veARQ&omB<#jeB=9lC4a}A!nRh)R@$}W^!kH<
z@Xl*tNUPTiWKe&nXjG#pKW(=Qi~AgGbVR-{&&4Bcu+&<hq|cO7bKyyv7kuMcruCgW
zv7hu89k{6P3&(4Hu&4(Y{uS+8jb2wnd)ZF2YfxH$BEzA5iWJDI-W1Nm1fL$2svi1o
zEV9elUkmlQ$WoB;ElYp3e`+*8-IYj#Hs^c2RlMjp{g80Q=lF*zSLs<ky~{`B+(DP6
zWR9;T#>ZwFuI-ZAUdXqMpcgb>2d*M{w?*%q*sceGo-FWr!O{8#Jjd;Vq%7M$;6(5#
z?%7!h1pxA(=UurF3u+?4!1;s6^A#zWhb8tZ!nmi&mw9mb7lE-b##F8!Cux;|D3hr}
z`JCG$Tj*$u>VPv;p1pDBE6<0UTXgf{fd(xz=rG_@LLl+fiW)*C1?36{vlUa-ZBzA(
zDs~H3CG(0&mXu>5T=~<`ZtEXcl;0q@4g}Eke%_a7PtKp7CuZcE6ux0s<Fcy22}o0x
zwWcDNsV{o%`>?*+5`qX~LWY3Z`8JtoJ2EK0q$AI?xo-k^IZTi8$cL&b@SR^`T4v6E
zRqmq6?TPM~4NqNy-sRJbsf-XxP9<VP;cIpJ_GO?=S9o1bW#X1{gtOwO;;lwgX`a$M
z-O9Zn`-*C`@1vDRLeti0E1<_$yy;z2Y;?!>#N1KizNQ8m)Zb-iKFfbrf7$nC-pl3j
zLU0FBWw1$}DOTu**yS~+yyY)lpV!0^-&Dp+^Tm&M4HsU8O`Qxlx?hiS@-BUN;i=(%
z9XlvRH=85nQCh2}(zj6a&i<p<MDXUY-ur-XwJ7??r;;)`5TF_};wWdK)cK*gi1&?&
z7KPV&Tg_cPXtXcQ-+7fSN%-nkl*ZN9J&F?g=Yu#>@hvR$y*L?UMkBI7v@YeNA;Rg-
zZgY)6k4eU8^~>w6Z?E@njxw2gwcm?+bPWiZusO$VZbZ)J_~AkDS-ai&9ps|aN#&t;
z-puy?j?dOUOmO;WeVCft93FR_H{vQ`+b;r%6qDC)Bl)3QA#U<!h@jB=S(Gu^c4pK0
zZQAMdd8;jm#?amXlkUw6HMRHD@2L6vUzB>YroAEgm6S!nB-9q+d?1MK3A}vIz(>It
zx#4KWy2}*|(v}Xy6RN4mR<INU5-r|sh2d?*!}tyeZZ{HtMB@_=Jz9aB>~I(HzCq8>
zA-~CbGcNFxHtW#oqh6;*HXjG3WKE0c-aH?o){!T>rpaQ$%IzaYkm7$SkCi<p-RHd#
zwhy~<{J5v66|^;90KK>sHHSYv!PS1w`LK6&FXQ5qRNy^-_&=@5a7r~=@nURP+0!la
zR2c<*h}{2%wp_+vC<N|fsuL9SUt+4rtkdojpzXz}Ui;U@@o#`I-ES~$Wb+R&4Ysxa
zy&H15PDp%n!7J5%o1s;$TsO!!j-y8405fXz2T*488#nvj{YW=mH{M%$5GR<9N&o2z
zJF}*rkp@cmGp_qUHp!)~rxj9h8DEX6L4S9Q;66hIvb%aN%`l74yS+NNIo;XcD1agx
z&?9;gMa|?h85Zl`Q>!<q+w?uz1xk&RA+P3s*pq%&{@G)B;_g=d=t!O1DSd21`FL)<
z4aQ`iG+Xp)NSj2jf=4zt^_Qr{rwPw4K$|i?V_*$46gcxd)lABO@?p~SdyX<&L9ZUN
zzc_!S(k6XLo`{(3{0k|;bH=ub2Ga&>cpmi6LSa?N*!_nW7({qq(i44%nWFHd)L*+}
zGqXDaqG$C0`!(ybpoqN*&+SYWymHyE&><@#=P18%_LBTqt3<y4#<3)1dj&w77XY9J
z5Lj&h#F!88p)dG^q+QHG_83XwPoSWa-6Qh4Xn-{nP^ZXQi@z)a;6H_$Rq&&~J8~??
z^28x2;uk>`63>%GYR`o1NLs-Y0c`kkLYWNOy9FRF!zsjNPAtdmga5DvKHHB1MD37y
z1NFbZJeD&6`|<9I#|YjB08bK)Vk<0ip?epA-_x%IePf?NaW-}6AD5@14WM#zmHWx@
z=?NL_*`V92|G2I56UtyNE7TkU#~TXAeFmd$09kkWMS$G{S>BHYx(x81;64t)2lKhd
zz#ek?L}u_tr)QDv0w}BJ^wKo|poWC#>KHL7F$}*?-HhQBw})3g^azc+Hc9!`+&NjC
z%-M*;sVc;}Z1{e!)nVc*zkx%DrDOeyG14R82;rcC9(nx#hH0s{HE_W!6abcpp7x?S
zn!qamSs9IA`FCZsK0z7~Q1hGJ!V&>F_(zHyQ_p4sh`hG|i1KA0q{%1&c=;c_ft|7D
z$aWz(=-dmEWcvP_ZZ*WSDBKk+UJJI+b9^v>+za8EFEJ8V+@@;?6&u_v;kAw2APqH=
zy8m9YRAsU9NnBuBjMB7CTjRy+s2o%*)Wz2yKLaR`BIQ;5D5?|`*t)iAd>dUCYMQ5L
z%jD)B@7yM$bd{PdUgOPTzLFHfHi&XI&J&-|^qk!V@9wqhh$z<BsOg>Ia~i9`ybkVW
zuGGG?1k>FQI@;lg#JFn@*3=JvdUq^<R>@?(jPjqRM9LVZurp&5#(J%J4y6&$()&e|
z-Vr}F=TzRBClKyDcDHA0edSAwac+TL!YNyNh`mo$%*4b`Nf&Ger@kcTPfv1Sk<=>`
z_{#cCtCjq#OdY_j!FIl^f*P-<FMz<C>kwp{JhJHwG0w2(tm6QlW5iI`4)LB>({}xK
zT^VxGxdz2BbrOMMTk6mVf>MH!MtOAT{;<*BF+<r?WO<m4F5xmq>BPK})|^6T^f{_H
z4#V@0Z9)!bSNugaNNf_0`821~JjsU(L_+g##41#%sc=M$DjsIs*<$6BUoDB_cHWme
z4S@TyMjmC?UDyX~!F9^o0Qs#3Mw?qBBO6WGLP^@3ZX|Y;M?Ji4@&@f|&cq^z3rbf$
z?uzF^%p>;-cFx5v*jp;^0I%m_&#N+Hf^G4}6Bcr(g~kJMJiA|wq}xtWt3ZT3yKU*<
zMf~Mk9+%+w>+CcWTcqAn+x*SbwH|O=^URsMuDrD6!&+DB-=!q$@#z!B+I^{Nd9itR
zmaH&}YM%}HtqgXF5;wSY7CBqB7K^`Dgz*Of*oH2&k`J=@)cTS8PFXmn362+R)QCcw
zE#$_gmS-NJn7ws+rKRS!{QJULm__w>9~V`WSE@gD$cLwhX^W(%v>_gI!Uc($J}**>
z>#o9ajDRq4j%+jHTiycd62Y?#kn;I4Z#l@Wb`2F^V(Xu=UigbJ?Adh`8Z3(evfOBV
z<vcl8llJ;}gN>%T$=O179@ZyiUt(jND(7ohczTL(O1gZqECnJH8kSS;GWTQonzdS#
z@}4*~b4~2Yrhu-vJI+5}o`zfhr|pYek+b2ZfIc8W{w>KL^ud?b+w<R>W0&Koit$<+
zzimvv8~=e&BzFHaU+m8h@s1i6O!IbuQVlHGC`b<41kmuW*+KJATiB7}FnGKs?@yD1
z>i;%5$b+JAKJu~=;=QpDCUL%Hd`AEMgOZXU4Zl}b(Q;oMZr<zcG&5~uX{aTgcPWxb
z_cRsVZILwXhck!~pL-&=c*!T+R|H3dPH4!&3wmGPrVFZZ%t6GqcxHx(SPO_uOqmz3
z^iJO8jH>z~6=uNxx(zRW?{FtK#q>tEgSwNO?vF!vor%u5PGPQ~53H%aa4A={vT9To
z3k0*D?=6doI);Tpw1)QV@9p&Wx9^MGNR8F-SP0|o;B(~TC%WHq>;JI#9#BngYuI2E
z5EKzX0jWW0DoyFqf`uj`s3@JNDAf?@ogfO*5fBg%B2^Iq=~Y5UdhaC^=`9o?km79g
zoO{pl-2eaYKQn9AtTnUFa-D=P-`-!@<t@+qJavK%BX+DeRZDKpj-O*Uy%eJH1YR-7
zTD2oNRmuArRdd?2@Bw@)L2gwD%$2X#2M8bDf6uW=C{mk~sTNR-niB5~n2}{J#pO39
zQg$O9Gb9E_wEe9Hq+kg2GV_2mgWMQY)cG}qX9P~;)d8ptqpf78R|LHemfl9PNn**p
zP2F*@uQksQpH7mzTA=a>D?564<ecQYr|r&Xh7L8?+ni`$T_tnXe!!P&Y|7uVaU6_m
zSkru#mHJX&KZhHcZ}?T3>V$e`&E&9Nm8L!E;i)4-okgT%MOM6X)o_@<R=pOhrL0$$
zyS3bsX6i^2fA(t31y!*IA)_<JgO9zRpM1o5N$)J9YYdw~Xj7tfMu65N+;w43^ts~6
zK@(M}NL1R;sPVP?zFR9^hGrMr!&Ml0II2FrSzW$+#q@~8M9Fajnxz(8$0X%F=Q|R^
zC-jF$TdcjHhW1Ye!d1GBzI3xXsXN`*SFX$Ri&HzAAt--i(PP?VoxawXMYVIfq*vbB
zn#J!47mcafN^Hd?&ce3V5ZZ(n*E^-c<zw$$c-&bvcJ3|TYzR7-ctW6oj``}8)=72S
zPmO6VepRGEs!+U9<1sXI4$qUXEC($<9X)M&F~1`5%2A_t)7M9Wh9ANQ;jSY~Tr7A^
zdyf9HFEhS<jW12Dt&=jB?u?qK#G98Mwlja#a{i6-(5-X#5ou-0t&FWX4jwQZOVHY~
zv7{D*rl%wOh=B%6z<0GZMmbRK7Pur6A;~Co#r73%)I&>WwGXOMcxyP`ehR^2)SKl<
z&t`=qUd>hG?M)Q47-_WR>}BS<VVSGg-XvV3|9HB9(wJ3R3R|G^%B%ASgifAyLQ_Qr
zpEfN@H#CCPA8lSqGwe7oNpzOJb-g6_HR6l$&b8w=9!E)yY|>;K7}s|Ml6Bm)UV4b)
z5)rqjH9AELme|{Fj-Q%kJ60^2P`54{6#qzU<a+j%+QSz_*2YG71CHxyWU1P}BeHgT
zDDYLpD6+~Tz7p()L+-Q&M6;u0-b@`+sn09X8`4HtO9wI^8s#-@_fVgL`T=3-Ed_eL
z@?Lq%Nec;g>f)ET^;WWvg>gpp)jz+okcU_?7oOICZ2DSFk}A@%G1`WE&>6>vZ4_NW
z;xn@)5rW1?9CNlD3wz8<OUNzMEt5kcyoIvJz4vE@Dtcy+1fzT_g~pDcrIU^WW%M<g
zPGs>669W^gBZyDj@wfX{*;dRCOcXQ7=ehbUaE*Uc=|an1s_fVKl-CX~K?QR$`82bq
z4-}yDj2;Qsj0#?PVd(j3^_52^IfStGCTxuO1L7QqgB@E!9}|^GaN8RvG<4TEeD4=Q
z@&cZAzwue@ZI<~Y)eG$S!V|3USV#V#=I|5(U!{5p-gFk@cO6e?e-Mq^+2c3lwLmYq
zdEz9H-$^Lc4ytD{OSPP(0Kmv9Hy7EV{%prG(mjg?47zQEh+j`{PL+pDV`T!8G^?f^
zf+YB;?=hx}mzX8&)UVMl6lWoAa~8Cl*uHi%m)znofuk|@q&`7Ft>|+ZY92!f2}4&X
zud7bx_-$!Y*Gh9;SWk>DLj=cMaIqE2`WC4fq*+=rCfK&^bPu7hoF=1>Z8Mg?Z_Ij8
zK9OPosESM@7&jWV*K>viFh1_?3)6)gX0G3^a<nH&Q^ga^q|P5_0$8dSbh)Gi-(d36
zZqW8%&J5gjOEV^Hi&JH)o!!&=dZO`lne+m+)vmY&KJ`Z-DG*}w!qL{$M@#`<zupOq
zuDsAqM5G(SErxxwGfl<vl^xBw<Hn6H-YHUU&OI7TL-|ToCWju6oWdM5v|=f93ZKeh
zb8*@@`Mg%3t*|hvU`TjPIIHKz)o<57^+#ZpS>nbYmh{rP_UyV(eAjvjcG&`q58L?#
zS-N_n8vtrHCdP`VeqJEv!=h(AX2;uG$Df2f_byjGDM@QA?k0Khm`39HhVLhJDS&yM
zUne-dCPzLYe3i^V4}3i<lo=E33E`&wHmYC__OPR4#?;BncpToMpYYQ2-!*$5J{rRC
zgdoy)pl3t8;Po3rU<26gg+eg6ThO63a#ituek`XJ{d@5qV1mloRSR1NPQiUc%rCNd
z!tVcUn*|Zozw32<f)D>Sl-EB%WCM_)b65K?%a{95Tb_W;UK@T8Gd-g71CkA#<9Yt_
z#R)GeRAUj?mW@q8#f_$OFGN>vnxH|*QtTnXOrF<nsM@in$5F+K98kT*aI~dw$nZHj
zl5;6JTX(9y2<<%ib-GVpPCDRINKH&p;HZ&=-qCCE^hOM!mv((2_ut5CqS8(wDo?w3
zj9pSsj&&%wZ#t5wqxn^Unmbg6t5Btbe8Rf1Qjg4ySGgaNR)OStQ=a7LxcNLM&g(wK
zS)(1w@K95nXbtuyYG^>rkO(8!6Rx#(Uv*8+E9W@N3pqu#t9mu~+w|Ln6|KpfXO0=e
z8acEJJB(^%Q}Ov_bwqvM&Gz!xP|r5V)d#6Awc5|_!MH4>PawY4CTFlxK6*BXeqUsD
zNuGY4k=@-TWxYRMpuNE|tuw~!5|0I=X*RWu++5a*coo-?&Nbh@u$Ksgh#mIJON|KW
z-Q4n5v2zp~S(gv_Q4`&afWadKd^b&qecMEie~@$3dQn7IZVR&W*@*YM^B-P2?l$q2
zy}B5f?>W)IX<VNNW7oSHA=Z>6G9f1J^Oz@h1v^|6Yyc(hjsDq^<bzIvfsq49x99^m
zFb>jt(JCIZUtoy^BYbK>KFbic1dMnB2-Fje&4px7{eZ-1gb}HLpB#|7A)(Mh4zN$e
z&gbt-tsQtjvxwOo0ahl49ys9Lt_DT0fd$}UPJ*V(+BXWW{(y)S8}BD=$o%m$7VfC&
z?m6Jr3V@z0DDJfMq2`J}yIxRG5TANsF%^uSeGj=7wC(uzVb>*)w<ra}R{3Y&7cCy4
zw+zv!tzXyOy-{d{`q$4LDop?&O`+h=3pe{@zy+J`-|x(Pzq1Vo`LHbwH1dy=y($Mf
zE$t*5a!u13D<uhP{vtJxv{}S18WoSRa_X7JVY8w2{liD&ID!OT+I+9ye8AtTSI%-q
z=XBL8s@-GIY?anfW#^L+-8cJcSrPF_@;B%nyYBnHf7hm7rz5BW41FzrpW7RJ0^HtR
zaHe3ec_T^B5U~BcO%6~Fz6sq&R4)ERR0g>elhwieLoL%<?sG*z?65`V#1!UDa_u(i
zt8NPFcO+zvEGZA@I5?xXq50&fc?`}hhnRM!4!f;c2qOvi0Ert1z#IJ!aqj>0xBs?e
z294*z5L3%1prq%bsQr?e7r&LvfCY}y1*90Fe^$&q20YelpkikDFMv(@KeEY2Ae+qg
z86>Y9M}V*SciOnSbzc3bji3-+a;?*U%rJmlR8YLd>Po8LBlQQdN9}lmGc!(chfV+z
zxFLGt3HmB74*VOy6pNw9Q(Ubq>h;S=YffZF7Fdc=X)|9sQx<UD?{?M6iP9yw#w}x=
zTqaBYjHU*{P$9~Y<+iVEw7vRBnS3ev5I&K_IKI<RbVskSzG8qO{l((OC-Fv^yJltg
zQ{PmL6-=C{ce6=)A}J^r<ivMxRyx3ck>cPnm~2E~U5{xH4!fL>Tf2%kO~V^+mFq7%
zEa?kZG?rMb@-x;tpDh2TLg!PwQ*vYF>eHEnZ%s3L$WRw&jrH%10a?V7@8zj)H0^9?
zUDI{)L$BPCyL|3}l?;Sl6qIC1Ry<x`s)Zjj&G%dVo+Fwqy0VpIejjaF66k6$#?q=h
zD|u*fL<mo@ay)oeuU6A`9ppcq;yBz=$E9$=ZjVOf%NzTJ`^Pm`#L}T&J*8Q56p1$&
zpY5=pNIEih1A7?wI`lrPD`q`gK_{(GMbJ<Vh(68zWch&Okx+20U3TolyZ)nDPd?F@
zJ?u0hw?pYg96SxR5F*&+ve^vJEG%~~f9pU@QTMP>3tC*T@^G5w$1B;(A1DvXA~dE3
zd>veDc+1xLeGd)=7(5+Vw+U)yIdmgrXxFRJIlR|14!JvvZ^t>W?4xoy^z}8(vkjDn
zUo#jFk6=$cwzowJWgZnzy+h>`sL#p33(3s?n87<0azHO-3gfMKV7)RU18!CJIH7O5
z@ZiWI3$0zJ!bVnF-y2K$bZz+ZPVvRnDmi0U(x|(vpw<z*v(`FQb_Nppegv+s?0Qm^
zmZnenTUUqO^>arI)RR@sxO4B{^fGHhh=M|w@1??CjZ?yB7TM>ctu@|chiB#JjM6^2
zdO^`BSioZXv5HWR#C0VxZVOS21^t1A=m;Yt{78+|HjadDjW&Kb#-P~65O*{J&-LVb
zdn{o-%}=RK;Yeo^Zf8Q;+l$$n(Ta^L^8N656WwbrhZy>&U0Dg4`XeVdjf=z#%Nt9d
zwq}n6J?aObsO1b?|IXF?9#kH}v@l;cKx(Y~`f1OL4y9)p^I4g=+GSGie>!}TXU>Jr
z80}vvjMuF(xHhnd4v>&zmvc-=jkBH)*SRb<($<9BHJ3}hK`qGh5&Fj4o(v^A<FIw`
zqpBYbO{5aD7ubgv)wku!og)?vWxDm?^z2{i#IAj)QrrRr&pK>}d_|8FDFJGx;<EWi
ztfiDN$`ob&@d|GAOIcQ5!N8sRb82HcpQE=IM!45313U*$0mI;kX%)tN1D3lLmP^W6
zK|ku)69Kogw%qD^X@iK#CC{~t<Rj&r?G3ikOckP@rhL7MJe`k<{rc8Yqa0}hRc*qr
zinrcers)^-=P2F1(!p+iEOn%th)iCJs~GkS%}O7Kk7NQ|hB0rXN`_!n-Ny(e{f7}^
zS_h^b7gH&ejNZ$=^I*rpeJg}XK@ZI7Dr2|5C=!|oPeKSwCkr+1jkX)^SU<M9_*Ob<
z^N`R;#u5}Fe>lf-Alf<3F`@p;)<6s+x<KrDn^SR+Y%IeIUv`2D-dE@fd(64wnZ|e2
zU*DUb2|4(6$^rJ=gcdiRlw_>0UrpEOmnHnfVSw-?Yug2JzpVJ#QzO3-rj_QIJgwLW
z^}B*yRy(&wcfE|ln~E<DS52o`ndN`)A!n|WUstnk-BPBa`X6Jev{67A=n4S&|564L
z+z}+xGy=nn^=H8sJqQbff-j;Z=>zQBjN<7(bk?E>QDAunM%n9NatBZZpx%$qaLxdJ
zG|YY)`Okm*%+dguJO@m=&wcyyYX6`|t0#Q|%+f4uIV8WI%+jd;T>&A0dkE%Rr{ogt
zQ><R6RqA;Vq1Jkj#fhPHTPEbd6_0w;iiFV#;>59`t;LNT)=|72(x2_Q75rFX!u5@|
zcaQq+ch%R7ojiE$9JgFRNSWJ(={QK@P{l1t-?_+XkOmtwF|7C;P42kGK}Set>eWbS
zDZ1RWaCVx9*RQ1^Mcwb5yelZ@H#6m-6B3*7-PLhTNui$O@R6CylfNb4CrN9)w2mv*
z>l3**-5d*5(VKbGRH@=P)<Rbs%{gkXuS;geQEewcN4yx9G=zKYIKwT1*VrOTTatG5
zB73-JZpxZ@%ldW8n`YL;d!4o@D!ym0$yrs@lM;RI^>p*-CqnoD_p8HnZ=Ks5<L+hH
zTRxyFUt&`j{pu~Bjg|OxNdGf?=!@ykTz#{}Y%wp^9$3eteD}6f5LqL%u{JE~Et-WD
zIU?FO*SV`EUyjYmvy~-6aW=jmtZ2a`>$n|iEHbJ(J7URYXVkEs`uO347GfR~_t8mc
zx3>akVbD9wIw{3&L`84I_O0h?$!tp5z+6w(x43ET&dE?oq4w3gItL=ug*)v{3_T~2
zFENAKYFJvy3~t|e#77JI*B7Idu2Vd(W_QCKlj{p%QO8O9BT%lma=n60W)(r(cTAIZ
zB?5ikr=TnJZjkRZ-)Wo7^!nG-EZJpll|+V?uz#%5ggaw<Y=1zEute+T3h@svs%j-+
zy7_qXDNkwb-mY)q)13(dx0f|ua^ut=x^2d7$xL;{-m2{Icn|S@Q1W$eU5PE;5xE8|
zq#a-^hDh7wgnf@gkq7_)as~?wtwiYr)Lc{}{*G5iG6))mxwoPQ1j9fUM!2kaXWvK!
z25LimvF_Yl&zDN@d$#2JU6{F$InrJUcz%|}U6+xg<L>0eY2sN5C6TN!%zG4;o-Bdr
z1D5X3kCK-kbQP`B{c(a~N6H*Y^N%l(pnA-3X0mz$QVRr7T#vJOX(P}T@EAtU_o#DA
zn;>~2Y3n7d$)<4RwgdZ$qsQ0h`oj5N;X4_dh{z*O9I%{b+cu}y|7+WlmH=$eU%D~E
zSAW@-9c&=_7c&WHT0q!zJ{SHLRS@>4ZVYT+GM8h$k?22u98772pW=XD$wSbMV7U$g
z{SZ)~FbVljh@XnN?Pjo8+&2b!(dvEO-2Z?a`b`!0uL`-pfBrAE^z6wrs~16uiSSR6
zvvMryB35@2`kR&>poQiN#p2I7SHTEW041;xy5|k^{A-V7b&NG^SGf{62M;p$!^6e@
z2oD>nt~>@Qq@q69vgCvP;>}`Ue*Z&E&sBh;XLLK~z<}ZzJvg3VSX_dSa(zFpk<*es
zxDY)|s(_rYr;ZL+-U)cv?jB)p(zvebOgz7K0<mjIVB4YYBqd%a-Xq2F;;BR%M4#;_
z(&$2u+f-<#NPg4eYhr$=_98}3fAHK!s!GtB{p>1raM-(MG5_gvy&3!i0*}2y7FRzN
zY|0Z`F1Wb8N{`qnFLyK)v@YF?nd}JUI)m4rUP!7$*C`6&D%0G}pYXk@w%e0!4R73j
zCidAZ*hs1|q&Mp5r_|t#9R)M9yl&*<JDasg!3@q=?eM+84f>N&ipRc;h^vz$-#;}I
z{Q<csXwu*ci<vg*a9Co9dh4q^+Nz~Q%^Qd7Fc9#=Yv|#S!IGjh<1RHDb2{t1K(VSv
z(rBn**m!0%cerkHYEUb#(ExH>zEET688<5x#WcD`L9||Q{dC2xPx@CS-#Rgj2B~|s
zeeiszPXE?aFL>Ni_JNA|FsgIv>+l%?jrvMH{GBNn$HHdQd#n|k?^b^X-D<4cy5aRT
zMgQCz*X+3;8fy1IZH?;@&*obErK7RrE;PhL4ri~muH0BVW;I<q5IHhtIQZq$9U-KA
zS%sSX%aV;KhUK+4+<eDJ1<(7Lk9>?`*B{+X&6OWt6RtE*)*JIUSBPXXGE&cQaa^5p
zH>HdY_yJ+OY!R6g|LAl`KlA0J{BuXu5K;#rBQyx)F=HZ6kHeDaG15o5*>y^aI_vEf
zndZIZ#o(edt9QP6cVD;hh%h=V^|iX8M)N*Ce+pWoz`wCKt&Phrl#gQ^7sAhoc(s8-
zLHdL*HwcfhB=kq~R?4RBdMr6lGve~P;G{^>R2a>|(xkD8+=^+9ELT$cP49CBJ=u~P
z8tyV0hl>Rp?Qm)%_635+mq*1&9dAl))eY8(nshEiKKz$S{tCmURCoZx$LuVm=?vD$
zRh<8g*v2&uMx=7?_%YLxSGKJ7+KX5&Mf&+NzR)y*KuKX10+*f*U47x}g{QDW;kaeq
z;8zj%o}w+DR<N4hvoC>I;dQ6rHE@6I(F%Ik2a^h>T3tj<@wU`z8fH7o<+yhAL!}Kf
zuG{fVD`tZ12*q2ko^xxv(6f`f;Q8d|$;Q@fG2W7ynTD(d=ghnfu5`(nEQBfeUt|ww
z7m~`AaMwdzspCF9*ke+&Hwqih*+!kH1hGJ^NtP;tF}-n2ok3AtC5vGii{$}v6VH%_
z2+hWrLko1JWz6dgAsOdr-|VoJW?EusXV!&uqxXaxQpcIqh>AiJpNkA#EBiO*M*_c|
z<ZQD-=zV+49rpbAJ;_ROkK1^y39TcGY&-t)0vT3uuCmpMgJ;@95spEIwC_HvUkJEX
z9C=moko2jFhPuGy0*Mi{pZJKifrA0m-;_CS?1i%(`)<FbP3pj!!#u}z5&4<`PrCZ*
z+e%y(k(S|as0io_MS|}|r|xvFcriBG$=~8i`d|$ma+8<M4P5M0%N0(p_HyKqxJo)p
zr*^&ly{q*QPP)L`$%F-;gzKmx3mUU)l;q}uS^MymL=(@E^leVwvyX#C`Vz-!9a$&O
z00>s5cC9bSQ^8(1laKX^WXTI=DZd}WyY1ASxMDaP-6YY*KV|rk693rRy5&^e(Hr{3
zBQ?p)UQz3ElZsL6@dOe2!;5*=BdN$DBdS<2G9R1e%&h6N48Xa1pqNJd%+wWa%xLx`
zxet|(Pxwm8Bhp&uXrwO248)0~os=#<Gd|n(&GJEk^^20%5^_C9`tyUCkB;ltylOUR
zM-%j1v~+q4289jCQ=IC_*Gi8gLgcZZU2jzTd%(7%5-+4a7j0#+URe)2;bDkppMV8g
zrj6qT;g$UldJ31i92G@RR$EHF6HOMDY%*gk3>l(P>1UyK!b;sTW_d>DCGwSrT?wqM
ziK`HFCM7<pXcfQ4Pp;aKhRTHJ6Erkd2MMeV9v_MotymUmmz>670Sj!6D+t_<QeMBP
z2=U72;dyCkDYxgIfismIk`?{9>m>{`MNQ6-W}jn3pDVfST^<@;9(SjOt!uYg5}mRp
zBdNEeFcC}JNCo+?l@F5)?R>m$+lD^1o`bP@=;PT_Tr?VmKj1~{SeRwGaz74RGx%_>
zWg}J{Mhs&QErnO83(us+K1>VdGCja+8@c89vNnOenk|YnoAB@z*7|k;a&=raZffNf
zrP9VFp}Q=;Mw6Gh4@Abs<Q12@$KTp(l--Ulj%s;bPXGSN){6RDT`FLpoKp?M6rd)#
z0iF(Q_U7BUxSe=%5Ge`$ecXJnLl6cV+ML-%E5iKp<wCdrO{aY8Usx!hPj>%zuK?gE
zD8WX!?-gLS5B+iqyx6>Yp+J@9IOdls&2>^Mh&hV~qpDR<=2!xS32Gs91F*qit^R@u
zhD9KUJIJ??0JSn`1<W(c{*K?{#Sh8-@QolqbWnS5pDpembprp5Fmnl-(M7!8AS{r-
zq=#r!Bx_yp_=(|7^`lBmn~+Fu;snPd&a?p5DvF|HZ}~YLoO7LpNH!+F!aOD3J*Y97
z?@O0QW1;tR|7!J<m+llt9J2HDed2QG%DPRAvn_wt6rJ2XeI~|J(><Dbb(bHusyPYW
z)N!IfesS#8KIF6yq}jJU7xsZPnsG(2{(pVzPWBde0;r^({h%lk1Vyz^?BjKSak`J!
zDfsa2=okP3ZS99SLBwla=Sg2aIsaxOY77RTM+Q3oyN&+@1I3|=SFr%bly&|rg|yjz
z98?0BxZC@fA9l$n0C(_bZ+Fv_A@+N#G1-d-?zPq*4Hjakx}vA#;F7PYZ?_aSQQP^!
z5knk-^ZPGz6B+>BxP$ls`BhE6wfNf~Amr01OX#jl7#DcW^&e0RH=_0~O`~@iDnK;%
zzV%PKtgzqdvQjE98Q}%0f!BEm#0a|{dS9X+fs$`McLWGes{b*3#}t47E{MXG@8^@R
zd|@Xa1!nl`k1p}#rlR)%%3kIPLEU`)7uWSq7xq8>|Gz~^mx9^g0b<`iF~4Ba`!UQ+
zT-a|gX=ltt7-}N|yN{CovhPNJhj{J&4J94v)eqYU(gZQg{gDm?5q{^hK@T^QZ(06p
zt_*-D{&zwf0F&No=A_|1u0q4Z9k`*fHrP^Q@6x_x1mFujt8*A~w{K+a@RJC=j$B;_
zarr|!1n*#J%D1}Nw|#jXkj-VMZ`<OHL-=lr;iEb(0Z|N3S07c|sWGpqkq#fr`xizI
zz@o%%eAJ40McYt1@;rFc<hi>|nQsBEDItcYt5Rn28TD@O3#KJyGYdVOO{^t|$<bK4
zDaVawCB~RDy*=GG_QLj^a*JuC_oX!hs8tvtAB6>P<;W%$?EVJu+Aq?25z`v|Iq5jk
z+n52{VZ#7QsSJd>*r?pM^E`#Vb%K%QtsB)4wNK6-=hhWGRHsAk)UKp2UL3a+Q%AZw
zWX|f<3q93qKhZX^>ay1P;q2iJ^JVXXdGn+m&pdh35O`1NqU4iks~|!I$YDh9_l%<T
z>ht1QKR9pVi1v4Q<DqOxHTGg>+t9RB9f&0M%bzq8a47pyVd#B6=j6m^hHnF(Nf|=Z
z-G%%WxQ;-c-h!~>a2LcD!Tqvi{Y-s2TI3xYl~5M1y<z>EfV(2ysvEv?3-c_hAL73b
zLhhM{=>epjwC(4A-8YPl+*iqo1LB#FQ{y?^bxLr;sm=x?dc%i#@^o`6Dz#f%Q{Esh
zmandrK9hb_)ZU?l_cfhDn9+L5vM;r`VhR}6x`(3s$F14Z3gf7qsu@}JYmOdYqD%#e
zsZI$guOaA;*<8j3Twp6@#g>ZaQHf1TlMU+nCcQ7V(B|bjtp2Ixt%be*=sn-`7}xZc
z4~9>SZ@`C)Od8G%>ODA9_*Ra2WcJ$pVQ#a8ACQ%(cSGZrMbJT$^9cLf(g!5&^=vQR
zxZjoBmv)(XO1?9)nm$@zuZ<saKJ7!NgaUG(=Ee!xAh74AjpRA)*W^@WCm&tiF==8x
zg&fYm+$D+MT2g=+^`|24wWvo}YrwbM)mL+Jo-n1GolXf5`SdshYsnfRT)q>m{NAgd
zd@8awB+J+{nUh&ACqIjLtD+0cxLj0GWv9-^W*&klyA!K)Lixouwqx_(=?hg!Lq7qN
zzM{j^4N`4*0N|c967WM=aEjJp>6VE)WhP%t)2(6*G_!Js5nXJkmD7*E$)gneLku<~
zoTy(0K4vcp?&^hEbsRHjl91Z=;_fY!5y?TI@}DffD85}-y!~O9<*Dwbp=yO*pI)ir
zy&3JHLq25+jDrS49TKlb3hazNyXqqbSx-UUC0;tM#JUA>IGDM(DO73FNi<(O4c9W5
zCY~c)*28a1UoGr*@U)plxU2UR`VZ^feUM*V>9=j6*^&v13Hw~}MCrk-#u1;9CPOq`
zrHBQF(~A?7hT^tjPR#GU7`Qm1A+N$8`ygRL<m3iZoLEcAp=#D6c1iO(2v54ev&lX_
z|LvY04^}aY-}iLZ-}m%(u*`uSqge%J-tm_`{jYUC`+NG|)~SE)>85{M>55Rl*Z%z%
zd-@UCv8`dRNL$G-<;ERHZ>(2k6*N~pI;;4-zJ6V|F66zY0FiqyQj4RB!#1nt>?^6Y
zc%cIj1nV^3*Ku6rD4D4@ig`m-s+&qfdgy7R<&@O&T<)@U!xWDEE>35MVZ_4-ut#vH
zXL6UkQFJ-tbvwmk&t}Eo&fAAsd??J8nca)jH5O#~cR5ePDR_{?*cD~?!7=0ETw2O-
zD+Z)#sB;GNY`cn`oBM$31pEXRk5-GAzTIV0z&f2U$-KkJ8{GW<pptgD--?l_FDN18
z!uw!b3-Cdc<?giixQ*eTv`1qEzCFJ8uvMDzn979<E?GlfhgJC_`U3zAL4^%=wz({0
z(`)_7>Uq~W8&3%5hbT35ePsbGe3M^dHqDuT00H~DI-h;fi(aM73fK-c%2RFRJ9Rd&
zg0Q!QH$_vnA+<8poRF;#g-{=DYy}<gF9m{6Uuc{`3*3Et;;G8qscIPomw7>P(~{&8
zy-J$KlVU34{Ohl4RCQb9lK9jpZ8x?q&Ee7;abl+mO0!t%#wBh^Ora#K+Gdkjckkxb
z*!L_ban3N+ETJfQ`u$C((Ch|z>23Xc`KsvHc!6N^*~ZQT!wHr+6?Rv36r)S?qyf(f
z-m?4^ZlA*w2iX(f%{^1%tY@kT^RW$4U4i1FTzYH+)n1^6>l(^?vnP&_W;&>I>!n&I
z9yvwZ)&L9KvPk@*tK-A=q4Q5~jw=mc#P7vH*3M=#4@^9gDpt|Lt5-Ze^Cpq!#A2&y
zt#gBH4lc1b!sB@8Bak6^fo`y#`4kk@7ccy!nDOQ%9=^-VXDP~)OR#vI<3W7B9+#(5
zAFEzHzj%We(Qe2){h^)uGew~edg7Yhg7p)5-D!($AIhdo22o!0mtySJ$phnEMp6m5
z>zrcW%|Pps4J;-G$*In4`Ct8YeArKYdwbmet)Jv*=K&MbpQ_Lp!oDiBNy6X0DnaW+
zS9pM$3Bxp&aH^1=bS?s;T4CGh^QXncEV%jd9~RR%s7DC@tH~q-w4Q;@^vw0A&9uQZ
zkNqv>y9DO*6F`_wnj-}>gPd{lKXS(Zfj#HoUy`$b`~2TRKAlk$VW57(5D-aMJ7e}t
z0r`yRZ{#x|LgxcRHEWO|sKN6fuYbcC06u5_hD6aM=z)buSQ1X4+h>Dc!Tb~NiL!?7
zDyRQX0(yW9zO^T<K$JH$w~;Nz+0<8=f;V#T0Q_tVL5nE3j;dGC(9jAnxS5e-ZNd}X
zsF|C;ey!C^>->QuS2?6<;x$~~KJ&4UgkSg23dmMG<q{_`YP{uMubsjhN%1Vqjrf3+
zpvXhy=~EQ-INnVZoQN%e`cv2KUFdxrbKUyUm520BA8x9R$e!n>ZN5%)%1Le7h;u1(
zJb#nCX6@vTO@A35JA0zG_XQ8q{R<(ha&rrNZCx}_@wm&Lb-adxsUa>g#od%{RM+5R
z8&|@~<g-U{yWJ8kXWEA>svkK#3Hek(7%%8HTwrMstI=DTIji%?kH$94W8f7&Pw)lK
zaW0-h1!LJ$da-PilxDqjgnj^*^Y}{w;-2N(6}9Jb(mP5`0vk-5%iCvMiv7qU`U|LI
zv$_59a%t9VQJ5D6+XJR?JFS%i&i>B_c@YfOL2t)yXqHE{V22J~t`uf!6Wo54D|_>O
zwvr<2f-?j5DpUPfM`&D+X5Y6smLCwc&<TTZJ4&bZnmh^j;OOFTy5s>d$GG?P3iOR-
zk{_EUFvnfWHOh(%gU;z*Jz;2+RiCT%x}$(@eKhq(E0fe%<?La)X{C9xh>KILe!Kyk
z3SZW5{UVag-!idO6lZ^??rril8}G>Fq?`B#s@KZfDZ{MqO{Gigt*}rBIyn_wF9zp}
zf1<MI*7N|WFr_li5hCJ~%5whxnYLtiHU4mxGYsigBGR1luEh?Rpfcf?b(++gVV7|u
zV{oHkBR;~?%F}KwM{C9e6@Hf>BZD{aW$p0@HuYu$-;hT_(!@*Cp6oSl=mcvJbuoYq
zO&(X}L%-x<R7y0ub^S%%%^98iBb0{EvlEVMP8l-T-p1A?LgTNO6{05<^ERvoblD<@
z-}{|mu+p>(qaNWEauOUBO4LYQj-koR*W%C?ia5{IuBC<VnN09%so!CA5xr6#VXd}W
zXkAXHwQ`RvrFD^8Pe{Zg4WW~KqkrY(GbRx}pOL5-H?w&dGylsvgRr2+fC}1Fi*2#2
zH1taw;u8r^#Y;8@>T?xu8!c`$OsTQC>qB7{#fj>l<C}Gp7BMG?qSGXmb?jt^zx=iC
zcg6Z<ooB?18fV&QR6{4DEe<VZaF5u9A1sbkJ5bDWA|0gqH~?oORZ)`dB#cd^|FfnI
z5?<q+-(eFefn*biI-#ED;ICG#<KL<lxhwv}-`jNt+W>S+9pz!J$cZo1DshX==Rkpi
zu@*t3=V~Z*S+U<?{^OV-%>pmSiuL4`;?iE>6^x5WoN^_Gsp1lJ<<Mt(%E8ekb3=DE
zqDt{WcMVoOzRcFm0@q^kE8#;8Cr>EMeA<4IGgOz=>jH0Nqpu}o#s|UuxX$8wb#GN8
z?HwOaeodGO9FmVx)ez^+E?T}#d4T3IN{n7?j5k&sQP{>;AhR`xSNJ5E*KlvPPlEPt
zaj3nO5RXz8x9-tQ;c$o1fRhi#BHGpFUU9ZN*Pz*nvcevh6)-+ql-7=6cS_zYo^i2B
zC3iCNb;NZ&GN`q+<s*!m9v?9t8l&W2PIZ}{ZhSG`E{DS3+q*I};&&@4pc7uSbnA(;
zCHWoz?y1nG)3w@qCdfZff3wG2zRrGmK;+4H1^8s;mk&k;E!K9$114NyQnSqVCl}@z
z&RJA;=WwW{PfLez*cNn+DIbgQ(CRsso(If;@^$ZiD(nbw_wS#6rS**z*-lVd6KL(&
z<6o0@s-2x%MlDECwF~Hy-Z^-R*Hm)e?ebtiq&Jy!wq-wao`UCL7tRR!yowc~DpkAP
zm6hTiK!HkPx6VtxYI7s1f^HpC8;7nNIf0zW0(r$g<ijw6rlUgty4uD~x;o^yU~235
zboG<xVhHA%0+ziaP0IyHs0->^k6F)SfH)SGl`Qp}m7_%-ZsL7_xW}j8axIHG7P*c1
zNU<9#d`4>N{FmIQ9kO(%<Cn98O}N^+Vc*vgqgr$o;~c@t62)ikhBsf=;kj9So#X4t
zDe`5JF1no|@6tM=EPgu0B9XH<MyngBJI-`1KZr8x_s|=5H>?q<dU><#wP9{?TwnGh
zeT1Szp)_;2$oJA#Pv~;n6iHAYH?|#<JbwYNrPX7@HKlN9_7?J!<-=La)N_vSKT_r0
z<1RRDT$lR_q|tfrlH{fY{2Ve{^f8mh_`v!CiNL<cFKfbh=BH?8UR?2EGIxBrqQWOt
zqc()(wJ=bNSeRN}&PpokTyB*`Zo`I)$2A_^lXT&W4bEHJ7<%>fk&{SsD{Bj9+uP{C
z(5W7Ie4Qcj>$bVgO0A83G3)n^Q{Si1MxsRV{%1gHnVrlC8TJoafeovwo&YuEpB5Dq
zvEQaiUJBc*yW4BKA485U{<nSraP=sye)$3Df5rArk$;Qr?fU_ez{8_rAteG>1}(5K
z0DfSfF!uM9+Fy5IL)bsKOhf*@ix2&dCw)i1NIRiRbhko(?}w2n2Rx1F|EBx!iyK$A
z>)&XE{}{@dg)zdur2|vAl$z|<x6t>u@4W|zSIFJ4KV_D*f5|MlH^Mh~@p9y<BFvtU
z?i~H^_L!QybEA(u`#w|_PGUYw5lYHK&9Drhw=d}LCrE?-V}f*PyYUiubSD4Gkc$43
zTjBry45>SrW)}=nVLS!6+RR@GQu^N#q&QSHH*AIv1%WLyx$eKsMF<J^7w8|wE+6R=
zY=+sb_!ox52~@6`>k`w#bU~oRH50X<9AyhHd`V1hybE&1WBdGc1OE_!1=i$hiLv=M
zs@pNaT^mF0S?7Bjmo`)xCurTPcded@Ho4%5&Z{7h43}NaSVHmyzp$gf!jfg##)pf)
zes0yZ7n*MqcCt%+iA$&?@KSQ@yU5${^QI?*&QsH#;&V=ZYyMUj<#=SgTIe=ilUSY%
zdE;|6G(5wE-=EmrvJf7Kpkj2fV~5hZIBRt;C%Fi1jkv62O;bC^a9A*?sJBBP_8lC3
zlb@~}Tgh|muz~IMz3s~T7?DcR8Qvf9Os|`*^*Yw+rq<K5vUPfdoTe@4+z-e=T-%b;
z?gv^nYMmFWyN`_LcqiOUVI~)s>g5P#XS}98D!py@`Vl9oLQeMcKs@s9+kU0qBRin1
zuj#HfZPHt{zdIUtupzu}(u@!mcH<~2GVWL|+sZCH)czS+GX6Tx!}y|vl#E7jK2={b
z#p+juuUlzs1$u-$)5O|Wuy#SIz=I8ei|ZNi=$i`ElO4bVXwI}^33Af4nJh4+PSZ_(
z=DV+C_`d-Rk|Wa$fWdO=uM?Yi@%I!!5?Cf|z%miEp8}xz7cQt$=P$w4eOwS25FPja
z7!X-lyhJ*GJo!jaCgtrp@^Ma`2~)EB&|bg5$^(#A&+S7kOM?#uO90*b{2FHFylgQk
zk_5(=>QE>3Rw-_?UJS1&S0B-?O1PRy|Hk%N=umbfnHfuxY5D>2M19YUO!k)Tz#F2r
zrUgjfe?a<E{y%x}<KCCvZCT~f?V^V5#Z$Zy?Dr?>S_4x*JqV*M@fLGoZG$+WaYX<E
z(V#_G`T@x@Dk}Y`30(9MW4_FfvuCT0%3b{4nB}UBZh-l3E&wbNE^wPYmUvDoU!im$
zE1;<F?&rA63bZoSn=ikLcU<4XzGREqE=-@7j!TRimP&KxtQc@}zmYE){OM!`-@wen
z;Ona#901|0Ku}vJTyxn6IA8q<Lg}XG3dZwPgYi?iAK}Nype(g^WibBGp9tr>d|t0y
zh&DLseSov|Pk^&6x(G&0-dH0y&;l(CXEL4my29EE)I{1iPid}Ws2Se#LxTo4^7YtY
z;>&qK>g`4_KuyN}0Hc_IL3KBb_yko4+dgdt-P3)n1np`hib5Gt9eo%wMHUoS;Q^w)
zFfd&4#|oRelsHwA2ujv&n!y9QZc!mwS$VAdaTe2|GOrxXOuZrBCC}ogr^H~>iy)zL
zpuh4eDSfR1`O&Lek)?BWD~x)~L#E8{oP+=O5QEwF0fPai7FzcXk#X%CRv&R!zVYUi
zB(w)U?<X>RB&t=cGrkYlf*l;RROYA{zE|w*YzKv&J<RvX+Q%(nh|AAg;W?QlEC4q5
ztE(`)i6SpR<!7RZ)CS+?-yO^UKYMgx9rX$R;T;`{k=(n97irfBF|VuS>YDJCZ{o!y
zjt`ld9GWr;J{sOp@(Jbp15#`fwO(I%aRS4M*Qm!1=JCotx7ayuk`-UV$22Ua#4E_q
zVG3_UuLKFyHenF-!zlz4xIe<9*zH{@rNNs%RI#wjOV{?X5vMu4=hB)MUNXevydtB=
zBM>Li!TVQ}a?-)hGu%Rh7}snVOVr<+Qyg4Vf_{eo^~DsRYSz~Uh$KT$r64;XpbT+D
z|6e%_$G;>zq<;~2O_zLjT`?%hz)0iUl^qLz^GMdgAfNWZZ@!ezI<8|T!-m0X*T}_H
z*jHd|uhCaf{%uoub%puTgIK%E!?n+SXcVd`xs*NnrqF@f3$UWAi?XPf9+#&LwT|L#
z3p8)8UCm<&nbcUYVYX$KKG?0vjJ^0^blpFB{9s9T@wPp#A?3Xh9&1w3Wrq9mKDco6
z<KTS$lM_P?!b!e!vBzJBS_ho5OgJFt9MWiO1=&IVbpYh118L8baluChv>&8uqq+uq
zby@B#z&B2UDW084tcRdD(CoaHWHEf{NHoG~Jzz)ti`NF&?J+ZaXt3L}{Mzk_?D($6
z`ZZ?2!Ltcg+%I06;3ojI$p?p^{%sMg{>>r~_-PTy{(<VWKvjPjKV5+vAf8;(Dangz
zimjmj$iI?QB0lU!qB8daskn_GPQzai{rx3gA2q`_{GQ}Lj3$Q`yrZ9AA~S=6a?Ct8
zY^@pPYdhTNSCGSCT|Atal4|J|nv|hAH)>>Tc-TZ`I1~HsfC{9FxHxl?TAX!K_@3zV
z@Wp{Lz%d}D`@lvtrgi8sOLWPm)1{56UDejAqtkDv%3k0br})`11$Ok@yJs(x1c7RH
z9HC(ty+S*waAZjx=Q~iVF__{`)h}rsFK29R%*YsBoG$39(sx(ahrdRX-%daL_80SN
zgPgid3`4R@{1u#V=<B<!k(O>_V|~p<irPF8{gT{o&4n%~xM_2=Zo!V>qjze`e8<LK
zug1j8NlP<cj8@+j-eeI-k~e)fVGD3~xMCuRKwdro>RRp)1>=&Rjl~;a>JZk(KBrc5
z^t);OvtLmi4&Zq@??NGSUuNDt&?#+Q(6Dc6V-=aG7OT&ukaV}Y!S0ZFr)dw`pf=gN
zT-FR<J0*tt2119g?hwxxHr9<fEom2)A+BgiwaNq?IY^v1G@9Z!Vf)H<_;bdcwXm!M
zP6oYXkWj8EF8ET?>v1b}9;d;BHEKdRQyxhx^0RxyV@1L$iLdD;LP&WI&|#)RL)2lS
z5^gS7SGm6OJy!^dZrISZdF0+51|A`%+{nQxOoG;k4gBQ>87#bos@rv#<BH??i^<;}
z_SR*RG7)uh?M|x=pvH*)izit24*?}V0gxvYZ9wCd4eJolku7uq%326A*HSi;-wZRF
z8{wRveK>2r%voF?c6_+uuH!ixA;UT4hhp}l4qKd=B5+2NQI}lDCL7)u9e=7o^M}_U
z=ZwynKlC}=PR;wRkL@hyP&c?g>^cjHlA5%ug#%W>Uxt~zjy8+A25_QKb?~j@(484r
zO&H#gd<Lj0c!RwBIWkk*EhXb<#nWE>Jd+|pTuD<XX3Jrw*WJ4e>drIo(fo%8gF@N|
zDJL(>P;O;bo+PELdALrF7{jlvGezg5nPj-TmusEZGlRT(T4l=ZL$gT3y&*WK#pa>)
zTpdWCV0wrOIrx5T%{XU_dSAAL#%UKaV@0CNtn#oPbF_;RqmW!`2&349VBjK9!$#3r
zNyQb15>=g(ja&>`8r+7h?y(6s)Rz=rD+;78jXfR}Y8?~&_3L4t86oFr2yOl-Y!ZnN
zBKuH~iSO}uLj<SR{NXx9)Y@OgKJYYY-C8k<((A%}69(I>@txhkgUe*O9}tVuxan=5
z_0g~vn7`v8(?!kJC_*kU_W(rUb&yvF>Q8gei;>(}3*{o(??;z^K=w7R%27BKpr)mk
z^Q(lg1C$VI^XydqC16bd4ZZytG^DqP*=7eHh8=;l?u~vC2~qsH$_&YJ%2)UkIya&^
z4q0DMBLLH{S;!GdpxdwLk0jGQ1}DY<9vmJk)Shg&H!Ou7ujf`w+zuj>j=&}#EMhl@
zMG0GijDe8;N_?7U+F+Zbqq{W{VdJNt9(!A6Qb|nz4GzMop20FD^0ApFQH<v68NP42
z&0wHPB~2r=wqM{9eH~NrSLP-YmT!IWSz;?}OUN$FK73fiu!pH4#p+{b^@#`kk(Y$N
zW|-tpWa&=b#rk*2YbLocH(ozKt6uQMW_5AK5PFuO$(rreP4VbcTwl&o^#1$O&H|E!
zmw-UV0<+fn>H1j;B$=5j3xF_^!AQFj_V1giOZJumDa$|a=<lcL5T=)unB~>ir(lPM
znruJ0yu94ay}x5umii2t-c)>O>_^Rmw$($?g5W-sj)+9-gjIXV;BtcC*IcH1VYzFk
zzcAmJ3_N`Fk+-3>DSA?pxI`X_@KB5a<tHCuMSOT~WIsa3DA?dl6sizWvcF{yj-V%Z
zasc|K|G?zw33vz`7bxxDib8gKb&)=Ora+4<*>s#G*`uF0zoQ@M`1g(c`_}j03h=-G
zb^Blz{`=N*&%UF>{EyBuuM-`<-8d=rbM7%%vi&jl3gve%+^mCFta#r%dBR)kdikVQ
zs6b;PXJOx#f~jWTR%V|l(%Itn&zV;n>_fxzf&2N_95m5#U6D>;yV36lL<_f#nKnex
zx;PmN+$-r4@}0(C-*BCdWwE?(pg##w`@9+<q1NJ^EtpA4AWD81wi=gP=Nu2PowOEZ
zU9!y3vnXa~o*H8uKFc-x=*qoI*(TyV+`M70bI0`{^k#p#)l6Afor0d#Hl{L&WQS@w
zO`0?s`|GrWkmXPo@5RWSin6AC6<0ri5Y96(-393|*f+JG<$tIxy_`1m@F~-2Y$$5^
zKIT_|BBjwv^{)Ylm!w?G42v`BR{+8YO=PbpXnDX$kuV!$>pCo>{GA7roQI~X2g*Ej
zivt83cIa&_TDW*ro<xOo-0*lGw*-5lwX56*QbAH66*NZ&LET2<2%<x(<e--?z-Glv
z_yGyN1s3iC(reg!F&@m$14s<M9wqEBAm2&-oo*@zFQm2XJ{@)p(C;-ih*B-OAr^fT
zho_o%rz4ND+R29|d2@$ehWOBAVsQkmp{t-_U(~O5bvJsHL5H9l0&EDje*p9E4)aNo
z0Hj{x0&KoNdW1ac3B0dO{ap}T&hJN|zc-<~0m4K7ecNg>sSlom%n*P{p(e7hxyVoi
z|8qlp0&Ya#Z&JQAf^e;*gfaW_@W{$d6(t#ks;y6`{l^2YeNbyc+zN|(jweipJs&WN
z;_qcq?XvmQzutK~crki{k>Ub}vm~*l3#gZ3h>9KC0Qi+WIf*1vRRV&_lc?Hdpkxd<
zD@C}#232LaM!pDd0SsaLs)YYMr23Brn1}_pK+BCp#g=XGnn262KU$V1GB<ADdc;F!
ziScc?%xdU9q2fs&UY#?O7ziQ1lLt{DDtl50nHhh5;A*GWMHkhZ-OD=?wtSWEW)cST
zzpi#hyK)AYIrF`VQ0E7G_T)Ay4@F|3r$tQ&@BDzA%9(lhcK@D=iHbejAbJLRhX3lB
z$@C_Oc8z#7tuG!I_prl#xErnxdt5nTPA<{is6)G<mDsT-ziW6}Pnr9#3C-$fAtmKv
zC&Mq-`FH0F9^L%PJ+Nj@WTYqGzKa7w6}ssCT;W_7c?ESDgHzMmRaXU1Y(Jz0HX5up
z_1fe8P{$wtpiQDHAj)?3GpIcO6;%iVCZ`+5G7Lfn;ez6joj^q%m*mD8FKB#?^fs-h
zOGJg4D__yM{TcBpWQ4;pdte)^&9C*Wuz&1SyVc+(-~aRRf)|H*3<a+ZOx!<So3Uhv
z!~xP(m-l2^CIS~8TU+d=lDi&M?G_#5m1ta_RUfs~DE5sZ{F@W^aW|g>r_SVr;f2x5
zi65znqVz{_7XgoKF_!oc6CHS#VlM`en-A?@^p=slFrX#dKN5!bL@%R3!E<d57EkL5
zYE%SwEhzZk-Z|(E%YgsmAlO0v(Zv5=<5rjJd5*F{$Y>%MwNya0iHNY2U>m5X_uH$J
zrZJ5YEzk&hcAkSVt8(z$qhs{%KEZtft53(E#>BO~Pl+_^b2V!;Qf2E+AAq%BQGCzZ
zt;>(b`1a^Q9dXmJDM@1M|KpS5=UY37*)Wn9{LVa36-ImpZ&3iVP00h8!#*YC24E9<
zoI@sCz)n^0yk974-4L=q^lpVWwEkPPs)a@qPp(k=xBL?k)^IY^oB(XtuBW(S@<A+W
zJ&<g0xNU#lqH0%QkLkg{VESWV+$-q73uBhi$I@(8)>~?x-MjnHtHra564i5rtaoDV
z&OAjre&o|IK5UvLNRpN{dbXWlP*GYOdwE0%DVO)TLx%f#N7lac#sQl-gU-j2o*`jd
zO|I~c6w)yHIcy@7HVl6j{ipFIW&-8};{W|~BJuy96aW95_`f(O-hjB`HTWUaAoBoN
z6a$GLQ04GUE(JI~se%>k5WiA1exzL342v#E(F}nU4g9U-9*po1)hq(=!Vdsm7$dV!
zeqb#{2VuXIHh8W)ggpczfAltNEPYkt^-po7EkZ$XsTJbv6YT?^yKk>b*hoMS5-$*G
zqn5O0KQmDrnc*tU7Eiz-NZQ#U^^&fVPKqd}?w-4Omc5X$9qYYgU~K_qxXtPqa{#=i
z+DFCjVbCmuLJ~D#H8_n2ha<f@0P6WC7ur5Z`1{{L!V%;?^hO}*k0=U8#(K+r8zkIc
z>jM42U;fl?E!YF^=zq3=47G_=YmQosS{#^o7*1Z1woQGvkJq7oKbC46shLI>2$5ow
zVv`2{L8RiYNOiAD_~!rIKabu0n(|me>YOth<o4?)sXv=&F1NJ&I3%$MQ3cm}2wW=%
zYUT`Ve+dGCv8_h121V|#L8ysP_(nMWKFdrDYVT3SJNohFzXAT?!};V}@J!U8P3=C_
z^BkR5nAhKL$>M+g5<<l+3zBk`4%MpEs!Xd)D;?@lQyDgHcvZB2?%4y)r6-@H`_+p~
zD;>EV@;ZM1Jzmm92um9BCn(VXSSse82kHmp4D>ndkI1su9oSe-9|kH))J_Cm(`UY)
zC66`aewyJ%B4eX=^q7HikWpUZ4f>Lo_bK;0XNXIiUX_ca06@><9!8Bnf~3F`YKDEu
zFFhfj6WPmI>Aoz>43{EO1wRria7reZnMTzKEabMb)(}Uofb}E&mzo>{1*0!ECN`@H
zKm)QWb98s%qpe=K>PWtwluf5NlJ!;)`IPlG@VVc?>%xdMFruca=&}Iel16vq)NOYm
zz*OQFmf1(v-MO&WCOQjugUMW6Q&CvjaweY=-F5`gVR!&$2aj4W)572H7#bjZkof`V
zc@h{33nY`A4NU3FeoK@Xp=-A>%<bYDJOzWR#^eJxKL!?n-XVhXki-k-%WHtk6m<f&
zh64twgXiDQYx;E_3RjKF#}IdkH-Ha24JvHAKs_}JK_1nCuFD~iVfZnqZYD8j^}+Wz
zcx&aBm!0W&u=~J#7wI|79KE}VkNN>YH3E`j5D@e`N=n4cbxi4!fHDZt=I^(6Dfj2?
z8Ii$d&JlM#)c)3;;(mAN|InSoukMQXZwB};iYP|Z8kl6$4p{ts3|IxgbKyl{*TG|%
z-}?feLD|!P>Lx!1?;wY3%XA#044d=;aTgHN*u;nbd8M$=@G2<yL)agGNLl=jiXyct
z=4<T6jEA+ix_5=Skr-j0&8tMguR{L#RXTc5d;$s{l**r1{@o4JOrC}6rx9D$ROh@D
z<{Q6wy#%&C6_E<MF}Kb_2Ia_PX*JaS4)1EzbjOsye|j$Rky)~sD?Qr`czSkJV^|&Y
zbcz=Fuomnyrpgp3{H#Gy6PLkYvGg=4HV0#+9=bnP<fD$hw0d3|3SuES^QPp(&=g}3
zj;vOxJlG~A6hP%WQ{Wpm7D+flT-n2+c;E+Ithb%<>^Nz?mv#5ZfaLT0Y~ncLbKfJ^
z`yq{|i>P+}7iExXp1}O2bR}gvu7zQ7hFEV|&Fq&SEi0M2Rwb7*R_6+$nZCTmyWdeZ
zEus66<ge|@7a%inOGx2bb`Rl=DuZS@f8`eHy2CByhfn@Y;iGs#HZV`B7_|Go|51_3
z>#H9ZcIXQL*}C8?Y^U?*BwQo;0|hwiDl$!cb)_us<`>T-tYHvqa(UM(+wk7e2Uj^?
z2>Qy|sn9fX2M;)5KMyQ#PO-<@aN{s_Er_;~k&%i|ugqT^y6evsD{){q^9Je*JngAh
z6*~XhLYV^f)a#&#^4DK$d3?l9<fa2hjB<~Jo{6{UBn$B%#&WNkbCq0-RD#C!>MmSG
zRm*!F;1+T~20c(};yn%=6O0b<IVjihGz(E(Uc#?bE+27)?ksx4q|WAaBk|5LRd-Iq
zmytno-c3fFRi5%6VUy!f5DcC_ylzk41*!u|(0B>m1#$3Z<jDscgXb~KilzmR7$WCk
zj;cht;t3e(fFf84u)ry3_&~8~7D(cQ;cl)ygKkma^M61*z=LB;hY?RqPn>6j<&w|)
zq*A=aX<a5~Vvq(9;#e|9EsS`gd;(5_kcGT7_ZtCjg0sg_u;>6)H^K}C-v{xs>4K+H
zkPpw`ghxMgRi0nfK5QhVq#(2LC2Z#BMIgaN2>$ybyaGvFD7-*S)!^6mko8;6Qhn`{
zC42N^j%lE6Cy(QxZGn1t)6b@#-h!t*Cm)`}DYPKE$mgVb3Uf<V6kqP>plZu24+AbR
zmZ|ro4J^^h8zwWK(*<scauqM|1EQoAh~8-d75rC!{zWis_W<z@VD$#^fe>x#Ia$Z|
zy7PJ9b&zRQup0;Q??xT&gOG_V_zC46{yc0Jj*kUMS+F!gyzG62t5`df1owcI;G-}f
za}SNvhI`*`Ivj#1C@*()wk^_Hmczy@RTD!zSSPVVS`!1+#wO6?S0{ku3pci0nKR7J
z<mj#nt?(N>G0XE|vNCE5PGlf#$F8e3YT<?7S1IsgYxc;IlM4KvZmWxXb2k&mL<JO~
zy<LaLQ>;XmMOHPWFINFz#F^isq|qw<AjS21uQmE>x4)yY;^cPdZSfh8M)Dps!3#Ms
zwyy`g!j$C#tv=x*-Dq-nAg4fX$<|at*G-|;5PmuMtm$Xpr|)gls!x4mh+7@mW+Nqf
zT(uXj1N@P(h|*$qcju^xqZ^RsT#6q4|6>jIrkVZUSASW@e?$0N&0KT$1%HAj7KInh
zlt?LXb1E}AS^r>u{N_KKbEV{uw&d>KrjhgbI-5}j^XI6pzZ&^J)cX&pu=e$S%+Zik
zX<`5-@rm^h=GimK8tu|Qx{2e2qQCOLzX9yej*9*QCNjQHKe$q~|Mq@NFObx3-od|o
zDli!x2B&4cdZeVR224fs4@7*NEB@&CnX;ZHqgwWNp!8YxhaH@T=0nqG4lsQ#|Hpav
zgYv(Ida?TV(?FMf90$f`O%1D)`#1Ze0U-^=^EhAFUoC(88knQDgufI7%9hsvD|%2e
z2PH-M5AWVL&Ijh2jnG`PfdA|*?Jo_$G_;R(_f#qKqp_zLwcAdxFP977_y^(&Ua%|b
zp{~fk7{B;DFnxXcAuTBh%qDuzZtc8dF7Nnz-Io0y-koof|HATP^-ptPhFrjZj!XMX
z0VsL0@66q0e^l*O**0_8<rn_F>i<z*e$f6G)1MGTVwM&CWmf-S?tK<;xeyF47d$`$
ztcCv>6zsd|!5M+!&vU;mul|bp1H<fK#_fL&@gmZFJ@UWYy+AR?>i*~Se+FUuPr$q*
z4Ya>t=?-Sg7p!$#{y1L9SNu`?P*bJ<babuWwR=ua^iJBWdHZ}n`=|9bAKt%N{vrFp
zy7l}WiXZBG^w(|q_Id5~(7wzB_c-Sq&d-8Z3hsM-e1E(7TldH3Z#ibwwF8?M>_2v$
kcfOo%UKF!zW~uaj|1GN~m^BH8&fxjvE#&a1!T$eE0CmolwEzGB

literal 0
HcmV?d00001

diff --git a/windows/manage/images/settings-table.png b/windows/manage/images/settings-table.png
new file mode 100644
index 0000000000000000000000000000000000000000..f1eea24b11102d01bb21105b2f4156d2537d0f3c
GIT binary patch
literal 14426
zcmaL82|QF^_&+`>Dul5WvhT)HmdYU8&7OT5YqCugWi7IlWF|WyYq=;pF$h^oveT7p
zSt85WmqxPxF7^5Se&65!_4?mv=A82^@8>zsea>^vz3}?F>SrifDG><78BGnq5P>)b
z!M{SMj>A1Ko~cj4A7q|}>MDrh?(=hS<Ak&Fb!7zNZ8X)c9XZ@SeOCkHi9pbNI{YO|
zK+&+l48!_5#@FCMdU|>;E-qePULn~qA>g?XkRSqIYRM?27E$$=qMEP8w2H-*@E3F|
zFY5M488u3qv|X{UmNn@@-}sJps+Pmn%VR#v-)d5@Zn^5%ch$9B@y@ssd}%c(IX5Y}
z^(x=}uHyDl#qE=-**jHCg{sX5)q8`$?LOdM$2HGBHS>4s>gpP%l^VApP2(O-?{8W@
zUvy03bnHIr+B6zie=&YEZgR88^k$vK;~7hvFiZPvs~b4$n-SIyWw!9;5N_-8_J%`@
zol}C{-3hz9Q});tdu+PHtyd0r>K*UoIEJq~IXPkP7T$udXB#e_mAAbr+@7xAeemI4
z=(?A0vTsnsL-=}>7w{-Q<niMt_$oXe|19=HTvB}ke5H0KB_$;%Cue4V26KDgz*l}t
zUS3{NVPSDeYiVi2+tSji>dxxA@9*oNhK7d5!>gyMsp)guXlqMLYx_id$52=I$k%TR
zgM&XtM@Pqh%uG!DoSdARoSgYNIra1B^v|C&Q&Y3kQ!~@kGcz-@Gc&}QnfaO7S@_#5
zadviYac+KNetv0TVR>P3b#ZZVb!Bzq_r~wvzqfbbe_K27|GV%Hd~NUV?;ITL9vti+
z92`X8mq!qYOQ$sfW#jw9i|L#3i)dsht)%R%sK@82^VhmxL_7=2q`N^$R~m|Jo6=W`
z|Hb=$-*zi=`hu_X=igSTYl|jkqxpI4UDbv=sac7)mmV8sztbdBd&YQK;Khd@1&qRO
zz+Ju+arxp)sLGo49BgsXd0u2XP8Sda86Z3n@Zv%LYgTbnls{hQhNO^76WtFo&+kfu
z$AgQDLIh9hQBJJm6B*CNd=R}zeuFg0f;c{TV<d3j&yn4qOpNoXpyb6KttCOf2I79E
z{eA8ox0;_<M)K$AaL43h!$zBb2tiuD))#6Os?opqN~<0_DV;1HZ~!yiw)%)a+%G|7
zr-089^w%ABwB<i!RS+t_^m3D{Q<(bYyNzer;TUIFM`W&>^PH?bS$Ppu_>%L~c;L^0
z9)Vv|`o<l91~t^<SP52y_pp~|GEilzrKR3rz<2{s;Bh1)ivJ>u$|n18|B44<IqZx7
zia4a@6s#eAD~6219a(tp07tX~#T=fUW<&_x55Gay8Ud1-^KeRR?Ngs)-^pUMZfQJ*
zz+BHhgN(Q{YCh)%&Z%9F#M&dy<uRpE+?7D2Ac7zFHbFYP7Bl=OwJGX1utlftp14N&
zXqgXG^{r+S#h6omVTUd_<UG2si92)RY98`N*fN^Sq6sORV*#?ihaSI(0-E9;u`wuU
zcm)eYD(Rn~BO9CSD7|==A|(QS<B?fFKkf$d*rGS}d1~bIlSoF{hxI*)%cAeuMgcIh
zO~XF7JBx{LZI!Hsz3Wp#CfTuD*ML%0P$u?KnA`)+yO}_36w#brO@u&y*081^%lbQ4
z<NYfWy~K$VvRuR1YuO{>5Ct$?3Apk+W?@jUQg502G$DSU=cGIGl^m$>-~`$x_2m7N
zkH3dMG6i$ePCh1UX3@s|7Nlpl_&8Z18N+FQ;v7$r)%mWeIvVm4vKvWQUe&d;+Jx-E
z+%1kG#5FAjVO5}5(1Ibhf6vjC?bO5e)*v>*u$ej=?FyqeV0j|zc-qMdfQ`q{Nr&`G
zUA1HC%t+`L`Xw?pya12mX8gs)Hy0fu47}Kn7x9;TK39+?Ifb;|PEr5<Q^t@$gQDIs
zZ#aXaKzwS0njxL>x{%loz#r#xR)>&q=LyD}U>t%R9~1MBW)647a}4LbyDTgvWE_?q
z(?9$hKwVRdH~9ReG3)r^3!*Y8_At%fY6SvJ3)_Qng}w9lDGK8zN56PeTSWV4Jt*Lf
zza#)|EVy~`0;xV?%2N~6BT?!*-L_7CUP@fF3)!|DQSw%bjK_$E3s}Qb4tBFhG1PAj
zLMT7&b;_w%8k*^HTs3zPKXdlIQ$$P0cYs=c)>Q|>Vv(0Of%lA}fZu(`Q>v_waL0_z
z)WZ-c0U=9Sx7&#--wRumPE*i4J;q2LEKm2i@4Jdut^L=?<v*dlt5Y{DzzQDPm}^|&
zbiQ|n$#u?mNk^NOJ*+Z3d+e1@Nl0t(F+@NnaFSqo(({wUSQNj<i1%t71397mc0qNy
z7*ssmMFwhq*N{ehiX`WC8oVQ1YXI5%v)iDB6`od|qAV-^DCSQW<}5sVsW$3SB>RBc
z?|^Iaff`z&Un1S6RFqr80qwB1<HJ?{?D_oYC?~&f_vS}aA{px5y(laHDpQcEo@OtE
zHu<_-tLJkgey6*ds#p}MgeT4cD<cT2XT(h6H|f06mHJ49AG*FY5Obq|JKjA3TV=T-
zrb;R%GF~s2`bF#Hr|NqJN{u8fvX54?X#9Uu76U|u+<SDG<M=?M5gkxM;s2z$k%Qja
z|2w+@r1AQ_o#ygDt6vV&21849b%qr5P}bV`O3=FSxaE}v`xHSDy_iu-2<6CyRNx5O
z`iSCOjcpK5-7x6-`ut6++Y@4fWGMn#m&@_xaTQM^`Y+Gf9_+|*2KF^w{qy~M_qI+~
zUi&Y{9yO8{i}?#8tBj}7m?(I#(Ohy+7qC~`Q@;vD-yfH7ms{|Z5fpjJ<u4AJwKw(x
z&fX7W!%du-C=o0J2p6Y5C2?IF8*0e6VUz#m4uh1`!A~~#fRT94{fw8Rf&H^Cy2e+P
ze_H`1&mV>2i+}wAg<f<-$aaA0XFE+kM?|p5n8{qmiicwN`wPal-mZ)_?S|+nF5vZo
zh_yj)fqrKfU6Tw6|H^#(9BNT*FB6iYQ#WgOe*HYQG2&^pknhsN9pGSAYUR%#*9OvT
z$@`hpJpscZ;~S~h%B~uD=C3~-Do4VuV-`UBdBtCIDzD*3?=yiKUgFnUa~8dKx4Ss^
zzM#fd7ia5!Xwv%alrXn%%XhW4mpk@U4ZJm^NG!_wZV3J&YIub>5h0AX0Y}$v#o4+8
zZ;8OUUz`VxReKNL7WVX}70a9bj;QrTIo>b;wWT|~g}uEv-gddTHCoZ&iXF|SZsO{9
zjCvkybYyG|?ljB^b~pwk&O|T`=nP5GAHw5LaYZCAdOO^CYsK^Pn2;Zc;%X3zp5biR
z&Fi_}88H6mD}VV_b<d~kIzyggb{OH~;q(ES7c+88u1>{nKG=&+?AoU8l5PLx(Bs#0
zH;0-J6y%$K`SRVSW#GHJ{m$5KgA74`Q+WQAc>J`${Xbobq8S@=Ddo?d+cGw*qY@<V
z?f`EZ1k)#-_N-Us8ndc?@Xp~6jJ^4eR^4B?^o0}Z@XA~FbZ|@e?qMeim%avfZJz)a
zzGj?H_cnYbd)G{%q*9aQbVv|QpH8Oa4Vpe!UDU>KEHpxcLeO{F53#tbx?WwKLiCXR
z+jNHWc;Y>fMaGkias9oQO@H#BZ(CXgvyC(V7e=L~PFZ~qvR5-!QFjuQVr51Uxs!4%
z!zEg#nLk(&mk}P_sHrnAFpMHI6p;_T%1v61v<lK$8?Ou9YR10!;Qcu*p_6IW(f@pb
zS{r}1oxz2ynX>0bRhVWI0ln9WX9nn^i&0zorD+>3U+yM{tIx(TNMf30-nAzefO|w!
z{8;DdD1gKWYIn2F<o^Jt@_(RzqV1!cEuU%0*BqP_79Ac2g+iOmy<g3Z;qN<{hyrwY
z@np7E;g<JK(rE)r>Q!2QJ@Mv&G~(3{^z8c?bhsd$s~4(;3_640qPIR4BXPnxQdEW)
zx>iN(%+8PXv_X<6tjG{9;`suJvX%mVD8VcA&`;np(aame+t)69Pd4a};_vQrRk0lS
zkF>c9tD;QqN;i0C!YPv_N-qx*M>lAn-PWx9>=WH3AZ$i1MImYsvh059l1Vh@%PweX
zOYhq(_7@AYPbVZiK7*}Q5FJB~#uF2@oPri=0ExICr$9yi8t_UoU!JgBg`o!Rxq3mg
zZ2HhG0ZC6w^{ld2lBnco(IZ!zhr>V)VAJtZtjLb#0KZ@C33a-?i%<)<o!HWyTwSq%
zuDiSY8N^DZ++Y)gm}o|h<niG^`{0o-NEGqhI6H(m%wsp~tKBc)7kS9Z4b}Fa2a`1J
zo`94|J!dLa9`oX8K-+~t3P=whC9P+iU3N1nN)~O(uIxp}4$!{Sw_|3#==37gY4q_0
zs>mPWoho15lwX9Z-K{Fd5a0T76r`OZ+ZDFW*&6+Fhg9nm%U#9QsltmJYZ4{BIj$Za
zc#uU3h?!;un?$7_6GuB$N&qjIo31VlgS*+89~?^_lcg?Pu!%HDaj-SPk#V6Y+egDq
zP=mde!^7G}9Z0@L3yC~GHkUgJ*Oz`$9Dy+RzHP@0nnzoh#8h21yuX}(s>pTx1Zg0z
z>S?}V#B+-eiDPAbixyYao3Qt_2_nha0VA(0>6|i=fV&;@x@<}z_TI;g7Lj=>+Pu1w
zA<LZa3xpVx7YT{x_p+;$jPho*nN8x_#^@roOt*@4V1pTcqbn~^jpAN!u{LRnw^Ji>
z1va(a`sN`s#7B|7kI#7P5=766Rgd&TdGhquIYn7##_iCZDpEcxJ}?{dI%|}?Y5)G+
zKT2Mq4aSz1fszv!)#F8F-(vGGgUv5EW{LJXP4E5!JUFmjNDbw{xy`aR4nTXxAt6}B
z{#TESv-sQ6NLStj^SNquS!x?jNEq|qqf39tKDsZ~bT}Opbaf#Zq8forD5Lh6e&2zv
zFW}7O{YQap*|wNe?x3VN&AZWh(+w{^E;r}Tj(A3hX1h=IQB*pZI3P*2<QPO%{)G;-
zZ5Ji5K=6Ejw0;o^f;>$g8$o--KhaSKTxd8*LWuCkejZhYfd~q2Di%c=Vw6d&KoUU`
zV#_IeOmt@msA}7NBp3Rgy@l%C>zj_?Wi3Z?=oh}YqvtOL8Bj$X{ykV8V;Bd%=0Vie
zg#giMS0Ew2XPRVv_+qT0NPcSA3(DSzze+fiy}pu9KXfpnq)gVYH5YnQ<w-d0`C54t
z^?cXMvu(fMi9_p!SLUTdExa>W_m>@8t*;p~IX~I<+MTGeRd+UIDr%}0(q4CS(LN%6
z&>K1|l)wZ;^Vc{US-BDcU*0d@y`{Al(#7Wx<5T9rh^_FJjp%p!NA^s3dIj~?zRVg|
zWO13N2;aS;F33@|`wKTF42z)UwTQmmt^g^>ee=B*<xOy69r^g6FiX3tzguA2I1pQ+
zV@S7W0-|n+rF!UjT|PElKR~7=62a6AJo5Oy&>FzI5|MJZ^DmqOK4=`ppqrm`Xoxb&
z_0XAI+s%jW-TZe`n&!h3A?x=k|L}GVAqt;$0iN>1U!ARUkt~Vu#ANtnsyUcHCRX5e
zgFK91MeI(x4~DYF+MNbBxwd=MgEo$PUFP%q%QTBr;Ax@<+^>0wT&M55twIt_EURGK
zlC3>)Lyk^?4<1^%<`sWJCiTljbvfu->+__PqLQA{6HqF0DejdMgP*FGWN&Y4%r`yT
zBkg_?p!J~~cU+>6S{RqR3MqzKo34%t5<gvI)K#CH^}VA*0EljdCHNyp`IK9>B;CyN
zbOL`rN?QI$dmKVE8mI8(4n5I`o2wkiL{O4zjD!-oVcYxyK;I(Szee8wYosGSYEjkL
z!TeHcmaX^GXR_N>#c0@Nf1^|ZH`Xdjnk!wPQ|KsS1l%2%w?CE^&?)p3ksQIbP>B;8
z4_r^03i$Dse=&P%{e*~j%b~?5_75C1bMVDmGByqm5vl0wVll+s(yut1&qbt*&{)&U
zX;&c0OPx@NRzDONZs&}wi?W=v2W7Sx)At;(<n%J(F-1*H{K_nQqGLfj6SbE?rq<Q7
z%-q6C$=W0}r_6?PKFrX<yM(I(!`X4yzTx`;W|92MQ38&py?R=g`<y+!bhB$>aBWTE
z8_C?u?Uto~5ty=fz&zY&lyC)dNhm)qQN#3BdUl(J%L6`EMCXpdgw#W(gQY*Ozb0Lz
zO6T-pg^tKma`_>=Td9j%-2qcJSTHWFn3^>aWW07jM)BjZW6Q#eP+eL%_Y!-is$OSc
zHZ39`>MCy8lb|=GH;X;66v0f8k;VV4iuYZ)BuSOd?lZYO%Hx*PgDcip1PbDkQ-=DX
zWG}nSckjQ1qG$nEOZ7LEQS}1vHdLH4%bRrh{E&xYjXIR28D8m12k5Diec432Bw;J+
zX#Sv12(1p(W_%sLm_$tPR1pkI-#XL5dN>99LuDO?mJ*K4=*x?JE7VDMQPvuSDeuGC
z^l}@_10*I)Yj8xb9o>hgL0=datB;#)3#D7m8$cZ{&J8gr6R+K0n>LTA2B4$0%UzpP
zc%ntT`UMvppR@c|eA=2%K$b{_iyz)<i#y!{%TGWZe22ZAJi}4PvpCx=i8rIJx}+cR
zXaZ-Ad&d?`bTkqj38-Iq8^I$kdg!XcS#G<Gk0QaO&ow-SLP8k)yhJUZXT@Z`eew~f
zEU?+nW2~ZauIsp|x?E6b+|bS%!RmRnMJ%!9L`zWh1!(pluSC_W${2UDOxh@1-GCLU
z0ON*`EhfnY{F`V~&AW?n;mL~dop%~B6&NKjhxr7WITk1K`6V1Fs9qp`+L5hMWRYBm
zB&K~UZnrAZB=MY%vi7(bkLzx+QRl7MlD)3sw5mqnpFo!t3Xhi-#{L-OKP!dD+NzU=
zEWTr;ws2OXIJc$U@Y_Z`Titi@M}jecyM-sthUd^y0o+(Hk)Qs2?bJ<i0dyIyL98AA
znMLViVlEe2L<AT0j1tTO)sTCa!+5`W*XCsf(n1w-LK>CD=rr(t<ma4Rt{MhR+b%n3
z?-pf&CpP)=E7=`e<wW3b_N4`DnJRfKKjn^l9Ss;s87b$l+WXnvR{tR!vq+@EKdZU%
zjeCr16clbbFQyi1knrR!&$ueaP4E&L3T>+;>1b$+&SdeI>38boMLnyTYSYh@2Zd<?
z=iW~}N<GyqPc5eFeTwgfnYQnjo4c1XyVeb02Ilgkwwe6d{l1bZaHE|ChtH_C^o^B0
ztw@iIdB%_~l{!q<f2H_NL~d?4?zPvS4Emya!`Ipq4<mTxzNd?(6GdKgP|+>CjMH(k
z+RP2lpblU0C19T^4t?_n;o$#;8)6-kXBk6Y*Q~!?SxMRB05K*h%$EtOB0h6mzxc{<
z$0p1@lyQ9F%bTGDcwttorqC?B^{jQUG^)nu+uDPG1^E!x@oIH3HA28bCre}(F*g)f
z+@t3wzqUVE6J8Tc)c6Hl6LHO<q@@a4Vfyn(u<0n(CGl+AS9BY~g$?s7Wv5JxTMpN@
zR7E#@6aMXZ;Fe>nM|$Iu?hRLDqDmofB{QnkgzJAV0ttRYOLhJ0gcF7?Ls4VWrPw6?
z?LrG@5QBX}j*Y=!*{ganphBSGWr6><TN89o6M6Ms&pEROo10VIZ|$9CywE946<LZn
zBS|Ip(-f^qTB}Xd5Z;_C<Pm3`&ns}m2O2NzuBaDpw_R*NuW#ASM#wHxMhMhUYLZ15
zwt?zsZA~o&08=#X1=U4)x}@j*XNAd#R*;N(I5M#FKyfi$+3hEq4xl2!<+waqRREdz
zgQS`TTWNksSpXle7habC=#lgJmg864{VW(cT|F@fgjnTM0faWgo)w|Hx=lsOFj#<}
zN-VC3#0Ry>L8CdW{v?6?Kl2LP)!1~;_)w>8#C0uZ3qH#^O%U~-mgxasO*C7PCC+<|
zW6zk--S(e^qS!+TcG&5#A<zP#%i*fAG=r7s5W0u{BN2m1q#?816~$aZ(7RigIVJX(
zv@iyXznzmxzXuSy=l-KCiYX!qLmr&Q9_HfxS!P7u;kA-HRUjOT6a%l3MsfAk2{L#&
z490oyl$)F5b)IeO!or6160i2?A2X)?d|-*aW57MZF9WhG+NS*r`1<^W4GLg<q&)>7
zITjV_dd;=0GB=*<)gt@xP2-q`gDQL0&wlRhBUTAF$Li)*s|eC{i?#EqiJfiFhhheG
zSqmH;>jLNB<->)}8!gG57!OBp-Wq|puA7`T>*V+&Jj8GdOgh$e?fVjS5JC>h(7Yt7
zLmDkA)O2M(TTynEL{wYuZFlq|Efp2Y0=9katg}SAj~xO<_gQC%Wzx{)sxkp&z;zVr
zxRT?X`i?W#l7VuQh5Ae{Fh1IzqDnF;DnvamEHuI;CV2Dwr4~ai$b&0xj$Paqrioho
zsD<eRQpHbOx&3Pd95dt`s4sOsQBzS*R+MM^d&)$q4$n23aNK^q(-qNpjo2n0xMF3Y
z>EJV*Dt#YJ?7O^Un@IdWZ4KrcN$8M2yVWjPkF?C9_E6u0tE#j_1W{(8d<XH+1bp*X
zj$}G<$#wLT7MC60WHkR<Fec~iO$_M#Z!nd3$;s2g(Zj7liyI#@C8f7~<%3-^@a%lz
z5b$&D*gY=vafEp!U(w1-n|Pw|UpP7$=t{BO(NEihSxq;&=X(|Wo;67>JkzG>umX88
zLU#oEmAp7FKPIZ#CjZCM$&Zc;9d^2T2KY)g#Z`lNaO;1=OD3ZFWd91r5zGHtv?cfd
z7hN$4{BW36d2^$*fgXNzK*jZ%2_C?<wVfVfz>T?)zb19biRq9+3q_H8$3QAg(^_%p
zY*`sVqQZ4^wHf!mO%BPBWMx3aF^hL_i1w-C;@FhR>TbTAt2M{)Y?A{?iw;t>Aba-L
z35RZni@lTCq*KiK{-+F7>_r@c<~#F#s+cC?0?D9nt&8czLGh)}%dVI#**4y%j#Te7
zbp4(^XLfx<A8?4SAs8#*enSvFNFr=mnDQ!8-Qo44;+_Z2{vfw++4-w&z_?w_E1wNg
zk1nP)z`Wcb#t)#y9Ubw+E#PZoB=)l8D!jdoO>9l`1*_;lU6QM$-1woX5?sT-biF<a
z`SY}$IH!qH0Frl5Uwl9eul<%4SmFQ+s0M;;D;tqF-C=21<em+Tni+C;f=3z{#8TDy
zQLZ_?Q9&ET1NV74h{pnWxvSiD*Sx#^8xrF2d)nk-Qyhh>S2&C^22XE*bfD+ucV$$O
z^YSTs>yrKbtM3vHrbFPk6^$?81z++HPugro<2f2OY7^!q$G8qUGF~Uii7rgd<A{Rz
zOM-P>+%-dgy1wEvCQ1vBIN(f0U7g(;T#logr#;<T8}#i>l!_iXj-ijrMTTCc<{nx5
z+r0*sWR%gu9&41AX}It0y;Hxfm&*(THxGd(w!uL4=-E@arCb(~V#o`9oRV`Bw$rg#
z#+q1D_InO~w7ed?9T!Yb{!x}zXwhx3dhunOEyBaBNdgap_zOEdi~aK;b(e8!Y-hc~
zjhAS71riavJcCUqR{D#DfF@9<hTQ8Ymu&Kn)&hf{9s%oBhtXc91-m9Nu&4>*>A&!R
z9I;3{#|9ewQ6f~F1eMFOBfq-w_17b7scch6O!iesjA4$kR_w?<d8m^gS2^7DgM)Mb
zx>u+oy|pYKU9%!CVy(UO`H0lT$umBnR2bpQ8^v7sPUopc^K1{vqWk3}KO!!Vn<;6$
zR!J<ux#jXg)Ayp(_`h?Ym+=nTYLb|<_4C}mdv;MX=ffN$4;7ITxb<7DCf~8}aO{MT
z$w2`W54cjIB<Z>sUD+qb%g7o(cv%TJ#pQWTxC*B1hgHycL^YKGuuc2TeQVP}e_B3<
z9{efUolJ~0+4l^U+kuw^7!W-S$d46L?6dd0xwo0xyr%t<VXt|K6n{RE$pa3MH$X>#
zew!U8kMPr0VY}^ruLuNOVAshU2X5q^E`Y*l0E!s<W3idyYJ|AZWnIF-VE*=0hRuUE
zyIL(~dPt8h-Edz4s!r2`hXIm#*Y+jslcZzMuU{RZ85EN}p1=|i_Ib_t3GK!yupDPv
z7K7WraQV}Wu3);UhO>x+?n&rwq8Euck!KZk3jF$-hMx*g%q;voRt0>vnZ08x{gi`!
z&yTN0F`)zLevcJ8RH<&li|@a6##ZikB!``fEkm6;U3yi2CJZ>hYM2bse!Rmndghwn
z5uVk@{cJKKsbAAXFRDBDrZF9dwv524Qy>HW5Xx9FRS4i&Y2G$yCQsi+nN2o+so48G
z;En_Y>5C5K6&b=*^=wCKSFRm8;2PmJM?zs?_y*B;Nq-*lO-BQ;zih$jQXJ8j#{ymv
z0#Qee0tT_LYd~~Du%6Wi(pp}MDgV*n{cCn<)&7_xl1v|iQlOxlpDeP!r)~6C=y@eO
ziggd5!wv~WOK`D-JvEhfGM+iFP(#pQYtJr!y=Fzq!6m{g&8EvGU6!F_?b}IXucO?`
zKJ`sh@<ATv07;qjTgG+dIK~G&qqK0`EAqXHWi0k^!FqR$6tsyorZ1{mqw&#1(H~-4
z(LQ%?X<!!10m$LiR>)FvTqgy^9<;*R75ULBPb><(2_e{%=D`s@X<A0xuFQOg2Gkq3
z!34g%7Bn4oxWt`TaZMg?IrfU#wG_6Cjl$rB1t+F(qAQ))VLD}i4%4{7OF<w1dOG;~
zvMwp4$wL!7OqXj+v@{(|_(XVd2peW+M)2drl_nF}8Esn~C?ZJDdj^LNGxEW6;;3ET
zZLE&&Wyu5uxz;p5Kq{G%y?(6kaCGI{XZBsw<g~mvnLExIX7HUK*HdPGm`h*MN48LX
znvzBg;(w3eeGprsU-jX9x<A+V)|xUUS^>=}$yO7Qz}s`z<OogOrLblZR}yjA`i>?F
zCtKsto5&AW0XPnuW3Qk`j0!0%=Z=+$AbR+M--{j@RiOos!jW-kpg;V?ZNUcUm@#N;
zuQ87f9H7bJ2pBlLpNN}(XI=1UzN?PnWB(oo6L&Nzxp$5Sp{1Or-8rA1XGZQRd2zS7
z3>-0V;15?m`nD6#2U9<B@GurLGyG7q7>x@XM4%i`9|?;k#--n$!FMJD{H#@UnaeKI
zI<IxT^f*);n|O{wi1%>8%lIfO8k&1v^@->?cgtvj0`k=Y(xGlYzLYjLBK{0Qe=xWv
z^b|j$f(1@*?OOjhWfDFXsmJrNu^!m3P{&!ecnkRzykjpWM>Rg*m_2_}!nY&{VHmeW
zV5oZ{aOaW9-bnh{HvX9>XWFj3&z_laVIdkYp9Dk0(vhzj*lD!s0=QC6+gzTF{Nlj3
zu<XJ<j};s?&Cg;v98vX(^$~o5ctQ4sS-Q_kY;v{GUYkQ}!I*slKFxX4a`vseVLvze
zd?MHO)cxHP@9W(fO7FtQP?lg*01iphp~Z{dw~yTa_3zy3Xy0;h6a3gt2`b`=rSL)5
zcY`ODg5~eoAv;IwR4iHWNpRdXk_LssU8O6^eqAMiE-d8Qj>2k-7ca`HP{f_qSd{Ge
z2!z3v>39jmao)H$k=J2WSH7*>C*rD<fgOB;R^{!rFnDF^6pO_Sos;9~^yJ(_J*hIo
z$>gQ8r#2AGA5%KZNaaySz4^STGd`V2bRp!R=Y&c63rSA(#iKq2b!<Ua=x&*e-$k$q
z#tUy&8OUQ4)N>UVT5n5sOderq7&rw(t!IVNlS41Bd6{Ddc+j^q&e=KE4YBU!p^OV5
zv!cVZsclbu{kx|1-SrS+74P;WO^0t1C(ytKo%J=ZuiJG+-qEX<8Q57V3a1OW7dAaL
z9ds2!=o3fToN+czkuayn?{&p=tSa~E0DDkkxiqbAS5FXqc6OK&A!F=YYSm1CeT>aI
zI1QDj<Rhl^NlEg!N2-Rj9ViZyzK2O!*#_&?oLNO=;`46Xg)uoOJ8C+ZzSa_uiovvc
z#A`^~|D&W898P)3<5+_Bu#+s)aE*2ods8iGR_2sn>cr|7>!HJ!B543a?zZ0l){i~#
zMFihgMpbWfo<>ND8MM2(jSA3TPtFaO6MZ9oAmS~}*^ga@lnpgr*NmQ@NqLuQxrqlD
z1m<Du^EwW^z=i!n-X);QBa6Y>f_*epwd-ToNbe2+vM_kVKIokOMc<Q!(iDKB(UW@f
z{$(;gvvI0S0<Bq1b<SlxP<|u`-{Jg_vcB<D*z}6HA}){?ELkqy-Cc)cH{u*z8SNHu
zvL6_D!%sU7A7`9|PgiZP_nks5SboEIoHGt7EL4`F1A^q#%rT1k>F;pLGOg{b(#IwE
zEWUkL<E-Dm-E@$mmnRl?l1|}c`!;_5lMHpfvT6S-mUBu3H%^v)c)8j)`p8iGB7^>v
zjk{yIS^AZZSF8?>XHp)m0UZq`(6##mj0&Mdq-nomu5Oxx{+Y5eimt{E+@*1&%~h~H
z<r$k;k-h4pshyk-H7_2y&C_3Wj$?*t>gv7SuQx}ZJ@6o-XFzC4*)HCzP`qfsTUZ#R
zpMIt7pNb^p=!t~A=2wMul1zzOAqEVXT$Sf_^QDo*LI)2pbo4Rz6Q+-p2Zlq^kE}Ee
zOwSeM?K*+5sk0`6-IBQ!7)*%M4;gR5Yzg0jM70U~k3_c@B1RjwkBS}`$19ufh>WjL
z*X?Uq>KI&Ky3d>J>I%96{{G{>)#pm8%DM}5(;WYq6W)&{N0<jes_fPtD`MAnm^4~I
zSyvR!bqs$AaVuPS9tiQmP{6Q!2wd>Z4<mSEBB(3%9|9n$?!vM}FV56XWQSEdVZZZw
z0-w>2gzFzRbLIXiP26^=+SltN^=g}xYEx$!WInc|3()s6{+lZ98k1w+wM(+7@a@K!
z)DNJsozI{5LPI{%8kX$V48lk1U7hsQpZJqcCS1Q57(XiC^gkq&R7({i)_)rYXSb)E
z5URIS_Xy!P3jI_WescXYfoxSKg(Zg2%;*gYE73}<+mah7YVM@k>Kq19_WUP2#WyaL
z>lf+>em~L|MP$Vc>|JBQZs~uvrQ`RrmN;hrXXhRKehKZMI-SC&c61K<Uj9Ez8U+6)
zjv{IB=gWcgN6pLBe;>JQ0M_ytA-FCBB{D=Afgo1stR6EZ2p=dfBfhl(wugiDER!$&
z8>Ie@tl&&Jd^!TO|I#bc7im$(5SP@xrABIyOJh3Dx+v%*^F@GLMEAGs7Oj29p6c&K
zWEe<$f#Qeq73tC=7$plfV@;3ecn6Af{t7kZE?)$)ek*aiK7GZCYVF%a@fi-2g$T}1
zwy7wSRM|)S^%IILYxpXa!W|fIJ$;tb#2SE|A1|OeXLQTmaxa+l7+-V0OrLH~-}}C{
zbT$jW7>^K!*TPb<ej<ao>>hhtZm%}-RMr5WdbsP4zsA<{4*v*zCVk}$)91+RP(Wm{
zudCOuDh=D`Y!JnGYt!Z3FY*un!7YYF9OzjiDp<{xTuQPMilR)%r*8-j(|AiqkbizY
z%JPI1Cgd#-nH~DfeSrwj2Wxz%{j5YO;u+Nc;rAKREGK*pG!7m_HooZNysJufuVcjK
zg29oCd(wW4Xn5CZKAiqH1#>aG0)VXohUfx>?a=X_PfSqr+HGOoGxPqJUJgGb^hkwP
z>F`p=aj)z_HCmY@46eQD8T>Q)wZ7K3K+$dM#dXprm|$BNdYbAsJ$8Oi?9Eb0^UwS8
z%MI}+F5j(h30frVWGyh^Z3N5&ae-=t53R@X)w?m+0IL8!WP0oH_8N`)!EO+pgrHyg
zp&%A$gYMY#T|Kf@#Vd<4<(16@B?U4p?{H%ZW5x9G)4}aC1;&U<M{=elOwCO1_~o-7
zhuQwr9{V_-ca5J)^sLe%YIb@WD2Xp%02GVR!%ugsi>d=6yAz(Nm^>>$)hCfE*Xnbt
z;%>UW{{53$txJp@+e5i7rdc~vhO|Dt;QnO*8xkudD&+R~LrCOnGxm<D`4dpj3N?A}
zF@f!?JM$G@rgm;}yK+W`+rBk63y;h!e?R%ndcID1`-N&|O~ve6-?<IRrc#C?t+G>>
zZ@oT{N+mjact0ktWO!@1eiyvWTjM04ecL+cOkKoMU}>JEOswTq{jYb(NXNEcFlBqF
zN~c_R-8+MZ3^fuL-8!`Zi9<tzc1Ysi!emnNM2yy=4#Zz+R98zaHa9h~)&<P|k{J%d
zZ?nl4LLJCDtzuoeJyLh+{iW1z+EZ2*bm3E4*K_cXbV(l`DA14odSq--N#~FL!i{RB
zF>GXq_9;YK&^5&xBzQxqO!_6)RJjo7(ZiSYx{dkIPZ>(Cx*sMa>`z`ufjpP}q=xp%
znl{Sy>FrqJJ_Uub8Pc-*iy!>>{}7<1_xqnOekD)9`#^Yg+H)4P<bkJ~20U1HKplF}
zmY)5RUPNix&B*=14e9)-qvFX~w-4u#sZ7&R^~O4kh+)>FQ{cg1W17}Oz80&H<ilsz
zfoKh8)~V9nDMC1%0yO#HB1HZR&k-vs-D)QrG<*w?uwRqs-|lYT9>v=t8`tCUtVd&8
zVPCs>{Mf^1S)fhRe&_$h(!NQ*MnW_9NP(6uF{j#$O+M`;dRV?QTJw3hS^Pf7I5qrQ
zZxtk_1d_ELdzGl8y1{VjhnQZYcF+mlxKIjN(OEsYqIvVrlMgJs-zAvDtLwhfmr4#5
z&91tie|yYCkhP_|cG+b^rpAHQW3&97%yQkj`h_EdJoX8PkKZOA1Ud_?ZY1X$bDs$#
zsT@yU=>OV)9A&;AQ(NGzD&1yf(cWy9@`K3v;jdffzIOZfzkSyHYqXr^p1TZ2aGOpf
z)-|jm`MZtx?P!_OS_@mc$lp)JUJw%$A0yjTLe3|aze)c?azlpCet+Ye*K4@J$IZGw
zKE}dV?Y5xLXfi_6|Cs6Svom*FALQ=~EZZC)vPEmZ1&Uc-5T;7wOTUu)<Z71^BdvRt
zJ(&{!Y^rYp2aZBothk>Us%ZJvpT!mpE77It7%MxD&-gU?VB2A^P_&e&B7H@IjSIif
zRXZ7><qMRopU$&*#02$jV+pp;^a9B_j+na3c*jdS?bhUjByXE0(z^k?-aGl$X<omI
zdtD;k%1k^fo}8;#@jeG>09wq2yK5zlyqMNDyCE|lqFj@(Xhx6^dw`j}>#p>!PgIK4
zzSL(vDp^_4opu_2Kg#e~J>X!SXgW5g?!*ERw98`Ro5~6n2R+%P%;kf)&<DLttN#9s
z9)l>Kas0DiaDm&5Lz<cvLT}ZAN~4cn2iOJxe{+l=*waSxs3_Yv+$}q5^9=uOo9^cS
zkGA=)Eig-3Y=Pe)wsTC!VFkZ-d~5g1`$GYx$<-7zv1<5gnm^oq5HMTv4PK#<knZcG
zf`ko=wKL$7?)Sh}EVtjDO{kQ9dmiq0X_+oSh@YEwajY|a7(&!SX!LdOcCbTBEm2j%
z=GG$?r!fpZ>>Q^3_!^r3)R=O1Q8F>rb_B%}Z>y(%ztt<?HcEy0`u~7ohA><fr(I6&
zOCd3wVpKmuPbKCV-iNG~pA>HWM#~o#GAwytNwz6A?MF3N;fhb^J=RuSJ@AaA(9h*U
zBE^7lD$FnB(oM(oFs#IpeVKolA&qvW?!2qqtQfyn-+9OjLkmyi|8EoYAI4)fS%icq
z;P*j(%SkHI)zOy;@C`S&qiG?VLnl-;{1JdcDG~I$`ws6$1XPFd^=HeR{s%=ZOd-f_
z5932FIrvpuU~0o{!?9=KBXhw22=3UV>%To&TR-tFYHn3#JKXt4zP0+_y4Z^@fCjD?
z5@h&-P`KZzx#7-^XWGY8f{7<@Ij*qqy)H_c)KzAVO^_kXya(LnM1y!zaLdJ^repgu
zEXt(j^0JxMaaL7QWz+g)5T$Rn(il`t<#7T!+tZ%H7vxF}Mbm_P2pA%Co-+gk&lg{*
z8}5YdeAHoDTAl;4#U5(lPTaV@=VQ}eEl4HYac>h;hf|Pi#+&HCyXMa&rIV9CIu$9M
zlg)~GwL1UXIx9YWG~O-tZ1SV*8~Hz|^_6o*RG&U488LXT6&A{_S5YAMev}Ha6&OEC
zvG}Ph6p_YIX7RI5z{2$ymyd{qi4u8Xa2Zp_5GyVE_u?%F$AEV;w{Wl`R!C-Oyext{
zpX=`R1XPUQ!pHzog^(u2&jW@M(;~6lJm5G7yEVM+z+jA~+#`qUYJJTUWrlqew^`2!
zQ{M`|-OC1bIF}Ye{q0IDA_%_CuqHkFfQ`aJmh~z%WWY+P7x-XQo$6JZfnmIb8*o;H
zY68Q2@jcSol5_O&v8!5#Zghg(c#Txo)QhJ;-uk|91Cc<fRI^LHaG`hI`Oan(KGzG(
z1caT#x#D_`M4vtq-HXIvj=NAms`&c*ru~0*i@3IlaLr}fzq(sQ%kXy@(XCVqTA*YS
z+%FkE+z*j9=>ygrGP$-paP>#U*`32mlK2s5xaBxR7wVQEF&6?m)FBhauoso!C{eM{
zlsC(HdG%SH82r8pTpra(Lo4POpETp%2Hd4vKjM$rdw~XfM?4}|li+G51ZXn02a6^h
zXji6%KS{(ZH=EuTXh)#dCXVE4ZyxfW;BxLSwl>KZ>cgoGSo5XI#~|d~MOb2}k-?NN
z&I`=jO#Y!&CVArmTiWBO>C9_=5^@w+#wHQ0kZ9e4{(@qhCb?`0C5P-`!3ICVfh8uy
zkQZ9l($^u2#8?_LsGGMVQ~>I1i*pG$+`0>-cvR(j*@5Hm$&itCKha0#B<gwWmRn?{
zOUj~wwDa4H_Z12p|HpEZMUSXr>jX>AbaD+voKrAMZdxf}NcX4;gq`K)XcE5UVC@&7
z^QmZoiwAxy1FvxoK~*Siav3bi5cRSK)gz3r{;MYyuSC6jCJ-0;n0O1Pt3DEVb~Y=7
z=npo{;NcCT4sSovJWJ3|lKSvfE5EB?`XM2gpT@;E@HD~Iq*13ZT<KqZPCQ;H`lc^|
z1?Qs$m$cFR+uo=G`qf_)qim2&z*$K5uqgj<h|D??d&s(d1GKFwa|4Vn9xo8Izlh8l
z9Lm{gZ8Gv@|4SM`>M-qpM*O{%5s~mHyHf4VboSg9{zy2jz_ugGwNCB0j98mFf{R7w
z1LHaIab<!TT+IiFLhj}mDu^kUz-Q0R5Q{8|*6esAFpT;O@^X1u83C6GkKsp3Alr3^
zQ&opp%t71AvL|-zCx@<6D6nWtDpf0ZCc5+d$CXqhdSR&Yl;hWWOG#6Ho;F1MEAa;w
zw*NHpK_`t1|LmSqB^bc~*nw#Dz{GQS%hI6d^^W%9N4w-(pYR9fS)(<7Yo(*@Q=l^_
zUsjd|@0=6U!-xhp7IaIo3DXXadzp)(K=iNPC~k`(oAN~tS|{p`p6K`b_q|LL;}bTL
z%Hru1zG(Zak<y!PhV6fUV30XYLDVHFst3rw;5(>)ZO}Y{T5WCjC@cG&#I8n?wi%WJ
zSI#H;gHnswmT|neF-KWB1@f=1I(;8T=-2&QJ-9$GbGSZmmMej3XiASIh&<6iv<cr+
z3%Y|fi()=z&R{^!V9@nAPSSu0q%8eNPo@O0B;)$_#c=0xjhFWaR(pX54vw-IjKp*H
zYb1G_;jdS>KiECsvmg&e#HtY_Up?+rGCXCngQ6bk{Ak>0d_DB7(LkuAq_E`Xy45T4
z1QFxKO%dV7$6AT{q_KaZb~<Pl(685eGw9*0xyzNpJ<OD#<<m>xf)gbVc8;lWNm}}>
zYmbpN&h2zMf5p1>*Xub9)`Nk9A`^O>`zvkj+vD8j%MOl95^@p5Tki>PfD(4*QLC(E
z9G2UHAYeXzL)MM%&UC*kVVE<Bd-!S_K%gtSsqp0@P<v!bZAaAig%{1*{`LM<9_ED)
zuxD4<pvd-m|C5aU)Y*PJI(BtM@65$Mkrr6fDGR$+EwTcR=CjW6<nq|{$s7eizv<Fo
zk`GyfgZY)1*D?@S@#~6_+@wmoHyt)71-Z%teh5O<2W5;R`ZgQT)&)@EKX!TreA4eU
zVnWl+owjt6qx+D~pe|vx$o>N8UZO7&n-l7J$v1~o7bOFQ;&A!&_e2`u4W<GghcZF?
zFh(lM7h5ljdcxC+4-9JUsa>|AZbXy*3yK8x?e4pj5?#r}qPj{J-0#1klEAJ-Vzfz-
zfK=E>-Ae!D{H?m~-%16-x)^>I6c(PlSnu?MN>{xFxAx`!Cma%J!CjpDqZq#OUhED1
SvBN+4Lug*p1&UQ}JpNx@i?^Tv

literal 0
HcmV?d00001

diff --git a/windows/manage/introduction-to-windows-10-servicing.md b/windows/manage/introduction-to-windows-10-servicing.md
index 6d441151c7..1dda9dc5a3 100644
--- a/windows/manage/introduction-to-windows-10-servicing.md
+++ b/windows/manage/introduction-to-windows-10-servicing.md
@@ -21,12 +21,12 @@ author: jdeckerMS
 **In this article**
 
 -   [Introduction](#introduction)
--   [Streamlined product development and release cycles](#streamlined_product_development_and_release_cycles)
--   [New Windows 10 delivery and installation alternatives](#new_windows_10_delivery_and_installation_alternatives)
--   [Windows 10 servicing options](#windows_10_servicing_options)
--   [Plan for Windows 10 deployment](#plan_for_windows_10_deployment)
--   [Servicing options and servicing branch designations](#servicing_options_and_servicing_branch_designations)
--   [Related topics](#related_topics)
+-   [Streamlined product development and release cycles](#streamlined-product-development-and-release-cycles)
+-   [New Windows 10 delivery and installation alternatives](#new-windows-10-delivery-and-installation-alternatives)
+-   [Windows 10 servicing options](#windows-10-servicing-options)
+-   [Plan for Windows 10 deployment](#plan-for-windows-10-deployment)
+-   [Servicing options and servicing branch designations](#servicing-options-and-servicing-branch-designations)
+-   [Related topics](#related-topics)
 
 This article describes the new servicing options available in Windows 10, Windows 10 Mobile, and IoT Core and how they enable enterprises to keep their devices current with the latest feature upgrades. It also covers related topics, such as how enterprises can make better use of Windows Update, and what the new servicing options mean for support lifecycles.
 
@@ -125,11 +125,11 @@ Historically, because of the length of time between releases of new Windows vers
 
 In fact, when planning to deploy Windows 10 on a device, one of the most important questions for IT administrators to ask is, “What should happen to this device when Microsoft publishes a new feature upgrade?” This is because Microsoft designed Windows 10 to provide businesses with multiple servicing options, centered on enabling different rates of feature upgrade adoption. In particular, IT administrators can configure Windows 10 devices to:
 
--   Receive feature upgrades immediately after Microsoft makes them available publicly, so that users gain access to new features, experiences, and functionality as soon as possible. For more information, see [Immediate feature upgrade installation with Current Branch (CB) servicing](#immediate_upgrade_CB).
+-   Receive feature upgrades immediately after Microsoft makes them available publicly, so that users gain access to new features, experiences, and functionality as soon as possible. For more information, see [Immediate feature upgrade installation with Current Branch (CB) servicing](#immediate-upgrade-cb).
 
--   Defer receiving feature upgrades for a period of approximately four months after Microsoft makes them available publicly, to provide IT administrators with time to perform pre-deployment testing and provide feature upgrades releases with additional time-in-market to mature. For more information, see [Deferred feature upgrade installation with Current Branch for Business (CBB) servicing](#deferred_upgrade_CBB).
+-   Defer receiving feature upgrades for a period of approximately four months after Microsoft makes them available publicly, to provide IT administrators with time to perform pre-deployment testing and provide feature upgrades releases with additional time-in-market to mature. For more information, see [Deferred feature upgrade installation with Current Branch for Business (CBB) servicing](#deferred-upgrade-cbb).
 
--   Receive only servicing updates for the duration of their Windows 10 deployment in order to reduce the number of non-essential changes made to the device. For more information, see [Install servicing updates only by using Long-Term Servicing Branch (LTSB) servicing](#install_updates_LTSB).
+-   Receive only servicing updates for the duration of their Windows 10 deployment in order to reduce the number of non-essential changes made to the device. For more information, see [Install servicing updates only by using Long-Term Servicing Branch (LTSB) servicing](#install-updates-ltsb).
 
 The breakout of a company’s devices by the categories above is likely to vary significantly by industry and other factors. What is most important is that companies can decide what works best for them and can choose different options for different devices.
 
@@ -211,7 +211,7 @@ The same underlying figure will be used in subsequent figures to show all three
 
 To simplify the servicing lifetime and feature upgrade behavior explanations that follow, this document refers to branch designations for a specific feature upgrade as the +0 versions, the designations for the feature upgrade after the +0 version as the +1 (or successor) versions, and the designation for the feature upgrade after the +1 version as the +2 (or second successor) versions.
 
-### 
+### <a href="" id="immediate-upgrade-cb"></a>
 
 **Immediate feature upgrade installation with Current Branch (CB) servicing**
 
@@ -233,7 +233,7 @@ Windows 10 Home supports Windows Update for release deployment. Windows 10 edi
 
 It is important to note that devices serviced from CBs must install two to three feature upgrades per year to remain current and continue to receive servicing updates.
 
-### 
+### <a href="" id="deferred-upgrade-cbb"></a>
 
 **Deferred feature upgrade installation with Current Branch for Business (CBB) servicing**
 
@@ -255,11 +255,11 @@ Windows 10 (Pro, Education, and Enterprise editions) support release deployment
 
 Microsoft designed Windows 10 servicing lifetime policies so that CBBs will receive servicing updates for approximately twice as many months as CBs. This enables two CBBs to receive servicing support at the same time, which provides businesses with more flexibility when deploying new feature upgrades. That said, it is important to note that Microsoft will not produce servicing updates for a feature upgrade after its corresponding CBB reaches the end of its servicing lifetime. This means that feature upgrade deployments cannot be extended indefinitely and IT administrators should ensure that they deploy newer feature upgrades onto devices before CBBs end.
 
-### 
+### <a href="" id="install-updates-ltsb"></a>
 
 **Install servicing updates only by using Long-Term Servicing Branch (LTSB) servicing**
 
-As shown in Figure 7, the Long-Term Servicing Branch (LTSB) designation refers to Servicing Branch \#2 from beginning to end. LTSBs begin when a feature upgrade with long-term support is published by Microsoft and end after 10 years. It is important to note that only the Windows 10 Enterprise LTSB edition supports long-term servicing, and there are important differences between this edition and other Windows 10 editions regarding upgradability and feature set (described below in the [Considerations when configuring devices for servicing updates only](#servicing_only) section).
+As shown in Figure 7, the Long-Term Servicing Branch (LTSB) designation refers to Servicing Branch \#2 from beginning to end. LTSBs begin when a feature upgrade with long-term support is published by Microsoft and end after 10 years. It is important to note that only the Windows 10 Enterprise LTSB edition supports long-term servicing, and there are important differences between this edition and other Windows 10 editions regarding upgradability and feature set (described below in the [Considerations when configuring devices for servicing updates only](#servicing-only) section).
 
 ![figure 7](images/win10servicing-fig7.png)
 
@@ -280,7 +280,7 @@ It is important to note again that not all feature upgrades will have an LTSB. T
 
  
 
-### 
+### <a href="" id="servicing-only"></a>
 
 **Considerations when configuring devices for servicing updates only**
 
diff --git a/windows/manage/join-windows-10-mobile-to-azure-active-directory.md b/windows/manage/join-windows-10-mobile-to-azure-active-directory.md
index 64404781ef..bb2295e65c 100644
--- a/windows/manage/join-windows-10-mobile-to-azure-active-directory.md
+++ b/windows/manage/join-windows-10-mobile-to-azure-active-directory.md
@@ -17,14 +17,14 @@ author: jdeckerMS
 
 **In this article**
 
--   [Why join Windows 10 Mobile to Azure AD](#why_join_windows_10_mobile_to_azure_ad)
--   [Are you upgrading current devices to Windows 10 Mobile?](#BKMK_upgrade)
--   [The difference between "add work account" and "join Azure AD"](#add_work_account)
--   [Preparing for Windows 10 Mobile](#preparing_for_windows_10_mobile)
--   [How to join Windows 10 Mobile to Azure AD](#how_to_join_windows_10_mobile_to_azure_ad)
--   [Set up mail and calendar](#set_up_mail_and_calendar)
--   [Use Office and OneDrive apps](#use_office_and_onedrive_apps)
--   [Use Windows Store for Business](#use_windows_store_for_business)
+-   [Why join Windows 10 Mobile to Azure AD](#why-join-windows-10-mobile-to-azure-ad)
+-   [Are you upgrading current devices to Windows 10 Mobile?](#bkmk-upgrade)
+-   [The difference between "Add work account" and "Azure AD Join"](#add-work-account)
+-   [Preparing for Windows 10 Mobile](#preparing-for-windows-10-mobile)
+-   [How to join Windows 10 Mobile to Azure AD](#how-to-join-windows-10-mobile-to-azure-ad)
+-   [Set up mail and calendar](#set-up-mail-and-calendar)
+-   [Use Office and OneDrive apps](#use-office-and-onedrive-apps)
+-   [Use Windows Store for Business](#use-windows-store-for-business)
 
 Devices running Windows 10 Mobile can join Azure Active Directory (Azure AD) when the device is configured during the out-of-box experience (OOBE). This article describes the considerations and options for using Windows 10 Mobile with Azure AD in your organization.
 
@@ -35,7 +35,7 @@ When a device running Windows 10 Mobile is joined to Azure AD, the device can e
 
 -   Single sign-on (SSO) in applications like Mail, Word, and OneDrive using resources backed by Azure AD.
 
--   SSO in Edge browser to Azure AD-connected web applications like Office 365 Portal, Visual Studio, and more than [2500 non-Microsoft apps](http://go.microsoft.com/fwlink/p/?LinkID=746211).
+-   SSO in Microsoft Edge browser to Azure AD-connected web applications like Office 365 Portal, Visual Studio, and more than [2500 non-Microsoft apps](http://go.microsoft.com/fwlink/p/?LinkID=746211).
 
 -   SSO to resources on-premises.
 
@@ -45,7 +45,7 @@ When a device running Windows 10 Mobile is joined to Azure AD, the device can e
 
 -   Use Windows Store for Business to target applications to users.
 
-## Are you upgrading current devices to Windows 10 Mobile?
+## <a href="" id="bkmk-upgrade"></a>Are you upgrading current devices to Windows 10 Mobile?
 
 
 Windows Phone 8.1 only supported the ability to connect the device to personal cloud services using a Microsoft account for authentication. This required creating Microsoft accounts to be used for work purposes. In Windows 10 Mobile, you have the ability to join devices directly to Azure AD without requiring a personal Microsoft account.
@@ -54,16 +54,22 @@ If you have existing Windows Phone 8.1 devices, the first thing to understand is
 
 Before upgrading and joining devices to Azure AD, you will want to consider existing data usage. How users are using the existing devices and what data is stored locally will vary for every customer. Are text messages used for work purposes and need to be backed up and available after the upgrade? Are there photos stored locally or stored associated with an Microsoft account? Are there device and app settings that to be retained? Are there contacts stored in the SIM or associated with an Microsoft account? You will need to explore methods for capturing and storing the data that needs to be retained before you join the devices to Azure AD. Photos, music files, and documents stored locally on the device can be copied from the device using a USB connection to a PC.
 
-To join upgraded mobile devices to Azure AD, [the devices must be reset](reset-a-windows-10-mobile-device.md) to start the out-of-box experience for device setup. When the device is joined to Azure AD, the account used for authentication changes from the Microsoft account to an Azure AD account and this is not a change that can be done while maintaining all existing user data. This is similar to changing a device from personally owned to organizationally owned. When a user joins an organization’s domain, the user is then required to log in as the domain user and start with a fresh user profile. A new user profile means there would not be any persisted settings, apps, or data from the previous personal profile.
+To join upgraded mobile devices to Azure AD, [the devices must be reset](reset-a-windows-10-mobile-device.md) to start the out-of-box experience for device setup. Joining a device to Azure AD is not a change that can be done while maintaining existing user data. This is similar to changing a device from personally owned to organizationally owned. When a user joins an organization’s domain, the user is then required to log in as the domain user and start with a fresh user profile. A new user profile means there would not be any persisted settings, apps, or data from the previous personal profile.
 
-If you want to avoid the device reset process, consider [adding work accounts](#add_work_account) rather than joining the devices to Azure AD.
+If you want to avoid the device reset process, consider [adding work accounts](#add-work-account) rather than joining the devices to Azure AD.
 
-## The difference between "add work account" and "join Azure AD"
+## <a href="" id="add-work-account"></a>The difference between "Add work account" and "Azure AD Join"
 
 
-You can add access to Azure AD-backed resources on the device without resetting the device. However, this method does not provide SSO in the Windows Store and does not provide the ability to roam settings based on the Azure AD account using enterprise roaming. [Learn about enterprise state roaming in Azure AD.](http://go.microsoft.com/fwlink/p/?LinkId=734996)
+Even though Azure AD Join on Windows 10 Mobile provides the best overall experience, there are two ways that you can use an added work account instead of joining the device to Azure AD due to organizational requirements.
 
-Using **Settings** &gt; **Accounts** &gt; **Your email and accounts** &gt; **Add work or school account**, users can add their Azure AD account to the device, keeping their Microsoft account as the primary account. If you [enable auto-enrollment in your MDM settings](http://go.microsoft.com/fwlink/p/?LinkID=691615), the device will automatically be enrolled in MDM.
+-   You can complete OOBE using the **Sign in later** option. This lets you start using Windows 10 Mobile with any connected Azure AD account or Microsoft account.
+
+-   You can add access to Azure AD-backed resources on the device without resetting the device.
+
+However, neither of these methods provides SSO in the Windows Store and does not provide the ability to roam settings based on the Azure AD account using enterprise roaming. [Learn about enterprise state roaming in Azure AD.](http://go.microsoft.com/fwlink/p/?LinkId=734996)
+
+Using **Settings** &gt; **Accounts** &gt; **Your email and accounts** &gt; **Add work or school account**, users can add their Azure AD account to the device. Alternatively, a work account can be added when the user signs in to an application like Mail, Word, etc. If you [enable auto-enrollment in your MDM settings](http://go.microsoft.com/fwlink/p/?LinkID=691615), the device will automatically be enrolled in MDM.
 
 An added work account provides the same SSO experience in browser apps like Office 365 (Office portal, Outlook Web Access, Calendar, People, OneDrive), Azure AD profile and change password app, and Visual Studio. You get SSO to built-in applications like Mail, Calendar, People, OneDrive and files hosted on OneDrive without prompts for a password. In Office apps like Microsoft Word, Microsoft Excel, etc., you simply select the Azure AD account and you are able to open files without entering a password.
 
@@ -72,13 +78,13 @@ An added work account provides the same SSO experience in browser apps like Offi
 
 -   **Azure AD configuration**
 
-    Currently, Azure AD join only supports self-provisioning, meaning the credentials of the user of the device must be used during the initial setup of the device. If your mobile operator prepares devices on your behalf, this will impact your ability to join the device to Azure AD.
+    Currently, Azure AD Join only supports self-provisioning, meaning the credentials of the user of the device must be used during the initial setup of the device. If your mobile operator prepares devices on your behalf, this will impact your ability to join the device to Azure AD. Many IT administrators may start with a desire to set up devices for their employees, but the Azure AD Join experience is optimized for end-users, including the option for automatic MDM enrollment.
 
     By default, Azure AD is set up to allow devices to join and to allow users to use their corporate credentials on organizational-owned devices or personal devices. The blog post [Azure AD Join on Windows 10 devices](http://go.microsoft.com/fwlink/p/?LinkID=616791) has more information on where you can review your Azure AD settings. You can configure Azure AD to not allow anyone to join, to allow everyone in your organization to join, or you can select specific Azure AD groups which are allowed to join.
 
 -   **Device setup**
 
-    A device running Windows 10 Mobile can only join Azure AD during OOBE. New devices from mobile operators will be in this state when they are received. Windows Phone 8.1 devices that are [upgraded](#BKMK_upgrade) to Windows 10 Mobile will need to be reset to get back to OOBE for device setup.
+    A device running Windows 10 Mobile can only join Azure AD during OOBE. New devices from mobile operators will be in this state when they are received. Windows Phone 8.1 devices that are [upgraded](#bkmk-upgrade) to Windows 10 Mobile will need to be reset to get back to OOBE for device setup.
 
 -   **Mobile device management**
 
@@ -163,12 +169,22 @@ Return to **Settings** &gt; **Accounts** &gt; **Your email and accounts**, and y
 
 Office applications like Microsoft Word and Microsoft PowerPoint will automatically sign you in with your Azure AD account. When you open an Office app, you see a screen that allows you to choose between a Microsoft account and Azure AD account. Office shows this screen while it is automatically signing you in, so just be patient for a couple seconds and Office will automatically sign you in using your Azure AD account.
 
-Microsoft Word automatically shows the documents recently opened on other devices. Opening a document allows you to jump straight to the same section you were last editing on another device. Microsoft PowerPoint shows your recently opened slide decks.
+Microsoft Word automatically shows the documents recently opened on other devices. Opening a document allows you to jump straight to the same section you were last editing on another device.
+
+![word](images/aadjword.jpg)
+
+Microsoft PowerPoint shows your recently opened slide decks.
+
+![powerpoint](images/aadjppt.jpg)
 
 The OneDrive application also uses SSO, showing you all your documents and enabling you to open them without any authentication experience.
 
+![onedrive](images/aadjonedrive.jpg)
+
 In addition to application SSO, Azure AD joined devices also get SSO for browser applications which trust Azure AD, such as web applications, Visual Studio, Office 365 portal, and OneDrive for Business.
 
+![browser apps](images/aadjbrowser.jpg)
+
 OneNote requires a Microsoft account, but you can use it with your Azure AD account as well.
 
 ![sign in to onenote](images/aadjonenote.jpg)
diff --git a/windows/manage/lock-down-windows-10-to-specific-apps.md b/windows/manage/lock-down-windows-10-to-specific-apps.md
index 52bfccf8a0..56b14bd016 100644
--- a/windows/manage/lock-down-windows-10-to-specific-apps.md
+++ b/windows/manage/lock-down-windows-10-to-specific-apps.md
@@ -18,10 +18,10 @@ author: jdeckerMS
 
 **In this article**
 
--   [Install apps](#install_apps)
--   [Use AppLocker to set rules for apps](#use_applocker_to_set_rules_for_apps)
--   [Other settings to lock down](#other_settings_to_lock_down)
--   [Customize Start screen layout for the device](#customize_start_screen_layout_for_the_device)
+-   [Install apps](#install-apps)
+-   [Use AppLocker to set rules for apps](#use-applocker-to-set-rules-for-apps)
+-   [Other settings to lock down](#other-settings-to-lock-down)
+-   [Customize Start screen layout for the device](#customize-start-screen-layout-for-the-device)
 
 Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings.
 
diff --git a/windows/manage/lock-down-windows-10.md b/windows/manage/lock-down-windows-10.md
index 6cb03fe5ef..ac4f1a456a 100644
--- a/windows/manage/lock-down-windows-10.md
+++ b/windows/manage/lock-down-windows-10.md
@@ -43,23 +43,28 @@ Enterprises often need to manage how people use corporate devices. Windows 10 p
 <td align="left"><p>Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings.</p></td>
 </tr>
 <tr class="odd">
-<td align="left"><p>[Configure telemetry and other settings in your organization](manage-privacy-for-windows-10-in-your-company.md)</p></td>
-<td align="left"><p>Learn about the telemetry that Microsoft gathers, the network connections that Windows components make to Microsoft, and also the privacy settings that affect data that is shared with either Microsoft or apps and how they can be managed by an IT Pro.</p></td>
+<td align="left"><p>[Configure telemetry in your organization](configure-telemetry-in-your-organization.md)</p></td>
+<td align="left"><p>Use this article to make informed decisions about how you can configure telemetry in your organization. We discuss telemetry as system data that is uploaded by the Connected User Experience and Telemetry component.</p></td>
 </tr>
 <tr class="even">
+<td align="left"><p>[Disconnect from Microsoft and configure privacy settings in your organization](manage-privacy-for-windows-10-in-your-company.md)</p></td>
+<td align="left"><p>If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider.</p>
+<p>If you’re looking for content on what each telemetry level means and how to configure it in your organization, see [Configure telemetry in your organization](configure-telemetry-in-your-organization.md).</p></td>
+</tr>
+<tr class="odd">
 <td align="left"><p>[Configure access to Windows Store](stop-employees-from-using-the-windows-store.md)</p></td>
 <td align="left"><p>IT Pros can configure access to Windows Store for client computers in their organization. For some organizations, business policies require blocking access to Windows Store.</p></td>
 </tr>
-<tr class="odd">
+<tr class="even">
 <td align="left"><p>[Manage Wi-Fi Sense in your company](manage-wi-fi-sense-in-your-company.md)</p></td>
 <td align="left"><p>Wi-Fi Sense automatically connects you to Wi-Fi, so you can get online quickly in more places. It can connect you to open Wi-Fi hotspots it knows about through crowdsourcing, or to Wi-Fi networks your contacts have shared with you by using Wi-Fi Sense.</p>
 <p>The initial settings for Wi-Fi Sense are determined by the options you chose when you first set up your PC with Windows 10.</p></td>
 </tr>
-<tr class="even">
+<tr class="odd">
 <td align="left"><p>[Configure Windows 10 Mobile using Lockdown XML](lockdown-xml.md)</p></td>
 <td align="left"><p>Windows 10 Mobile allows enterprises to lock down a device, define multiple user roles, and configure custom layouts on a device.</p></td>
 </tr>
-<tr class="odd">
+<tr class="even">
 <td align="left"><p>[Reset a Windows 10 Mobile device](reset-a-windows-10-mobile-device.md)</p></td>
 <td align="left"><p>There are two methods for resetting a Windows 10 Mobile device: factory reset and &quot;wipe and persist&quot; reset.</p></td>
 </tr>
diff --git a/windows/manage/lockdown-xml.md b/windows/manage/lockdown-xml.md
index 75ae863b1b..6fdf49059d 100644
--- a/windows/manage/lockdown-xml.md
+++ b/windows/manage/lockdown-xml.md
@@ -17,12 +17,12 @@ author: jdeckerMS
 
 **In this article**
 
--   [Order of lockdown settings](#order_of_lockdown_settings)
--   [Configuring multiple app packages](#BMK_map)
--   [Lockdown example to use in a lockdown XML file](#lockdown_example_to_use_in_a_lockdown_xml_file)
--   [Add lockdown XML to a provisioning package](#add_lockdown_xml_to_a_provisioning_package)
--   [Push lockdown XML using MDM](#push_lockdown_xml_using_mdm)
--   [Related topics](#related_topics)
+-   [Order of lockdown settings](#order-of-lockdown-settings)
+-   [Configuring multiple app packages](#bmk-map)
+-   [Lockdown example to use in a lockdown XML file](#lockdown-example-to-use-in-a-lockdown-xml-file)
+-   [Add lockdown XML to a provisioning package](#add-lockdown-xml-to-a-provisioning-package)
+-   [Push lockdown XML using MDM](#push-lockdown-xml-using-mdm)
+-   [Related topics](#related-topics)
 
 Windows 10 Mobile allows enterprises to lock down a device, define multiple user roles, and configure custom layouts on a device. For example, the enterprise can lock down a device so that only applications and settings in an allow list are available.
 
@@ -41,7 +41,7 @@ The configuration items must be in the following order when you lock down settin
     -   ActionCenter
     -   Apps
         -   Application product ID, as described in [Product IDs in Windows 10 Mobile](http://go.microsoft.com/fwlink/p/?LinkId=698449)
-        -   App User Model ID, as described in [Configuring Multiple App Packages](#BMK_map)
+        -   App User Model ID, as described in [Configuring Multiple App Packages](#bmk-map)
         -   PinToStart
             -   Size
             -   Location
@@ -66,7 +66,7 @@ The configuration items must be in the following order when you lock down settin
         -   ActionCenter
         -   Apps
             -   Application product ID, as described in [Product IDs in Windows 10 Mobile](http://go.microsoft.com/fwlink/p/?LinkId=698449)
-            -   App User Model ID (AUMID), as described in [Configuring Multiple App Packages](#BMK_map)
+            -   App User Model ID (AUMID), as described in [Configuring Multiple App Packages](#bmk-map)
             -   PinToStart
                 -   Size
                 -   Location
@@ -87,7 +87,7 @@ The configuration items must be in the following order when you lock down settin
             -   Enable tile manipulation
         -   StartScreenSize
 
-## Configuring multiple app packages
+## <a href="" id="bmk-map"></a>Configuring multiple app packages
 
 
 Multiple app packages enable multiple apps to exist inside the same package. Since product IDs identify packages and not applications, specifying a product ID is not enough to distinguish between individual apps inside a multiple app package. Trying to pin application tiles from a multiple app package with just a product ID can result in unexpected behavior.
diff --git a/windows/manage/manage-access-to-private-store.md b/windows/manage/manage-access-to-private-store.md
index 6dee688668..09664ba97f 100644
--- a/windows/manage/manage-access-to-private-store.md
+++ b/windows/manage/manage-access-to-private-store.md
@@ -21,7 +21,7 @@ The private store is a feature in Store for Business that organizations receive
 
 ![](images/wsfb-wsappprivatestore.png)
 
-Organizations using an MDM to manage apps can use a policy to show only the private store. When your MDM supports the Store for Business, the MDM can use the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx#group_policy_table). More specifically, the **ApplicationManagement/RequirePrivateStoreOnly** policy.
+Organizations using an MDM to manage apps can use a policy to show only the private store. When your MDM supports the Store for Business, the MDM can use the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx#group-policy-table). More specifically, the **ApplicationManagement/RequirePrivateStoreOnly** policy.
 
 You can also prevent employees from using the Windows Store. For more information, see [Configure access to Windows Store](stop-employees-from-using-the-windows-store.md).
 
diff --git a/windows/manage/manage-corporate-devices.md b/windows/manage/manage-corporate-devices.md
index f05c0d2b34..496f5d11e0 100644
--- a/windows/manage/manage-corporate-devices.md
+++ b/windows/manage/manage-corporate-devices.md
@@ -19,11 +19,11 @@ author: jdeckerMS
 
 **In this article**
 
--   [Identity and management options](#identity_and_management_options)
--   [How setting conflicts are resolved](#how_setting_conflicts_are_resolved)
--   [MDM enrollment](#mdm_enrollment)
--   [Learn more](#learn_more)
--   [Related topics](#related_topics)
+-   [Identity and management options](#identity-and-management-options)
+-   [How setting conflicts are resolved](#how-setting-conflicts-are-resolved)
+-   [MDM enrollment](#mdm-enrollment)
+-   [Learn more](#learn-more)
+-   [Related topics](#related-topics)
 
 You can use the same management tools to manage all device types running Windows 10 : desktops, laptops, tablets, and phones. And your current management tools, such as Group Policy, Windows Management Instrumentation (WMI), Windows PowerShell scripts, Orchestrator runbooks, System Center tools, and so on, will continue to work for Windows 10 on desktop editions.
 
diff --git a/windows/manage/manage-cortana-in-your-enterprise.md b/windows/manage/manage-cortana-in-your-enterprise.md
index b356bfd53c..4dfb5f15fb 100644
--- a/windows/manage/manage-cortana-in-your-enterprise.md
+++ b/windows/manage/manage-cortana-in-your-enterprise.md
@@ -15,7 +15,7 @@ author: jdeckerMS
 
 The world’s first personal digital assistant helps users get things done, even at work. Cortana includes powerful configuration options specifically to optimize for unique small to medium-sized business and enterprise environments.
 
-## Cortana integration with Office 365
+## <a href="" id="cortana-integration-with-o365"></a>Cortana integration with Office 365
 
 
 Cortana in Windows 10 is already great at letting your employees quickly see what the day is going to look like, see where and when their meetings are going to be, get a sense of travel times to and from work, and even get updates from a calendar for upcoming trips.
@@ -28,7 +28,7 @@ But Cortana works even harder when she connects to Office 365, helping employees
 
 -   For a quick review of the frequently asked questions about Cortana and Office 365 integration, see the blog post, [An early look at Cortana integration with Office 365](http://go.microsoft.com/fwlink/p/?LinkId=717379).
 
-## Set up Cortana using Group Policy and MDM policies
+## <a href="" id="set-up-cortana-using-gp-and-mdm"></a>Set up Cortana using Group Policy and MDM policies
 
 
 Set up and manage Cortana by using the following Group Policy and mobile device management (MDM) policies.
@@ -169,7 +169,7 @@ Set up and manage Cortana by using the following Group Policy and mobile device
 
 -   For specific info about how to set, manage, and use each of these MDM policies to configure Cortana in your enterprise, see the [Policy CSP](http://go.microsoft.com/fwlink/p/?LinkId=717380) topic, located in the configuration service provider reference topics. For specific info about how to set, manage, and use each of these Group Policies to configure Cortana in your enterprise, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/p/?LinkId=717381).
 
-## Cortana and Power BI
+## <a href="" id="cortana-and-bi-power"></a>Cortana and Power BI
 
 
 Integration between Cortana and Power BI shows how Cortana can work with custom business analytics solutions to enable you to get answers directly from your key business data, including introducing new features that let you create custom Cortana answers using the full capabilities of Power BI Desktop.
@@ -178,6 +178,19 @@ Integration between Cortana and Power BI shows how Cortana can work with custom
 
 -   For specific info about how to start using Power BI and Cortana integration, how to customize your data results, and how to use the “Hey Cortana” functionality, see the [Power BI: Announcing Power BI integration with Cortana and new ways to quickly find insights in your data](http://go.microsoft.com/fwlink/p/?LinkId=717382) blog.
 
+## Cortana and Microsoft Dynamics CRM
+
+
+Cortana integration is a Preview feature that's available for your test or dev environment, starting with the CRM Online 2016 Update. If you decide to use this Preview feature, you'll need to turn in on and accept the license terms. After that, salespeople will get proactive insights from Cortana on important CRM activities, including sales leads, accounts, and opportunities; presenting the most relevant info at any given time.
+
+**More info:**
+
+-   For more info about Preview features, see [What are Preview features and how do I enable them?](http://go.microsoft.com/fwlink/p/?LinkId=746817).
+
+-   For more info about Cortana, see [What is Cortana?](http://go.microsoft.com/fwlink/p/?LinkId=746818).
+
+-   For more info about CRM integration, how to turn on Cortana, and how to provide feedback, see [Preview feature: Set up Cortana integration](http://go.microsoft.com/fwlink/?LinkId=746819).
+
 ## Cortana and privacy
 
 
diff --git a/windows/manage/manage-privacy-for-windows-10-in-your-company.md b/windows/manage/manage-privacy-for-windows-10-in-your-company.md
index b7049761c4..9561569ca2 100644
--- a/windows/manage/manage-privacy-for-windows-10-in-your-company.md
+++ b/windows/manage/manage-privacy-for-windows-10-in-your-company.md
@@ -1,142 +1,139 @@
 ---
-title: Configure telemetry and other settings in your organization (Windows 10)
-description: Learn about the telemetry that Microsoft gathers, the network connections that Windows components make to Microsoft, and also the privacy settings that affect data that is shared with either Microsoft or apps and how they can be managed by an IT Pro.
+title: Disconnect from Microsoft and configure privacy settings in your organization (Windows 10)
+description: If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider.If you’re looking for content on what each telemetry level means and how to configure it in your organization, see Configure telemetry in your organization.
 ms.assetid: ACCEB0DD-BC6F-41B1-B359-140B242183D9
+keywords: ["privacy"]
 ms.prod: W10
 ms.mktglfcycl: manage
 ms.sitesec: library
 author: jdeckerMS
 ---
 
-# Configure telemetry and other settings in your organization
+# Disconnect from Microsoft and configure privacy settings in your organization
 
 
 **Applies to**
 
 -   Windows 10
 
-Learn about the telemetry that Microsoft gathers, the network connections that Windows components make to Microsoft, and also the privacy settings that affect data that is shared with either Microsoft or apps and how they can be managed by an IT Pro.
+If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider.
 
-If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider. You can configure telemetry at the lowest level for your edition of Windows, and also evaluate which other connections Windows makes to Microsoft services you want to turn off in your environment from the list in this article.
+If you’re looking for content on what each telemetry level means and how to configure it in your organization, see [Configure telemetry in your organization](configure-telemetry-in-your-organization.md).
 
-**Note**  Telemetry is a term that means different things to different people and organizations. For the purpose of this article, we discuss telemetry as system data that is uploaded by the Connected User Experience and Telemetry component. The telemetry data is used to keep Windows devices secure, and to help Microsoft improve the quality of Windows and Microsoft services. We discuss separately the network connections that Windows features and components make directly to Microsoft Services. It is used to provide a service to the user as part of Windows.
+Some of the network connections discussed in this article can be managed in Windows 10 Mobile, Windows 10 Mobile Enterprise, and the July release of Windows 10. However, you must use Windows 10 Enterprise, version 1511 or Windows 10 Education, version 1511 to manage them all.
 
- 
+In Windows 10 Enterprise, version 1511 or Windows 10 Education, version 1511, you can configure telemetry at the [Security level](configure-telemetry-in-your-organization.md#security-level), turn off Windows Defender telemetry and MSRT reporting, and turn off all other connections to Microsoft services as described in this article to prevent Windows from sending any data to Microsoft. We strongly recommend against this, as this data helps us deliver a secure, reliable, and more delightful personalized experience.
 
-Some of the network connections discussed in this article can be managed in Windows 10 Mobile, Windows 10 Mobile Enterprise, and the July release of Windows 10. However, you must use Windows 10 Enterprise, Version 1511 or Windows 10 Education, Version 1511 to manage them all.
-
-In Windows 10 Enterprise, Version 1511 or Windows 10 Education, Version 1511, you can configure telemetry at the Security level, turn off Windows Defender telemetry and MSRT reporting, and turn off all other connections to Microsoft services as described in this article to prevent Windows from sending any data to Microsoft. We strongly recommend against this, as this data helps us deliver a secure, reliable, and more delightful personalized experience.
+The settings in this article assume you are using Windows 10, version 1511 (currently available in the Current Branch and Current Branch for Business). They will also be included in the next update for the Long Term Servicing Branch.
 
 We are always working on improving Windows 10 for our customers. We invite IT pros to join the [Windows Insider Program](http://insider.windows.com) to give us feedback on what we can do to make Windows 10 work better for your organization.
 
 Here's what's covered in this article:
 
--   [Info management settings](#bkmk-othersettings)
+-   [1. Cortana](#cortana)
 
-    -   [1. Cortana](#1-cortana)
+    -   [1.1 Cortana Group Policies](#cortana-group-policies)
 
-        -   [1.1 Cortana Group Policies](#bkmk-cortana-gp)
+    -   [1.2 Cortana MDM policies](#cortana-mdm-policies)
 
-        -   [1.2 Cortana MDM policies](#bkmk-cortana-mdm)
+    -   [1.3 Cortana Windows Provisioning](#cortana-windows-provisioning)
 
-        -   [1.3 Cortana Windows Provisioning](#bkmk-cortana-prov)
+-   [2. Device metadata retrieval](#device-metadata-retrieval)
 
-    -   [2. Device metadata retrieval](#bkmk-devinst)
+-   [3. Insider Preview builds](#insider-preview-builds)
 
-    -   [3. Insider Preview builds](#bkmk-previewbuilds)
+-   [4. Internet Explorer](#internet-explorer)
 
-    -   [4. Internet Explorer](#bkmk-ie)
+    -   [4.1 Internet Explorer Group Policies](#internet-explorer-group-policies)
 
-        -   [4.1 Internet Explorer Group Policies](#bkmk-ie-gp)
+    -   [4.2 ActiveX control blocking](#internet-explorer-activex-control-blocking)
 
-        -   [4.2 ActiveX control blocking](#bkmk-ie-activex)
+-   [5. Mail synchronization](#mail-synchronization)
 
-    -   [5. Mail synchronization](#bkmk-mailsync)
+-   [6. Microsoft Edge](#microsoft-edge)
 
-    -   [6. Microsoft Edge](#bkmk-edge)
+    -   [6.1 Microsoft Edge Group Policies](#microsoft-edge-group-policies)
 
-        -   [6.1 Microsoft Edge Group Policies](#bkmk-edgegp)
+    -   [6.2 Microsoft Edge MDM policies](#microsoft-edge-mdm-policies)
 
-        -   [6.2 Microsoft Edge MDM policies](#bkmk-edge-mdm)
+    -   [6.3 Microsoft Edge Windows Provisioning](#microsoft-edge-windows-provisioning)
 
-        -   [6.3 Microsoft Edge Windows Provisioning](#bkmk-edge-prov)
+-   [7. Network Connection Status Indicator](#network-connection-status-indicator)
 
-    -   [7. Network Connection Status Indicator](#bkmk-ncsi)
+-   [8. Offline maps](#offline-maps)
 
-    -   [8. Offline maps](#bkmk-offlinemaps)
+-   [9. OneDrive](#onedrive)
 
-    -   [9. OneDrive](#bkmk-onedrive)
+-   [10. Preinstalled apps](#preinstalled-apps)
 
-    -   [10. Preinstalled apps](#bkmk-preinstalledapps)
+-   [11. Settings &gt; Privacy](#settings--privacy)
 
-    -   [11. Settings &gt; Privacy](#bkmk-settingssection)
+    -   [11.1 General](#general)
 
-        -   [11.1 General](#bkmk-general)
+    -   [11.2 Location](#location)
 
-        -   [11.2 Location](#bkmk-priv-location)
+    -   [11.3 Camera](#camera)
 
-        -   [11.3 Camera](#bkmk-priv-camera)
+    -   [11.4 Microphone](#microphone)
 
-        -   [11.4 Microphone](#bkmk-priv-microphone)
+    -   [11.5 Speech, inking, & typing](#speech-inking--typing)
 
-        -   [11.5 Speech, inking, & typing](#bkmk-priv-speech)
+    -   [11.6 Account info](#account-info)
 
-        -   [11.6 Account info](#bkmk-priv-accounts)
+    -   [11.7 Contacts](#contacts)
 
-        -   [11.7 Contacts](#bkmk-priv-contacts)
+    -   [11.8 Calendar](#calendar)
 
-        -   [11.8 Calendar](#bkmk-priv-calendar)
+    -   [11.9 Call history](#settings-call-history)
 
-        -   [11.9 Call history](#bkmk-priv-callhistory)
+    -   [11.10 Email](#settings-email)
 
-        -   [11.10 Email](#bkmk-priv-email)
+    -   [11.11 Messaging](#settings-messaging)
 
-        -   [11.11 Messaging](#bkmk-priv-messaging)
+    -   [11.12 Radios](#settings-radios)
 
-        -   [11.12 Radios](#bkmk-priv-radios)
+    -   [11.13 Other devices](#settings-other-devices)
 
-        -   [11.13 Other devices](#bkmk-priv-other-devices)
+    -   [11.14 Feedback & diagnostics](#settings-feedback)
 
-        -   [11.14 Feedback & diagnostics](#bkmk-priv-feedback)
+    -   [11.15 Background apps](#settings-background-apps)
 
-        -   [11.15 Background apps](#bkmk-priv-background)
+-   [12. Software Protection Platform](#software-protection-platform)
 
-    -   [12. Software Protection Platform](#bkmk-spp)
+-   [13. Sync your settings](#sync-your-settings)
 
-    -   [13. Sync your settings](#bkmk-syncsettings)
+-   [14. Teredo](#teredo)
 
-    -   [14. Teredo](#bkmk-teredo)
+-   [15. Wi-Fi Sense](#wi-fi-sense)
 
-    -   [15. Wi-Fi Sense](#bkmk-wifisense)
+-   [16. Windows Defender](#windows-defender)
 
-    -   [16. Windows Defender](#bkmk-defender)
+-   [17. Windows Media Player](#windows-media-player)
 
-    -   [17. Windows Media Player](#bkmk-wmp)
+-   [18. Windows spotlight](#windows-spotlight)
 
-    -   [18. Windows spotlight](#bkmk-spotlight)
+-   [19. Windows Store](#windows-store)
 
-    -   [19. Windows Store](#bkmk-windowsstore)
+-   [20. Windows Update Delivery Optimization](#windows-update-delivery-optimization)
 
-    -   [20 Windows Update Delivery Optimization](#bkmk-updates)
+    -   [20.1 Settings &gt; Update & security](#settings--update-security)
 
-        -   [20.1 Settings &gt; Update & security](#bkmk-wudo-ui)
+    -   [20.2 Delivery Optimization Group Policies](#delivery-optimization-group-policies)
 
-        -   [20.2 Delivery Optimization Group Policies](#bkmk-wudo-gp)
+    -   [20.3 Delivery Optimization MDM policies](#delivery-optimization-mdm-policies)
 
-        -   [20.3 Delivery Optimization MDM policies](#bkmk-wudo-mdm)
+    -   [20.4 Delivery Optimization Windows Provisioning](#delivery-optimization-windows-provisioning)
 
-        -   [20.4 Delivery Optimization Windows Provisioning](#bkmk-wudo-prov)
+-   [21. Windows Update](#windows-update)
 
-    -   [21. Windows Update](#bkmk-wu)
+See the following table for a summary of the settings. For more info, see its corresponding section.
 
--   [Manage your telemetry settings](#bkmk-utc)
+![](images/settings-table.png)
 
--   [How telemetry works](#bkmk-moreutc)
-
-## What's new in Windows 10, Version 1511
+## What's new in Windows 10, version 1511
 
 
-Here's a list of changes that were made to this article for Windows 10, Version 1511:
+Here's a list of changes that were made to this article for Windows 10, version 1511:
 
 -   Added the following new sections:
 
@@ -186,64 +183,12 @@ Here's a list of changes that were made to this article for Windows 10, Version
 
 -   Changed the Windows Update section to apply system-wide settings, and not just per user.
 
-## <a href="" id="bkmk-othersettings"></a>Info management settings
+## <a href="" id="cortana"></a>1. Cortana
 
 
-This section lists the components that make network connections to Microsoft services automatically. You can configure these settings to control the data that is sent to Microsoft. To prevent Windows from sending any data to Microsoft, configure telemetry at the Security level, turn off Windows Defender telemetry and MSRT reporting, and turn off all of these connections. We strongly recommend against this, as this data helps us deliver a secure, reliable, and more delightful personalized experience.
-
-The settings in this section assume you are using Windows 10, Version 1511 (currently available in the Current Branch and Current Branch for Business). They will also be included in the next update for the Long Term Servicing Branch.
-
--   [1. Cortana](#bkmk-cortana)
-
--   [2. Device metadata retrieval](#bkmk-devinst)
-
--   [3. Insider Preview builds](#bkmk-previewbuilds)
-
--   [4. Internet Explorer](#bkmk-ie)
-
--   [5. Mail synchronization](#bkmk-mailsync)
-
--   [6. Microsoft Edge](#bkmk-edge)
-
--   [7. Network Connection Status Indicator](#bkmk-ncsi)
-
--   [8. Offline maps](#bkmk-offlinemaps)
-
--   [9. OneDrive](#bkmk-onedrive)
-
--   [10. Preinstalled apps](#bkmk-preinstalledapps)
-
--   [11. Settings &gt; Privacy](#bkmk-settingssection)
-
--   [12. Software Protection Platform](#bkmk-spp)
-
--   [13. Sync your settings](#bkmk-syncsettings)
-
--   [14. Teredo](#bkmk-teredo)
-
--   [15. Wi-Fi Sense](#bkmk-wifisense)
-
--   [16. Windows Defender](#bkmk-defender)
-
--   [17. Windows Media Player](#bkmk-wmp)
-
--   [18. Windows spotlight](#bkmk-spotlight)
-
--   [19. Windows Store](#bkmk-windowsstore)
-
--   [20. Windows Update](#bkmk-wu)
-
--   [21. Windows Update Delivery Optimization](#bkmk-updates)
-
-See the following table for a summary of the management settings. For more info, see its corresponding section.
-
-![](images/priv-settings-table-1511.png)
-
-### 1. Cortana
-
 Use either Group Policy or MDM policies to manage settings for Cortana. For more info, see [Cortana, Search, and privacy: FAQ]( http://go.microsoft.com/fwlink/p/?LinkId=730683).
 
-### <a href="" id="bkmk-cortana-gp"></a>1.1 Cortana Group Policies
+### <a href="" id="cortana-group-policies"></a>1.1 Cortana Group Policies
 
 Find the Cortana Group Policy objects under **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Search**.
 
@@ -319,7 +264,7 @@ If your organization tests network traffic, you should not use Fiddler to test W
 
  
 
-### <a href="" id="bkmk-cortana-mdm"></a>1.2 Cortana MDM policies
+### <a href="" id="cortana-mdm-policies"></a>1.2 Cortana MDM policies
 
 The following Cortana MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
 
@@ -350,15 +295,17 @@ The following Cortana MDM policies are available in the [Policy CSP](http://msdn
 
  
 
-### <a href="" id="bkmk-cortana-prov"></a>1.3 Cortana Windows Provisioning
+### <a href="" id="cortana-windows-provisioning"></a>1.3 Cortana Windows Provisioning
 
 To use Windows Imaging and Configuration Designer (ICD) to create a provisioning package with the settings for these policies, go to **Runtime settings** &gt; **Policies** to find **Experience** &gt; **AllowCortana** and **Search** &gt; **AllowSearchToUseLocation**.
 
-### <a href="" id="bkmk-devinst"></a>2. Device metadata retrieval
+## <a href="" id="device-metadata-retrieval"></a>2. Device metadata retrieval
+
 
 To prevent Windows from retrieving device metadata from the Internet, apply the Group Policy: **Computer Configuration** &gt; **Administrative Templates** &gt; **System** &gt; **Device Installation** &gt; **Prevent device metadata retrieval from the Internet**.
 
-### <a href="" id="bkmk-previewbuilds"></a>3. Insider Preview builds
+## <a href="" id="insider-preview-builds"></a>3. Insider Preview builds
+
 
 To turn off Insider Preview builds if you're running a released version of Windows 10. If you're running a preview version of Windows 10, you must roll back to a released version before you can turn off Insider Preview builds.
 
@@ -388,11 +335,12 @@ To turn off Insider Preview builds if you're running a released version of Windo
 
     -   **2**. (default) Not configured. Users can make their devices available for download and installing preview software.
 
-### <a href="" id="bkmk-ie"></a>4. Internet Explorer
+## <a href="" id="internet-explorer"></a>4. Internet Explorer
+
 
 Use Group Policy to manage settings for Internet Explorer.
 
-### <a href="" id="bkmk-ie-gp"></a>4.1 Internet Explorer Group Policies
+### <a href="" id="internet-explorer-group-policies"></a>4.1 Internet Explorer Group Policies
 
 Find the Internet Explorer Group Policy objects under **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Internet Explorer**.
 
@@ -440,13 +388,14 @@ Find the Internet Explorer Group Policy objects under **Computer Configuration**
 
  
 
-### <a href="" id="bkmk-ie-activex"></a>4.2 ActiveX control blocking
+### <a href="" id="internet-explorer-activex-control-blocking"></a>4.2 ActiveX control blocking
 
 ActiveX control blocking periodically downloads a new list of out-of-date ActiveX controls that should be blocked. You can turn this off by changing the REG\_DWORD registry setting **HKEY\_CURRENT\_USER\\Software\\Microsoft\\Internet Explorer\\VersionManager\\DownloadVersionList** to 0 (zero).
 
 For more info, see [Out-of-date ActiveX control blocking](http://technet.microsoft.com/library/dn761713.aspx).
 
-### <a href="" id="bkmk-mailsync"></a>5. Mail synchronization
+## <a href="" id="mail-synchronization"></a>5. Mail synchronization
+
 
 To turn off mail synchronization for Microsoft Accounts that are configured on a device:
 
@@ -464,16 +413,17 @@ To turn off the Windows Mail app:
 
 -   Apply the Group Policy: **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Windows Mail** &gt; **Turn off Windows Mail application**
 
-### <a href="" id="bkmk-edge"></a>6. Microsoft Edge
+## <a href="" id="microsoft-edge"></a>6. Microsoft Edge
+
 
 Use either Group Policy or MDM policies to manage settings for Microsoft Edge. For more info, see [Microsoft Edge and privacy: FAQ](http://go.microsoft.com/fwlink/p/?LinkId=730682).
 
-### <a href="" id="bkmk-edgegp"></a>6.1 Microsoft Edge Group Policies
+### <a href="" id="microsoft-edge-group-policies"></a>6.1 Microsoft Edge Group Policies
 
 Find the Microsoft Edge Group Policy objects under **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Microsoft Edge**.
 
 **Note**  
-The Microsoft Edge Group Policy names were changed in Windows 10, Version 1511. The table below reflects those changes.
+The Microsoft Edge Group Policy names were changed in Windows 10, version 1511. The table below reflects those changes.
 
  
 
@@ -529,7 +479,7 @@ The Microsoft Edge Group Policy names were changed in Windows 10, Version 1511.
 
  
 
-### <a href="" id="bkmk-edge-mdm"></a>6.2 Microsoft Edge MDM policies
+### <a href="" id="microsoft-edge-mdm-policies"></a>6.2 Microsoft Edge MDM policies
 
 The following Microsoft Edge MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
 
@@ -575,13 +525,14 @@ The following Microsoft Edge MDM policies are available in the [Policy CSP](http
 
  
 
-### <a href="" id="bkmk-edge-prov"></a>6.3 Microsoft Edge Windows Provisioning
+### <a href="" id="microsoft-edge-windows-provisioning"></a>6.3 Microsoft Edge Windows Provisioning
 
 Use Windows ICD to create a provisioning package with the settings for these policies, go to **Runtime settings** &gt; **Policies**.
 
 For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](http://technet.microsoft.com/library/mt270204.aspx).
 
-### <a href="" id="bkmk-ncsi"></a>7. Network Connection Status Indicator
+## <a href="" id="network-connection-status-indicator"></a>7. Network Connection Status Indicator
+
 
 Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to http://www.msftncsi.com to determine if the device can communicate with the Internet. For more info about NCIS, see [The Network Connection Status Icon](http://blogs.technet.com/b/networking/archive/2012/12/20/the-network-connection-status-icon.aspx).
 
@@ -589,7 +540,8 @@ You can turn off NCSI through Group Policy:
 
 -   Enable the Group Policy: **Computer Configuration** &gt; **Administrative Templates** &gt; **System** &gt; **Internet Communication Management** &gt; **Internet Communication Settings** &gt; **Turn off Windows Network Connectivity Status Indicator active tests**
 
-### <a href="" id="bkmk-offlinemaps"></a>8. Offline maps
+## <a href="" id="offline-maps"></a>8. Offline maps
+
 
 You can turn off the ability to download and update offline maps.
 
@@ -599,13 +551,15 @@ You can turn off the ability to download and update offline maps.
 
 -   Apply the Group Policy: **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Maps** &gt; **Turn off Automatic Download and Update of Map Data**
 
-### <a href="" id="bkmk-onedrive"></a>9. OneDrive
+## <a href="" id="onedrive"></a>9. OneDrive
+
 
 To turn off OneDrive in your organization:
 
 -   Apply the Group Policy: **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **OneDrive** &gt; **Prevent the usage of OneDrive for file storage**
 
-### <a href="" id="bkmk-preinstalledapps"></a>10. Preinstalled apps
+## <a href="" id="preinstalled-apps"></a>10. Preinstalled apps
+
 
 Some preinstalled apps get content before they are opened to ensure a great experience. You can remove these using the steps in this section.
 
@@ -717,41 +671,12 @@ To remove the Get Skype app:
 
     Remove the app for the current user. From an elevated command prompt, run the following Windows PowerShell command: **Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage**
 
-### <a href="" id="bkmk-settingssection"></a>11. Settings &gt; Privacy
+## <a href="" id="settings--privacy"></a>11. Settings &gt; Privacy
+
 
 Use Settings &gt; Privacy to configure some settings that may be important to your organization. Except for the Feedback & Diagnostics page, these settings must be configured for every user account that signs into the PC.
 
--   [11.1 General](#bkmk-general)
-
--   [11.2 Location](#bkmk-priv-location)
-
--   [11.3 Camera](#bkmk-priv-camera)
-
--   [11.4 Microphone](#bkmk-priv-microphone)
-
--   [11.5 Speech, inking, & typing](#bkmk-priv-speech)
-
--   [11.6 Account info](#bkmk-priv-accounts)
-
--   [11.7 Contacts](#bkmk-priv-contacts)
-
--   [11.8 Calendar](#bkmk-priv-calendar)
-
--   [11.9 Call history](#bkmk-priv-callhistory)
-
--   [11.10 Email](#bkmk-priv-email)
-
--   [11.11 Messaging](#bkmk-priv-messaging)
-
--   [11.12 Radios](#bkmk-priv-radios)
-
--   [11.13 Other devices](#bkmk-priv-other-devices)
-
--   [11.14 Feedback & diagnostics](#bkmk-priv-feedback)
-
--   [11.15 Background apps](#bkmk-priv-background)
-
-### <a href="" id="bkmk-priv-general"></a>11.1 General
+### <a href="" id="general"></a>11.1 General
 
 **General** includes options that don't fall into other areas.
 
@@ -823,7 +748,7 @@ To turn off **Let websites provide locally relevant content by accessing my lang
 
 -   Create a new REG\_DWORD registry setting called **HttpAcceptLanguageOptOut** in **HKEY\_CURRENT\_USER\\Control Panel\\International\\User Profile**, with a value of 1.
 
-### <a href="" id="bkmk-priv-location"></a>11.2 Location
+### <a href="" id="location"></a>11.2 Location
 
 In the **Location** area, you choose whether devices have access to location-specific sensors and which apps have access to the device's location.
 
@@ -876,7 +801,7 @@ To turn off **Choose apps that can use your location**:
 
 -   Turn off each app using the UI.
 
-### <a href="" id="bkmk-priv-camera"></a>11.3 Camera
+### <a href="" id="camera"></a>11.3 Camera
 
 In the **Camera** area, you can choose which apps can access a device's camera.
 
@@ -915,7 +840,7 @@ To turn off **Choose apps that can use your camera**:
 
 -   Turn off the feature in the UI for each app.
 
-### <a href="" id="bkmk-priv-microphone"></a>11.4 Microphone
+### <a href="" id="microphone"></a>11.4 Microphone
 
 In the **Microphone** area, you can choose which apps can access a device's microphone.
 
@@ -933,7 +858,7 @@ To turn off **Choose apps that can use your microphone**:
 
 -   Turn off the feature in the UI for each app.
 
-### <a href="" id="bkmk-priv-speech"></a>11.5 Speech, inking, & typing
+### <a href="" id="speech-inking--typing"></a>11.5 Speech, inking, & typing
 
 In the **Speech, Inking, & Typing** area, you can let Windows and Cortana better understand your employee's voice and written input by sampling their voice and writing, and by comparing verbal and written input to contact names and calendar entrees.
 
@@ -958,7 +883,7 @@ To turn off the functionality:
 
     Create a REG\_DWORD registry setting called **HarvestContacts** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\InputPersonalization\\TrainedDataStore**, with a value of 0 (zero).
 
-### <a href="" id="bkmk-priv-accounts"></a>11.6 Account info
+### <a href="" id="account-info"></a>11.6 Account info
 
 In the **Account Info** area, you can choose which apps can access your name, picture, and other account info.
 
@@ -976,7 +901,7 @@ To turn off **Choose the apps that can access your account info**:
 
 -   Turn off the feature in the UI for each app.
 
-### <a href="" id="bkmk-priv-contacts"></a>11.7 Contacts
+### <a href="" id="contacts"></a>11.7 Contacts
 
 In the **Contacts** area, you can choose which apps can access an employee's contacts list.
 
@@ -990,7 +915,7 @@ To turn off **Choose apps that can access contacts**:
 
     -   Set the **Select a setting** box to **Force Deny**.
 
-### <a href="" id="bkmk-priv-calendar"></a>11.8 Calendar
+### <a href="" id="calendar"></a>11.8 Calendar
 
 In the **Calendar** area, you can choose which apps have access to an employee's calendar.
 
@@ -1008,7 +933,7 @@ To turn off **Choose apps that can access calendar**:
 
 -   Turn off the feature in the UI for each app.
 
-### <a href="" id="bkmk-priv-callhistory"></a>11.9 Call history
+### <a href="" id="call-history"></a>11.9 Call history
 
 In the **Call history** area, you can choose which apps have access to an employee's call history.
 
@@ -1022,7 +947,7 @@ To turn off **Let apps access my call history**:
 
     -   Set the **Select a setting** box to **Force Deny**.
 
-### <a href="" id="bkmk-priv-email"></a>11.10 Email
+### <a href="" id="email"></a>11.10 Email
 
 In the **Email** area, you can choose which apps have can access and send email.
 
@@ -1036,7 +961,7 @@ To turn off **Let apps access and send email**:
 
     -   Set the **Select a setting** box to **Force Deny**.
 
-### <a href="" id="bkmk-priv-messaging"></a>11.11 Messaging
+### <a href="" id="messaging"></a>11.11 Messaging
 
 In the **Messaging** area, you can choose which apps can read or send messages.
 
@@ -1054,7 +979,7 @@ To turn off **Choose apps that can read or send messages**:
 
 -   Turn off the feature in the UI for each app.
 
-### <a href="" id="bkmk-priv-radios"></a>11.12 Radios
+### <a href="" id="radios"></a>11.12 Radios
 
 In the **Radios** area, you can choose which apps can turn a device's radio on or off.
 
@@ -1072,7 +997,7 @@ To turn off **Choose apps that can control radios**:
 
 -   Turn off the feature in the UI for each app.
 
-### <a href="" id="bkmk-priv-other-devices"></a>11.13 Other devices
+### <a href="" id="other-devices"></a>11.13 Other devices
 
 In the **Other Devices** area, you can choose whether devices that aren't paired to PCs, such as an Xbox One, can share and sync info.
 
@@ -1090,7 +1015,7 @@ To turn off **Let your apps use your trusted devices (hardware you've already co
 
     -   Set the **Select a setting** box to **Force Deny**.
 
-### <a href="" id="bkmk-priv-feedback"></a>11.14 Feedback & diagnostics
+### <a href="" id="feedback--diagnostics"></a>11.14 Feedback & diagnostics
 
 In the **Feedback & Diagnostics** area, you can choose how often you're asked for feedback and how much diagnostic and usage information is sent to Microsoft.
 
@@ -1164,7 +1089,7 @@ To change the level of diagnostic and usage data sent when you **Send your devic
 
     -   **3**. Maps to the [Full](#bkmk-utc-full) level.
 
-### <a href="" id="bkmk-priv-background"></a>11.15 Background apps
+### <a href="" id="background-apps"></a>11.15 Background apps
 
 In the **Background Apps** area, you can choose which apps can run in the background.
 
@@ -1172,7 +1097,8 @@ To turn off **Let apps run in the background**:
 
 -   Turn off the feature in the UI for each app.
 
-### <a href="" id="bkmk-spp"></a>12. Software Protection Platform
+## <a href="" id="software-protection-platform"></a>12. Software Protection Platform
+
 
 Enterprise customers can manage their Windows activation status with volume licensing using an on-premise Key Management Server. You can opt out of sending KMS client activation data to Microsoft automatically by applying the following Group Policy:
 
@@ -1180,7 +1106,8 @@ Enterprise customers can manage their Windows activation status with volume lice
 
 The Windows activation status will be valid for a rolling period of 180 days with weekly activation status checks to the KMS.
 
-### <a href="" id="bkmk-syncsettings"></a>13. Sync your settings
+## <a href="" id="sync-your-settings"></a>13. Sync your settings
+
 
 You can control if your settings are synchronized:
 
@@ -1206,13 +1133,15 @@ To turn off Messaging cloud sync:
 
 -   Create a REG\_DWORD registry setting called **CloudServiceSyncEnabled** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Messaging**, with a value of 0 (zero).
 
-### <a href="" id="bkmk-teredo"></a>14. Teredo
+## <a href="" id="teredo"></a>14. Teredo
+
 
 You can disable Teredo by using the netsh.exe command. For more info on Teredo, see [Internet Protocol Version 6, Teredo, and Related Technologies](http://technet.microsoft.com/library/cc722030.aspx).
 
 -   From an elevated command prompt, run **netsh interface teredo set state disabled**
 
-### <a href="" id="bkmk-wifisense"></a>15. Wi-Fi Sense
+## <a href="" id="wi-fi-sense"></a>15. Wi-Fi Sense
+
 
 Wi-Fi Sense automatically connects devices to known hotspots and to the wireless networks the person’s contacts have shared with them.
 
@@ -1238,7 +1167,8 @@ To turn off **Connect to suggested open hotspots** and **Connect to networks sha
 
 When turned off, the Wi-Fi Sense settings still appear on the Wi-Fi Settings screen, but they’re non-functional and they can’t be controlled by the employee.
 
-### <a href="" id="bkmk-defender"></a>16. Windows Defender
+## <a href="" id="windows-defender"></a>16. Windows Defender
+
 
 You can opt of the Microsoft Antimalware Protection Service.
 
@@ -1274,7 +1204,8 @@ You can stop sending file samples back to Microsoft.
 
 You can also use the registry to turn off Malicious Software Reporting Tool telemetry by setting the REG\_DWORD value **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\MRT\\DontReportInfectionInformation** to 1.
 
-### <a href="" id="bkmk-wmp"></a>17. Windows Media Player
+## <a href="" id="windows-media-player"></a>17. Windows Media Player
+
 
 To remove Windows Media Player:
 
@@ -1284,7 +1215,8 @@ To remove Windows Media Player:
 
 -   Run the following DISM command from an elevated command prompt: **dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer**
 
-### <a href="" id="bkmk-spotlight"></a>18. Windows spotlight
+## <a href="" id="windows-spotlight"></a>18. Windows spotlight
+
 
 Windows spotlight provides different background images and text on the lock screen. You can control it by using the user interface or through Group Policy.
 
@@ -1315,13 +1247,15 @@ Windows spotlight provides different background images and text on the lock scre
 
 For more info, see [Windows spotlight on the lock screen](../whats-new/windows-spotlight.md).
 
-### <a href="" id="bkmk-windowsstore"></a>19. Windows Store
+## <a href="" id="windows-store"></a>19. Windows Store
+
 
 You can turn off the ability to launch apps from the Windows Store that were preinstalled or downloaded. This will also turn off automatic app updates, and the Windows Store will be disabled.
 
 -   Apply the Group Policy: **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Store** &gt; **Disable all apps from Windows Store**.
 
-### <a href="" id="bkmk-updates"></a>20. Windows Update Delivery Optimization
+## <a href="" id="windows-update-delivery-optmization"></a>20. Windows Update Delivery Optimization
+
 
 Windows Update Delivery Optimization lets you get Windows updates and Windows Store apps from sources in addition to Microsoft, which not only helps when you have a limited or unreliable Internet connection, but can also help you reduce the amount of bandwidth needed to keep all of your organization’s PCs up-to-date. If you have Delivery Optimization turned on, PCs on your network may send and receive updates and apps to other PCs on your local network, if you choose, or to PCs on the Internet.
 
@@ -1329,13 +1263,13 @@ By default, PCs running Windows 10 Enterprise and Windows 10 Education will on
 
 Use the UI, Group Policy, MDM policies, or Windows Provisioning to set up Delivery Optimization.
 
-### <a href="" id="bkmk-wudo-ui"></a>20.1 Settings &gt; Update & security
+### <a href="" id="settings--update--security"></a>20.1 Settings &gt; Update & security
 
 You can set up Delivery Optimization from the **Settings** UI.
 
 -   Go to **Settings** &gt; **Update & security** &gt; **Windows Update** &gt; **Advanced options** &gt; **Choose how updates are delivered**.
 
-### <a href="" id="bkmk-wudo-gp"></a>20.2 Delivery Optimization Group Policies
+### <a href="" id="delivery-optimization-group-policies"></a>20.2 Delivery Optimization Group Policies
 
 You can find the Delivery Optimization Group Policy objects under **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Delivery Optimization**.
 
@@ -1392,7 +1326,7 @@ You can find the Delivery Optimization Group Policy objects under **Computer Con
 
  
 
-### <a href="" id="bkmk-wudo-mdm"></a>20.3 Delivery Optimization MDM policies
+### <a href="" id="delivery-optimization-mdm-policies"></a>20.3 Delivery Optimization MDM policies
 
 The following Delivery Optimization MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
 
@@ -1449,7 +1383,7 @@ The following Delivery Optimization MDM policies are available in the [Policy CS
 
  
 
-### <a href="" id="bkmk-wudo-prov"></a>20.4 Delivery Optimization Windows Provisioning
+### <a href="" id="delivery-optimization-windows-provisioning"></a>20.4 Delivery Optimization Windows Provisioning
 
 If you don't have an MDM server in your enterprise, you can use Windows Provisioning to configure the Delivery Optimization policies
 
@@ -1465,7 +1399,8 @@ Use Windows ICD, included with the [Windows Assessment and Deployment Kit (Windo
 
 For more info about Delivery Optimization in general, see [Windows Update Delivery Optimization: FAQ](http://go.microsoft.com/fwlink/p/?LinkId=730684).
 
-### <a href="" id="bkmk-wu"></a>21. Windows Update
+## <a href="" id="windows-update"></a>21. Windows Update
+
 
 You can turn off Windows Update by setting the following registry entries:
 
@@ -1497,275 +1432,6 @@ You can turn off automatic updates by doing one of the following. This is not re
 
 To learn more, see [Device update management](http://msdn.microsoft.com/library/windows/hardware/dn957432.aspx) and [Configure Automatic Updates by using Group Policy](http://technet.microsoft.com/library/cc720539.aspx).
 
-## <a href="" id="bkmk-utc"></a>Manage your telemetry settings
-
-
-You can manage your telemetry settings using the management tools you’re already using, such as Group Policy, MDM, or Windows Provisioning. You can also manually change your settings using Registry Editor. Setting your telemetry levels through a management policy overrides any device-level settings.
-
-You can set your organization’s devices to use 1 of 4 telemetry levels:
-
--   [Security](#bkmk-utc-security) (only available on Windows 10 Enterprise, Windows 10 Education, and Windows 10 IoT Core (IoT Core) editions)
-
--   [Basic](#bkmk-utc-basic)
-
--   [Enhanced](#bkmk-utc-enhanced)
-
--   [Full](#bkmk-utc-full)
-
-For more info about these telemetry levels, see [Telemetry levels](#bkmk-telemetrylevels). In Windows 10 Enterprise, Windows 10 Education, and IoT Core, the default telemetry level is [Enhanced](#bkmk-utc-enhanced).
-
-**Important**  
-These telemetry levels only apply to Windows components and apps that use the Connected User Experience and Telemetry component. Non-Windows components, such as Microsoft Office or other 3rd-party apps, may communicate with their cloud services outside of these telemetry levels. App publishers must let people know about how they use their telemetry, ways to opt in or opt out, and they must separately document their privacy policies.
-
- 
-
-### <a href="" id="use-group-policy-to-set-the-telemetry-level"></a>Use Group Policy to set the telemetry level
-
-Use a Group Policy object to set your organization’s telemetry level.
-
-1.  From the Group Policy Management Console, go to **Computer Configuration** &gt; **Administrative Templates** &gt; **Windows Components** &gt; **Data Collection and Preview Builds**.
-
-2.  Double-click **Allow Telemetry**.
-
-3.  In the **Options** box, select the level that you want to configure, and then click **OK**.
-
-### <a href="" id="use-mdm-to-set-the-telemetry-level"></a>Use MDM to set the telemetry level
-
-Use the [Policy Configuration Service Provider (CSP)](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) to apply the System/AllowTelemetry MDM policy, using one of these telemetry values:
-
--   **0**. Maps to the [Security](#bkmk-utc-security) level.
-
--   **1**. Maps to the [Basic](#bkmk-utc-basic) level.
-
--   **2**. Maps to the [Enhanced](#bkmk-utc-enhanced) level.
-
--   **3**. Maps to the [Full](#bkmk-utc-full) level.
-
-### <a href="" id="use-windows-provisioning-to-set-the-telemetry-level"></a>Use Windows Provisioning to set the telemetry level
-
-Use Windows Provisioning and the Windows Imaging and Configuration Designer (Windows ICD) tool – part of the [Windows Assessment and Deployment Kit (Windows ADK) toolkit](http://go.microsoft.com/fwlink/p/?LinkId=526803) - to create a provisioning package and runtime setting that sets your organization’s telemetry level.
-
-After you create the provisioning package, you can email it to your employees, put it on a network share, or integrate the package directly into a custom image using Windows ICD.
-
-**To use Windows ICD to integrate your package into a custom image**
-
-1.  Open Windows ICD, and then click **New provisioning package**.
-
-2.  In the **Name** box, type a name for the provisioning package, and then click **Next**.
-
-3.  Click **Common to all Windows editions** &gt; **Next** &gt; **Finish**.
-
-4.  Go to **Runtime settings** &gt; **Policies** &gt; **System** &gt; **AllowTelemetry** to configure the policies. You can set it to one of the following:
-
-    -   **Disabled \[Enterprise SKU Only\]**. Maps to the [Security](#bkmk-utc-security) level.
-
-    -   **Basic**. Maps to the [Basic](#bkmk-utc-basic) level.
-
-    -   **Full**. Maps to the [Enhanced](#bkmk-utc-enhanced) level
-
-    -   **Diagnostic**. Maps to the [Full](#bkmk-utc-full) level.
-
-5.  After you've added all of your settings to the provisioning package, click **Export** &gt; **Provisioning package**.
-
-6.  On the **Describe the provisioning package** step, in the **Owner** box, click **IT Admin** &gt; **Next**.
-
-7.  On the **Select security details for the provisioning package** step, if you want to protect the package with a password, select the **Encrypt package** check box. If you'd like to sign the package with a certificate, select the **Sign package** check box and select the certificate to use. Click **Next**.
-
-8.  On the **Select where to save the provisioning package** step, if you want to save it somewhere other than the Windows ICD project folder, choose a new location, and then click **Next**.
-
-9.  On the **Build the provisioning package** step, click **Build**.
-
-### <a href="" id="use-registry-editor-to-set-the-telemetry-level"></a>Use Registry Editor to set the telemetry level
-
-Use Registry Editor to manually set the registry level on each device in your organization, or write a script to edit the registry.
-
-If a management policy already exists (from Group Policy, MDM, or Windows Provisioning), it will override this registry setting.
-
-1.  Open Registry Editor, and go to **HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection**.
-
-2.  Right-click **DataCollection**, click **New**, and then click **DWORD (32-bit) Value**.
-
-3.  Type **AllowTelemetry**, and then press ENTER.
-
-4.  Double-click **AllowTelemetry** and set the value to one of the following levels, and the click **OK**.
-
-    -   **0**. This setting maps to the [Security](#bkmk-utc-security) level.
-
-    -   **1**. This setting maps to the [Basic](#bkmk-utc-basic) level.
-
-    -   **2**. This setting maps to the [Enhanced](#bkmk-utc-enhanced) level
-
-    -   **3**. This setting maps to the [Full](#bkmk-utc-full) level.
-
-5.  Click **File** &gt; **Export**, and then save the file as a .reg file, such as **C:\\AllowTelemetry.reg**. You can run this file from a script on each device in your organization.
-
-### <a href="" id="additional-telemetry-controls"></a>Additional telemetry controls
-
-There are a few more settings that you can turn off that may send telemetry information:
-
--   To turn off Windows Update telemetry, you have two choices. Either turn off Windows Update, or set your devices to be managed by an on premises update server, such as [Windows Server Update Services (WSUS)](http://technet.microsoft.com/library/hh852345.aspx) or [System Center Configuration Manager](http://www.microsoft.com/server-cloud/products/system-center-2012-r2-configuration-manager/).
-
--   Turn off **Windows Defender Cloud-based Protection** and **Automatic sample submission** in **Settings** &gt; **Update & security** &gt; **Windows Defender**.
-
--   Manage the Malicious Software Removal Tool in your organization. For more info, see Microsoft KB article [891716](http://support.microsoft.com/kb/891716).
-
--   Turn off Linguistic Data Collection in **Settings** &gt; **Privacy**. At telemetry levels Enhanced and Full, Microsoft uses Linguistic Data Collection info to improve language model features such as autocomplete, spellcheck, suggestions, input pattern recognition, and dictionary. For more info, see the **Get to know me** setting in the [Speech, inking, & typing](#bkmk-priv-speech) section of this article and the **Send Microsoft info about how I write to help us improve typing and writing in the future** setting in the [General](#bkmk-priv-general) section of this article.
-
-    **Note**  
-    Microsoft doesn't intentionally gather sensitive information, such as credit card numbers, usernames and passwords, email addresses, or other similarly sensitive information for Linguistic Data Collection. We guard against such events by using technologies to identify and remove sensitive information before linguistic data is sent from the user's device. If we determine that sensitive information has been inadvertently received, we delete the information.
-
-     
-
-## <a href="" id="bkmk-moreutc"></a>How telemetry works
-
-
-Windows uses telemetry information to analyze and fix software problems. It also helps Microsoft improve its software and provide updates that enhance the security and reliability of devices within your organization.
-
-### <a href="" id="bkmk-telemetrylevels"></a>Telemetry levels
-
-This section explains the different telemetry levels in Windows 10. These levels are available on all desktop and mobile editions of Windows 10, with the exception of the Security level which is limited to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and IoT Core.
-
--   **Security**. Information that’s required to help keep Windows secure, including info about theConnected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. This level is available only on Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and IoT Core.
-
--   **Basic**. Basic device info, including: quality-related info, app compat, and info from the Security level.
-
--   **Enhanced** Additional insights, including: how Windows and Windows apps are used, how they perform, advanced reliability info, and info from both the Basic and the Security levels.
-
--   **Full**. All info necessary to identify and help to fix problems, plus info from the Security, Basic, and Enhanced levels.
-
-As a diagram:
-
-![](images/priv-telemetry-levels.png)
-
-### <a href="" id="bkmk-utc-security"></a>Security level
-
-The Security level gathers only telemetry info that’s required to keep Windows devices secure. This level is only available on Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and IoT Core editions.
-
-**Note**  
-If your organization relies on Windows Update for updates, you shouldn’t use the Security level. Because no Windows Update information is gathered at this level, Microsoft can’t tell whether an update successfully installed.
-
-You can continue to use Windows Server Update Services and System Center Configuration Manager while using the Security level.
-
- 
-
-Security level info includes:
-
--   **Connected User Experience and Telemetry component settings**. If data has been gathered and is queued to be sent, the Connected User Experience and Telemetry component downloads its settings file from Microsoft’s servers. The data collected by the client for this request includes OS information, device id (used to identify what specific device is requesting settings) and device class (for example, whether the device is server or desktop).
-
--   **Malicious Software Removal Tool (MSRT)** The MSRT infection report contains information, including device info and IP address.
-
-    **Note**  
-    You can turn off the MSRT infection report. No MSRT information is included if MSRT is not used. If Windows Update is turned off, MSRT will not be offered to users.
-
-     
-
--   **Windows Defender**. Windows Defender requires some information to function, including: anti-malware signatures, diagnostic information, User Account Control settings, Unified Extensible Firmware Interface (UEFI) settings, and IP address. To configure this, see [Windows Defender](#bkmk-defender).
-
-    **Note**  
-    This reporting can be turned off and no information is included if a customer is using third party antimalware software, or if Windows Defender is turned off.
-
-    Microsoft recommends that Windows Update, Windows Defender, and MSRT remain enabled unless the enterprise uses alternative solutions such as Windows Server Update Services, System Center Configuration Manager, or a third party antimalware solution. Windows Update, Windows Defender, and MSRT provide core Windows functionality such as driver and OS updates, including security updates; moreover, Window Defender requires updated anti-malware signatures in order to provide security functionality.
-
-     
-
-No user content, such as user files or communications, is gathered at the Security telemetry level, and we take steps to avoid gathering any information that directly identifies a company or user, such as name, email address, or account ID. However, in rare circumstances, MSRT information may unintentionally contain personal information. For instance, some malware may create entries in a computer’s registry that include information such as a username, causing it to be gathered. MSRT reporting is optional and can be turned off at any time.
-
-To set the telemetry level to Security, use a management policy (Group Policy or MDM) or by manually changing the setting in the registry. For more info, see the [Manage your telemetry settings](#bkmk-utc) section of this article.
-
-### <a href="" id="bkmk-utc-basic"></a>Basic level
-
-The Basic level gathers a limited set of info that’s critical for understanding the device and its configuration. This level also includes the Security level info. This level helps to identify problems that can occur on a particular device hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a particular driver version.
-
-Basic level info includes:
-
--   **Basic device info**. Helps provide an understanding about the various types of devices in the Windows 10 ecosystem, including:
-
-    -   Device attributes, such as camera resolution and display type
-
-    -   Internet Explorer version
-
-    -   Battery attributes, such as capacity and type
-
-    -   Networking attributes, such as mobile operator network and IMEI number
-
-    -   Processor and memory attributes, such as number of cores, speed, and firmware
-
-    -   Operating system attributes, such as Windows edition and IsVirtualDevice
-
-    -   Storage attributes, such as number of drives and memory size
-
--   **Connected User Experience and Telemetry component quality metrics**. Helps provide an understanding about how the Connected User Experience and Telemetry component is functioning, including uploaded events, dropped events, and the last upload time.
-
--   **Quality-related information**. Helps Microsoft develop a basic understanding of how a device and its operating system are performing. Some examples are the amount of time a connected standby device was able to fullsleep, the number of crashes or hangs, and application state change details, such as how much processor time and memory were used, and the total uptime for an app.
-
--   **App compat info**. Helps provide understanding about which apps are installed on a device and to help identify potential compatibility problems.
-
-    -   **General app info and app info for Internet Explorer add-ons**. Includes a list of apps and Internet Explorer add-ons that are installed on a device and whether these apps will work after an upgrade. This app info includes the app name, publisher, version, and basic details about which files have been blocked from usage.
-
-    -   **System info**. Helps provide understanding about whether a device meets the minimum requirements to upgrade to the next version of the operating system. System information includes the amount of memory, as well as info about the processor and BIOS.
-
-    -   **Accessory device info**. Includes a list of accessory devices, such as printers or external storage devices, that are connected to Windows PCs and whether these devices will function after upgrading to a new version of the operating system.
-
-    -   **Driver info**. Includes specific driver usage that’s meant to help figure out whether apps and devices will function after upgrading to a new version of the operating system. This info can help to determine blocking issues and then help Microsoft and our partners apply fixes and improvements.
-
--   **Store**. Provides info about how the Windows Store performs, including app downloads, installations, and updates. It also includes Windows Store launches, page views, suspend and resumes, and obtaining licenses.
-
-### <a href="" id="bkmk-utc-enhanced"></a>Enhanced level
-
-The Enhanced level gathers info about how Windows and apps are used and how they perform. This level also includes info from both the Basic and Security levels. This level helps to improve experiences by analyzing user interaction with the operating system and apps. Info from this level can be abstracted into patterns and trends that can help Microsoft determine future improvements.
-
-Enhanced level info includes:
-
--   **Operating system events**. Helps to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, and other components.
-
--   **Operating system app events**. A set of events resulting from Microsoft apps that were downloaded from the Store or pre-installed with Windows, including Photos, Mail, and Microsoft Edge.
-
--   **Device-specific events**. Contains info about events that are specific to certain devices, such as Surface Hub and Microsoft HoloLens. For example, Microsoft HoloLens sends Holographic Processing Unit (HPU)-related events.
-
-If the Connected User Experience and Telemetry component detects a problem that requires gathering more detailed instrumentation, then the Connected User Experience and Telemetry component will only gather info about the events associated with the specific issue, for no more than 2 weeks. Also, if the operating system or an app crashes or hangs, Microsoft will gather the memory contents of the faulting process only at the time of the crash or hang.
-
-### <a href="" id="bkmk-utc-full"></a>Full level
-
-The Full level gathers info necessary to identify and to help fix problems, following the approval process described below. This level also includes info from the Basic, Enhanced, and Security levels.
-
-Additionally, at this level, devices opted in to the Windows Insider Program will send events that can show Microsoft how pre-release binaries and features are performing. All devices in the Windows Insider Program are automatically set to this level.
-
-If a device experiences problems that are difficult to identify or repeat using Microsoft’s internal testing, additional info becomes necessary. This info can include any user content that might have triggered the problem and is gathered from a small sample of devices that have both opted into the Full telemetry level and have exhibited the problem.
-
-However, before more info is gathered, Microsoft’s privacy governance team, including privacy and other subject matter experts, must approve the diagnostics request made by a Microsoft engineer. If the request is approved, Microsoft engineers can use the following capabilities to get the information:
-
--   Ability to run a limited, pre-approved list of Microsoft certified diagnostic tools, such as msinfo32.exe, powercfg.exe, and dxdiag.exe.
-
--   Ability to get registry keys.
-
--   Ability to gather user content, such as documents, if they might have been the trigger for the issue.
-
-### <a href="" id="how-is-telemetry-information-handled-by-microsoft-"></a>How is telemetry information handled by Microsoft?
-
-### <a href="" id="collection"></a>Collection
-
-Information gathered by the Connected User Experience and Telemetry component complies with Microsoft’s security and privacy policies, as well as international laws and regulations. Only those who can demonstrate a valid business need can access the telemetry info.
-
-### <a href="" id="data-transfer"></a>Data Transfer
-
-All telemetry info is encrypted during transfer from the device to the Microsoft Data Management Service. Data is uploaded on a schedule that is sensitive to event priority, battery use, and network cost. Real-time events, such as gaming achievements, are always sent immediately. Normal events are not uploaded on metered networks. On a free network, normal events can be uploaded every 4 hours if on battery, or every 15 minutes if on A/C power. Diagnostic and crash data are only uploaded on A/C power and free networks.
-
-### <a href="" id="microsoft-data-management-service"></a>Microsoft Data Management Service
-
-The Microsoft Data Management Service routes information to internal cloud storage, where it's compiled into business reports for analysis and research. Sensitive info is stored in a separate data store that’s locked down to a small subset of Microsoft employees in the Windows Devices Group. The privacy governance team permits access only to people with a valid business justification. The Connected User Experiences and Telemetry component connects to the Microsoft Data Management service at v10.vortex-win.data.microsoft.com. The Connected User Experience and Telemetry component connects to settings-win.data.microsoft.com to collect its settings.
-
-### <a href="" id="usage"></a>Usage
-
-Information is used by teams within Microsoft to provide, improve, and personalize experiences, and for security, health, quality, and performance analysis.
-
-An example of personalization is to create individually tailored in-product messages.
-
-Microsoft doesn’t share organization-specific customer information with third parties, except at the customer’s direction or for the limited purposes described in the privacy statement. However, we do share business reports with partners that include aggregated, anonymous telemetry information. Decisions to share info are made by an internal team that includes privacy, legal, and data management professionals.
-
-### <a href="" id="retention"></a>Retention
-
-Microsoft believes in and practices information minimization, so we only gather the info we need, and we only store it for as long as it’s needed to provide a service or for analysis. Much of the info about how Windows and apps are functioning is deleted within 30 days. Other info may be retained longer, particularly if there is a regulatory requirement to do so. Info is typically gathered at a fractional sampling rate, which for some client services, can be as low as 1%.
-
  
 
  
diff --git a/windows/manage/manage-wi-fi-sense-in-your-company.md b/windows/manage/manage-wi-fi-sense-in-your-company.md
index 25fef38407..86ec3de588 100644
--- a/windows/manage/manage-wi-fi-sense-in-your-company.md
+++ b/windows/manage/manage-wi-fi-sense-in-your-company.md
@@ -26,7 +26,7 @@ Wi-Fi Sense isn’t available in all countries or regions.
 
  
 
-## How does Wi-Fi Sense work?
+## <a href="" id="how-does-wifi-sense-work"></a>How does Wi-Fi Sense work?
 
 
 Wi-Fi Sense connects your employees to the available Wi-Fi networks, including:
@@ -42,7 +42,7 @@ Employees can't share network info with their contacts for any company network u
 
  
 
-## How to manage Wi-Fi Sense in your company
+## <a href="" id="how-to-manage-wifi-sense-in-your-company"></a>How to manage Wi-Fi Sense in your company
 
 
 In a company environment, you will most likely deploy Windows 10 to your employees' PCs using your preferred deployment method and then manage their settings globally. With that in mind, you have a few options for managing how your employees will use Wi-Fi Sense.
@@ -52,7 +52,7 @@ Turning off Wi-Fi Sense also turns off all related features, including: connecti
 
  
 
-### Using Group Policy (available starting with Windows 10, Version 1511)
+### Using Group Policy (available starting with Windows 10, version 1511)
 
 You can manage your Wi-Fi Sense settings by using Group Policy and your Group Policy editor.
 
@@ -88,7 +88,7 @@ You can manage your Wi-Fi Sense settings by changing the Windows provisioning se
 
     Setting this value to **0** turns off Wi-Fi Sense and all Wi-Fi sense features. When turned off, the Wi-Fi Sense settings still appear on the **Wi-Fi Settings** screen, but can't be controlled by the employee and all of the Wi-Fi Sense features are turned off. For more info, see the Windows Provisioning settings reference topic, [WiFiSenseAllowed](http://go.microsoft.com/fwlink/p/?LinkId=620909).
 
-### Using Unattended Windows Setup settings
+### <a href="" id="using-the-unattended-windows-setup-settings"></a>Using Unattended Windows Setup settings
 
 If your company still uses Unattend, you can manage your Wi-Fi Sense settings by changing the Unattended Windows Setup setting, **WiFiSenseAllowed**.
 
@@ -98,7 +98,7 @@ If your company still uses Unattend, you can manage your Wi-Fi Sense settings by
 
     Setting this value to **0** turns off Wi-Fi Sense and all Wi-Fi sense features. When turned off, the Wi-Fi Sense settings still appear on the **Wi-Fi Settings** screen, but can't be controlled by the employee and all of the Wi-Fi Sense features are turned off. For more info, see the Unattended Windows Setup Reference topic, [WiFiSenseAllowed](http://go.microsoft.com/fwlink/p/?LinkId=620910).
 
-### How employees can change their own Wi-Fi Sense settings
+### <a href="" id="how-emps-can-change-their-own-wifi-sense-settings"></a>How employees can change their own Wi-Fi Sense settings
 
 If you don’t turn off the ability for your employees to use Wi-Fi Sense, they can turn the settings on locally by selecting **Settings &gt; Network & Internet &gt; Wi-Fi &gt; Manage Wi-Fi settings**, and then changing one or both of these settings under **Wi-Fi Sense**:
 
diff --git a/windows/manage/prerequisites-for-windows-store-for-business.md b/windows/manage/prerequisites-for-windows-store-for-business.md
index b469db817d..7a13825ca7 100644
--- a/windows/manage/prerequisites-for-windows-store-for-business.md
+++ b/windows/manage/prerequisites-for-windows-store-for-business.md
@@ -27,7 +27,7 @@ You'll need this software to work with Store for Business.
 
 -   IT Pros that are administering Store for Business need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, Microsoft Edge, or current versions of Chrome or Firefox.
 
--   Employees using apps from Store for Business need Windows 10, Version 1511 running on a PC or mobile device.
+-   Employees using apps from Store for Business need Windows 10, version 1511 running on a PC or mobile device.
 
 Microsoft Azure Active Directory (AD) accounts for your employees:
 
diff --git a/windows/manage/product-ids-in-windows-10-mobile.md b/windows/manage/product-ids-in-windows-10-mobile.md
index f5b92e0974..c2e97f611c 100644
--- a/windows/manage/product-ids-in-windows-10-mobile.md
+++ b/windows/manage/product-ids-in-windows-10-mobile.md
@@ -18,9 +18,9 @@ author: jdeckerMS
 
 **In this article**
 
--   [Apps included in Windows 10 Mobile](#apps_included_in_windows_10_mobile)
--   [Get product ID and AUMID for other apps](#get_product_id_and_aumid_for_other_apps)
--   [Related topics](#related_topics)
+-   [Apps included in Windows 10 Mobile](#apps-included-in-windows-10-mobile)
+-   [Get product ID and AUMID for other apps](#get-product-id-and-aumid-for-other-apps)
+-   [Related topics](#related-topics)
 
 You can use the product ID and Application User Model (AUMID) in Lockdown.xml to specify apps that will be available to the user.
 
diff --git a/windows/manage/reset-a-windows-10-mobile-device.md b/windows/manage/reset-a-windows-10-mobile-device.md
index ff42ffcf26..fa3b555b68 100644
--- a/windows/manage/reset-a-windows-10-mobile-device.md
+++ b/windows/manage/reset-a-windows-10-mobile-device.md
@@ -17,9 +17,9 @@ author: jdeckerMS
 
 **In this article**
 
--   [Reset using MDM](#reset_using_mdm)
--   [Reset using the UI](#_reset_using_the_ui)
--   [Reset using hardware buttons](#reset_using_hardware_buttons)
+-   [Reset using MDM](#reset-using-mdm)
+-   [Reset using the UI](#-reset-using-the-ui)
+-   [Reset using hardware buttons](#reset-using-hardware-buttons)
 
 There are two methods for resetting a Windows 10 Mobile device: factory reset and "wipe and persist" reset.
 
diff --git a/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md b/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md
index 5b8c07a56f..760a45164c 100644
--- a/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md
+++ b/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md
@@ -22,12 +22,12 @@ author: jdeckerMS
 
 **In this article**
 
--   [Other settings to lock down](#other_settings_to_lock_down)
--   [Assigned access method for Universal Windows apps](#assigned_access_method)
--   [Shell Launcher for Classic Windows applications](#local_user_policy)
--   [Related topics](#related_topics)
+-   [Other settings to lock down](#other-settings-to-lock-down)
+-   [Assigned access method for Universal Windows apps](#assigned-access-method)
+-   [Shell Launcher for Classic Windows applications](#local-user-policy)
+-   [Related topics](#related-topics)
 
-A single-use device is easy to set up in Windows 10 for desktop editions (Pro, Enterprise, and Education). For a kiosk device to run a Universal Windows app, use the **assigned access** feature. For a kiosk device (Windows 10 Enterprise or Education) to run a Classic Windows application, use **Shell Launcher** to set a custom user interface as the shell. To return the device to the regular shell, see [Sign out of assigned access](#sign_out_of_assigned_access).
+A single-use device is easy to set up in Windows 10 for desktop editions (Pro, Enterprise, and Education). For a kiosk device to run a Universal Windows app, use the **assigned access** feature. For a kiosk device (Windows 10 Enterprise or Education) to run a Classic Windows application, use **Shell Launcher** to set a custom user interface as the shell. To return the device to the regular shell, see [Sign out of assigned access](#sign-out-of-assigned-access).
 
 **Note**  
 A Universal Windows app is built on the Universal Windows Platform (UWP), which was first introduced in Windows 8 as the Windows Runtime. A Classic Windows application uses the Classic Windows Platform (CWP) (e.g., COM, Win32, WPF, WinForms, etc.) and is typically launched using an .EXE or .DLL file.
@@ -68,18 +68,18 @@ For a more secure kiosk experience, we recommend that you make the following con
 
      
 
-## Assigned access method for Universal Windows apps
+## <a href="" id="assigned-access-method"></a>Assigned access method for Universal Windows apps
 
 
 Using assigned access, Windows 10 runs the designated Universal Windows app above the lockscreen, so that the assigned access account has no access to any other functionality on the device. You have these choices for setting up assigned access:
 
--   [Use Settings on the PC](#set_up_assigned_access_in_pc_settings) - Windows 10 Pro, Enterprise, and Education
+-   [Use Settings on the PC](#set-up-assigned-access-in-pc-settings) - Windows 10 Pro, Enterprise, and Education
 
--   [Apply a mobile device management (MDM) policy](#set_up_assigned_access_in_mdm) - Windows 10 Enterprise and Education
+-   [Apply a mobile device management (MDM) policy](#set-up-assigned-access-in-mdm) - Windows 10 Enterprise and Education
 
 -   [Create a provisioning package using Windows Imaging and Configuration Designer (ICD)](#icd) - Windows 10 Enterprise and Education
 
--   [Run a PowerShell script](#set_up_assigned_access_using_windows_powershell) - Windows 10 Pro, Enterprise, and Education
+-   [Run a PowerShell script](#set-up-assigned-access-using-windows-powershell) - Windows 10 Pro, Enterprise, and Education
 
 ### Requirements
 
@@ -120,7 +120,7 @@ Assigned Access has one setting, KioskModeApp. In the KioskModeApp setting, you
 
 [See the technical reference for the Assigned Access configuration service provider.](http://go.microsoft.com/fwlink/p/?LinkId=626608)
 
-### Set up assigned access using Windows Imaging and Configuration Designer (ICD)
+### <a href="" id="icd"></a>Set up assigned access using Windows Imaging and Configuration Designer (ICD)
 
 Use the Windows Imaging and Configuration Designer (ICD) tool included in the Windows Assessment and Deployment Kit (ADK) for Windows 10 to create a provisioning package that configures a device as a kiosk. [Install the ADK.](http://go.microsoft.com/fwlink/p/?LinkId=526740)
 
@@ -249,7 +249,7 @@ If you press **Ctrl + Alt + Del** and do not sign in to another account, after a
 
 To change the default time for assigned access to resume, add *IdleTimeOut* (DWORD) and enter the value data as milliseconds in hexadecimal.
 
-## Shell Launcher for Classic Windows applications
+## <a href="" id="local-user-policy"></a>Shell Launcher for Classic Windows applications
 
 
 Using Shell Launcher, you can configure a kiosk device that runs a Classic Windows application as the user interface. The application that you specify replaces the default shell (explorer.exe) that usually runs when a user logs on.
@@ -380,7 +380,7 @@ Alternatively, you can turn on Shell Launcher using the Deployment Image Servici
 
 [Set up a kiosk for Windows 10 for mobile edition](set-up-a-kiosk-for-windows-10-for-mobile-edition.md)
 
-[Manage and update Windows 10](index.md)
+[Manage and update Windows 10]
 
  
 
diff --git a/windows/manage/set-up-a-kiosk-for-windows-10-for-mobile-edition.md b/windows/manage/set-up-a-kiosk-for-windows-10-for-mobile-edition.md
index 5009c67faf..e1ed1feb64 100644
--- a/windows/manage/set-up-a-kiosk-for-windows-10-for-mobile-edition.md
+++ b/windows/manage/set-up-a-kiosk-for-windows-10-for-mobile-edition.md
@@ -18,9 +18,9 @@ author: jdeckerMS
 
 **In this article**
 
--   [Apps Corner](#apps_corner)
--   [Enterprise Assigned Access](#enterprise_assigned_access)
--   [Related topics](#related_topics)
+-   [Apps Corner](#apps-corner)
+-   [Enterprise Assigned Access](#enterprise-assigned-access)
+-   [Related topics](#related-topics)
 
 A device in kiosk mode runs a specified app with no access to other device functions, menus, or settings. You configure a device running Windows 10 Mobile or Windows 10 Mobile Enterprise for kiosk mode by using the Apps Corner feature. You can also use the Enterprise Assigned Access configuration service provider (CSP) to configure a kiosk experience.
 
diff --git a/windows/manage/sign-up-for-windows-store-for-business.md b/windows/manage/sign-up-for-windows-store-for-business.md
index 90a852b957..0a57c72f72 100644
--- a/windows/manage/sign-up-for-windows-store-for-business.md
+++ b/windows/manage/sign-up-for-windows-store-for-business.md
@@ -27,17 +27,17 @@ Before signing up for the Store for Business, make sure you're the global admini
 
 1.  Go to [https://www.microsoft.com/business-store](http://go.microsoft.com/fwlink/p/?LinkId=691845), and click **Sign up**.
 
-    -   If you start the Store for Business sign up process, and don't have an Azure AD directory for your organization, we'll help you create one. For more info, see [Sign up for Azure AD accounts](#o365_welcome).
+    -   If you start the Store for Business sign up process, and don't have an Azure AD directory for your organization, we'll help you create one. For more info, see [Sign up for Azure AD accounts](#o365-welcome).
 
     <!-- -->
 
-    -   If you already have an Azure AD directory, you'll [sign in to Store for Business](#sign_in), and then accept Store for Business terms.
+    -   If you already have an Azure AD directory, you'll [sign in to Store for Business](#sign-in), and then accept Store for Business terms.
 
     ![](images/wsfb-landing.png)
 
     **To sign up for Azure AD accounts through Office 365 for Business**
 
-    -   Signing up for Store for Business will create an Azure AD directory and global administrator account for you. There are just a few steps.
+    -   <a href="" id="o365-welcome"></a>Signing up for Store for Business will create an Azure AD directory and global administrator account for you. There are just a few steps.
 
         Step 1: About you.
 
@@ -71,11 +71,11 @@ Before signing up for the Store for Business, make sure you're the global admini
 
     -   At this point, you'll have an Azure AD directory created with one user account. That user account is the global administrator. You can use that account to sign in to Store for Business.
 
-2.  Sign in with your Azure AD account.
+2.  <a href="" id="sign-in"></a>Sign in with your Azure AD account.
 
     ![](images/wsfb-onboard-7.png)
 
-3.  Read through and accept Store for Business terms.
+3.  <a href="" id="accept-terms"></a>Read through and accept Store for Business terms.
 
 4.  Welcome to the Store for Business. Click **Next** to continue.
 
diff --git a/windows/manage/stop-employees-from-using-the-windows-store.md b/windows/manage/stop-employees-from-using-the-windows-store.md
index da89adadf8..4b3444dec6 100644
--- a/windows/manage/stop-employees-from-using-the-windows-store.md
+++ b/windows/manage/stop-employees-from-using-the-windows-store.md
@@ -23,7 +23,7 @@ IT Pros can configure access to Windows Store for client computers in their orga
 
 You can use these tools to configure access to Windows Store: AppLocker or Group Policy. For Windows 10, this is only supported on Windows 10 Enterprise edition.
 
-## Block Windows Store using AppLocker
+## <a href="" id="block-store-applocker"></a>Block Windows Store using AppLocker
 
 
 Applies to: Windows 10 Enterprise, Windows 10 Mobile
@@ -52,10 +52,10 @@ For more information on AppLocker, see [What is AppLocker?](../keep-secure/what-
 
 8.  Optional: On **Exceptions**, specify conditions by which to exclude files from being affected by the rule. This allows you to add exceptions based on the same rule reference and rule scope as you set before. Click **Next**.
 
-## Block Windows Store using Group Policy
+## <a href="" id="block-store-group-policy"></a>Block Windows Store using Group Policy
 
 
-Applies to: Windows 10 Enterprise, Version 1511
+Applies to: Windows 10 Enterprise, version 1511
 
 You can also use Group Policy to manage access to Windows Store.
 
@@ -69,12 +69,12 @@ You can also use Group Policy to manage access to Windows Store.
 
 4.  On the **Turn off Store application** setting page, click **Enabled**, and then click **OK**.
 
-## Block Windows Store using management tool
+## <a href="" id="block-store-mdm"></a>Block Windows Store using management tool
 
 
 Applies to: Windows 10 Mobile
 
-If you have mobile devices in your organization that you upgraded from earlier versions of Windows Phone 8 to Windows 10 Mobile, existing policies created using the Windows Phone 8.1 configuration service providers (CSP) with your MDM tool will continue to work on Windows 10 Mobile. If you are starting with Windows 10 Mobile, we recommend using [AppLocker](#block_store_applocker) to manage access to Windows Store app.
+If you have mobile devices in your organization that you upgraded from earlier versions of Windows Phone 8 to Windows 10 Mobile, existing policies created using the Windows Phone 8.1 configuration service providers (CSP) with your MDM tool will continue to work on Windows 10 Mobile. If you are starting with Windows 10 Mobile, we recommend using [AppLocker](#block-store-applocker) to manage access to Windows Store app.
 
 When your MDM tool supports Windows Store for Business, the MDM can use these CSPs to block Windows Store app:
 
diff --git a/windows/manage/windows-10-mobile-and-mdm.md b/windows/manage/windows-10-mobile-and-mdm.md
index 9cf338b2d1..72aaeeeb45 100644
--- a/windows/manage/windows-10-mobile-and-mdm.md
+++ b/windows/manage/windows-10-mobile-and-mdm.md
@@ -19,12 +19,12 @@ author: jdeckerMS
 **In this article**
 
 -   [Overview](#overview)
--   [Device deployment](#device_deployment__)
--   [Device configuration](#device_configuration)
--   [App management](#__app_management)
--   [Device operations](#device_operations)
--   [Device retirement](#device_retirement)
--   [Related topics](#related_topics)
+-   [Device deployment](#device-deployment--)
+-   [Device configuration](#device-configuration)
+-   [App management](#--app-management)
+-   [Device operations](#device-operations)
+-   [Device retirement](#device-retirement)
+-   [Related topics](#related-topics)
 
 This guide provides an overview of the mobile device and app management technologies in the Windows 10 Mobile operating system. It describes how mobile device management (MDM) systems use the built-in device management client to deploy, configure, maintain, and support phones and small tablets running Windows 10 Mobile.
 
@@ -37,7 +37,7 @@ Windows 10 Mobile not only delivers more comprehensive, restrictive configurati
 
 Organizations’ users increasingly depend on their mobile devices, but phones and tablets bring new and unfamiliar challenges for IT departments. IT must be able to deploy and manage mobile devices and apps quickly to support the business while balancing the growing need to protect corporate data because of evolving laws, regulations, and cybercrime. IT must ensure that the apps and data on those mobile devices are safe, especially on personal devices. Windows 10 Mobile helps organizations address these challenges by providing a robust, flexible, built-in MDM client. IT departments can use the MDM system of their choice to manage this client.
 
-### Built-in MDM client
+### <a href="" id="built-in-mdm-client--"></a>Built-in MDM client
 
 The built-in MDM client is common to all editions of the Windows 10 operating system, including desktop, mobile, and Internet of Things (IoT). The client provides a single interface through which you can manage any device that runs Windows 10. The client has two important roles: device enrollment in an MDM system and device management.
 
@@ -47,7 +47,7 @@ The built-in MDM client is common to all editions of the Windows 10 operating s
 
 The MDM client is an integral part of Windows 10 Mobile. As a result, there is no need for an additional, custom MDM app to enroll the device or to allow an MDM system to manage it. All MDM systems have equal access to Windows 10 Mobile MDM application programming interfaces (APIs), so you can choose Microsoft Intune or a third-party MDM product to manage Windows 10 Mobile devices. For more information about Windows 10 Mobile device management APIs, see [Mobile device management](http://go.microsoft.com/fwlink/p/?LinkId=734050).
 
-### Windows 10 Mobile editions
+### <a href="" id="mobile-edition"></a>Windows 10 Mobile editions
 
 Every device that runs Windows 10 Mobile includes all the enterprise mobile device security and management capabilities the MDM client provides. Microsoft also offers an Enterprise edition of Windows 10 Mobile, which includes three additional capabilities. To enable these capabilities, you can provision a license file without reinstalling the operating system:
 
@@ -64,7 +64,7 @@ Your organization can opt to purchase a code signing certificate from Verisign t
 
 To activate Windows 10 Mobile Enterprise on any Windows 10 Mobile device, use your company’s MDM system or a provisioning package to inject a license onto the device. You can download a Windows 10 Mobile Enterprise license from the Business Support Portal.
 
-### Lifecycle management
+### <a href="" id="lifecycle-management--"></a>Lifecycle management
 
 Windows 10 Mobile supports end-to-end lifecycle device management to give companies control of their devices, data, and apps. Comprehensive MDM systems use the built-in MDM client to manage devices throughout their lifecycle, as Figure 1 illustrates. The remainder of this guide describes the operating system’s mobile device and app management capabilities through each phase of the lifecycle, showing how MDM systems use specific features.
 
@@ -72,7 +72,7 @@ Windows 10 Mobile supports end-to-end lifecycle device management to give compa
 
 Figure 1. Device management lifecycle
 
-## Device deployment
+## <a href="" id="device-deployment--"></a>Device deployment
 
 
 Device deployment includes the initial registration and configuration of the device, including its enrollment with an MDM system. Sometimes, companies preinstall apps. The major factors in how you deploy devices and which controls you put in place are device ownership and how the user will use the device. This guide covers two scenarios:
@@ -85,7 +85,7 @@ Often, employees can choose devices from a list of supported models, or companie
 
 Microsoft recommends Azure AD Join and MDM enrollment and management for corporate devices and Azure AD Registration and MDM enrollment and management for personal devices.
 
-### Deployment scenarios
+### <a href="" id="deployment-scenarios--"></a>Deployment scenarios
 
 Most organizations support both personal and corporate device scenarios. The infrastructure for these scenarios is similar, but the deployment process and configuration policies differ. Table 1 describes characteristics of the personal and corporate device scenarios. Activation of a device with an organizational identity is unique to Windows 10 Mobile.
 
@@ -123,7 +123,7 @@ Table 1. Characteristics of personal and corporate device scenarios
 
  
 
-### Identity management
+### <a href="" id="identity-management--"></a>Identity management
 
 People can use only one account to activate a device, so it’s imperative that your organization control which account you enable first. The account you choose will determine who controls the device and influence your management capabilities. The following list describes the impact that users’ identities have on management (Table 2 summarizes these considerations):
 
@@ -182,7 +182,7 @@ Table 2. Personal vs. organizational identity
 
  
 
-### Infrastructure requirements
+### <a href="" id="infrastructure-requirements--"></a>Infrastructure requirements
 
 For both device scenarios, the essential infrastructure and tools required to deploy and manage Windows 10 Mobile devices include an Azure AD subscription and an MDM system.
 
@@ -210,7 +210,7 @@ In addition, Microsoft recently added MDM capabilities powered by Intune to Offi
 
  
 
-### Provisioning
+### <a href="" id="provisioning--"></a>Provisioning
 
 Provisioning is new to Windows 10 and uses the MDM client in Windows 10 Mobile. You can create a runtime provisioning package to apply settings, profiles, and file assets to a device running Windows 10.
 
@@ -241,7 +241,7 @@ The following sections describe the device configuration capabilities of the bui
 
 -   [Account restrictions](#restrictions)
 
--   [Device lock restrictions](#device_lock)
+-   [Device lock restrictions](#device-lock)
 
 -   [Hardware restrictions](#hardware)
 
@@ -264,7 +264,7 @@ Although all the MDM settings this section describes are available in Windows 1
 
  
 
-### Email accounts
+### <a href="" id="email"></a>Email accounts
 
 You can use your corporate MDM system to manage corporate email accounts. Define email account profiles in the MDM system, and then deploy them to devices. You would usually deploy these settings immediately after enrollment, regardless of scenario.
 
@@ -329,7 +329,7 @@ Table 4. Windows 10 Mobile settings for other email profiles
 
  
 
-### Account restrictions
+### <a href="" id="restrictions"></a>Account restrictions
 
 On a corporate device registered with Azure AD and enrolled in the MDM system, you can control whether users can use a Microsoft account or add other consumer email accounts. Table 5 lists the settings that you can use to manage accounts on Windows 10 Mobile devices.
 
@@ -343,7 +343,7 @@ Table 5. Windows 10 Mobile account management settings
 
  
 
-### Device lock restrictions
+### <a href="" id="device-lock"></a>Device lock restrictions
 
 It’s common sense to lock a device when it is not in use. Microsoft recommends that you secure Windows 10 Mobile devices and implement a device lock policy. A device password or PIN lock is a best practice for securing apps and data on devices. [Windows Hello](http://go.microsoft.com/fwlink/p/?LinkId=723994) is the name given to the new biometric sign-in option that allows users to use their face, iris, or fingerprints to unlock their compatible device, all of which Windows 10 supports.
 
@@ -432,7 +432,7 @@ Table 6. Windows 10 Mobile device lock restrictions
 
  
 
-### Hardware restrictions
+### <a href="" id="hardware"></a>Hardware restrictions
 
 Windows 10 Mobile devices use state-of-the-art technology that includes popular hardware features such as cameras, global positioning system (GPS) sensors, microphones, speakers, near-field communication (NFC) radios, storage card slots, USB interfaces, Bluetooth interfaces, cellular radios, and Wi-Fi. You can also use hardware restrictions to control the availability of these features. Table 7 lists the MDM settings that Windows 10 Mobile supports to configure hardware restrictions.
 
@@ -463,7 +463,7 @@ Table 7. Windows 10 Mobile hardware restrictions
 
  
 
-### Certificate management
+### <a href="" id="certificate"></a>Certificate management
 
 Managing certificates can be difficult for users, but certificates are pervasive for a variety of uses, including, account authentication, Wi-Fi authentication, VPN encryption, and SSL encryption of web content. Although users could manage certificates on devices manually, it’s a best practice to use your MDM system to manage those certificates for their entire life cycle, from enrollment through renewal to revocation. You can use the Simple Certificate Enrollment Protocol (SCEP) and Personal Information Exchange (PFX) certificates files to install certificates on Windows 10 Mobile. Certificate management through SCEP and MDM systems is fully transparent to users and requires no user intervention, so it helps improve user productivity and reduce support calls. Your MDM system can automatically deploy these certificates to the devices’ certificate stores after you enroll the device. Table 8 lists the SCEP settings that the MDM client in Windows 10 Mobile provides.
 
@@ -526,7 +526,7 @@ To diagnose certificate-related issues on Windows 10 Mobile devices, use the fr
 
  
 
-### Wi-Fi
+### <a href="" id="wifi"></a>Wi-Fi
 
 People use Wi-Fi on their mobile devices as much as or more than cellular data. Most corporate Wi-Fi networks require certificates and other complex information to restrict and secure user access. This advanced Wi-Fi information is difficult for typical users to configure, but you can use your MDM system to fully configure Wi-Fi settings without user intervention.
 
@@ -864,7 +864,7 @@ Table 14. Windows 10 Mobile VPN management settings
 
  
 
-### APN profiles
+### <a href="" id="apn"></a>APN profiles
 
 An APN defines network paths for cellular data connectivity. Typically, you define just one APN for a device in collaboration with a mobile operator, but you can define multiple APNs if your company uses multiple mobile operators.
 
@@ -936,7 +936,7 @@ Table 15. Windows 10 Mobile APN profile settings
 
  
 
-### Data leak protection
+### <a href="" id="data"></a>Data leak protection
 
 Some user experiences can risk corporate data stored on corporate devices. For example, allowing users to copy and paste information out of the organization’s LOB app can put data at risk. To mitigate the risk, you can restrict the Windows 10 Mobile user experience to help protect corporate data and prevent data leaks. For example, you can prevent settings synchronization, copy-and-paste operations, and screen captures. Table 16 lists the MDM settings in Windows 10 Mobile that you can use to help prevent data leaks.
 
@@ -957,7 +957,7 @@ Table 16. Windows 10 Mobile data leak protection settings
 
  
 
-### Storage management
+### <a href="" id="storage"></a>Storage management
 
 Protecting the apps and data stored on a device is critical to device security. One method for helping protect your apps and data is to encrypt internal device storage by using the device encryption in Windows 10 Mobile. This encryption helps protect corporate data against unauthorized access, even when an unauthorized user has physical possession of the device.
 
@@ -1024,26 +1024,26 @@ Table 17. Windows 10 Mobile storage management settings
 
  
 
-##  App management
+## <a href="" id="--app-management"></a> App management
 
 
 Apps help improve user productivity on mobile devices. New to Windows 10 is the ability for organizations purchase apps from Windows Store for their employees and deploy those apps from Windows Store or an MDM system. App management is becoming a key capability of MDM systems, helping reduce the effort required to perform common app-related tasks, such as distributing apps, and protecting data through app policies. This section describes the app management features in Windows 10 Mobile and includes the following topics:
 
--   [Universal Windows Platform (UWP)](#UWP)
+-   [Universal Windows Platform (UWP)](#uwp)
 
 -   [Sourcing the right app](#sourcing)
 
 -   [Windows Store for Business](#store)
 
--   [Mobile application management (MAM) policies](#MAM)
+-   [Mobile application management (MAM) policies](#mam)
 
 -   [Microsoft Edge](#edge)
 
-### Universal Windows Platform
+### <a href="" id="uwp"></a>Universal Windows Platform
 
 Windows 10 introduces UWP, converging the application platform for all devices running some edition of Windows 10. UWP apps run without modification on all editions of Windows 10, and Windows Store now has apps that you can license and purchased for all your Windows 10 devices. Windows Phone 8.1 and Windows 8.1 apps still run on Windows 10 devices, but the MAM improvements in Windows 10 work only with UWP apps. See the [Guide to Universal Windows Platform (UWP) apps](http://go.microsoft.com/fwlink/p/?LinkId=734056) for additional information.
 
-### Sourcing the right app
+### <a href="" id="sourcing"></a>Sourcing the right app
 
 The first step in app management is to obtain the apps your users need, and you can now acquire apps from Windows Store. Developers can also create apps specific to an organization, known as *line-of-business (LOB) apps* (the developers of these apps are *LOB publishers*). An LOB developer (internal or external) can now publish these apps to Windows Store at your request, or you can obtain the app packages offline and distribute them through your MDM system.
 
@@ -1051,11 +1051,11 @@ To install Windows Store or LOB apps, use the Windows Store cloud service or you
 
 IT administrators can obtain apps through Store for Business. Most apps can be distributed online, meaning that the user must be logged in to the device with an Azure AD account and have Internet access at the time of installation. To distribute an app offline, the developer must opt in. If the app developer doesn’t allow download of the app from Windows Store, then you must obtain the files directly from the developer or use the online method. See [Windows Store for Business](windows-store-for-business.md) for additional information about apps obtained through Store for Business.
 
-Windows Store apps are automatically trusted. For custom LOB apps developed internally or by a trusted software vendor, ensure that the device trusts the app signing certificate. There are two ways to establish this trust: use a signing certificate from a trusted source, or generate your own signing certificate and add your chain of trust to the trusted certificates on the device. You can install up to 20 self-signed apps on a Windows 10 Mobile device. When you purchase a signing certificate from a public CA, you can install more than 20 apps on a device, although you can install more than 20 self-signed apps per device with [Windows 10 Mobile Enterprise](#mobile_edition).
+Windows Store apps are automatically trusted. For custom LOB apps developed internally or by a trusted software vendor, ensure that the device trusts the app signing certificate. There are two ways to establish this trust: use a signing certificate from a trusted source, or generate your own signing certificate and add your chain of trust to the trusted certificates on the device. You can install up to 20 self-signed apps on a Windows 10 Mobile device. When you purchase a signing certificate from a public CA, you can install more than 20 apps on a device, although you can install more than 20 self-signed apps per device with [Windows 10 Mobile Enterprise](#mobile-edition).
 
 Users can install apps from Windows Store that the organization purchases through the Store app on their device. If you allow your users to log in with a Microsoft account, the Store app on the device provides a unified method for installing personal and corporate apps.
 
-### Store for Business
+### <a href="" id="store"></a>Store for Business
 
 [Windows Store for Business](http://go.microsoft.com/fwlink/p/?LinkId=722910) is a web portal that IT pros and purchasers use to find, acquire, manage, and distribute apps to Windows 10 devices. This online portal gives Azure AD authenticated managers access to Store for Business functionality and settings. Store managers can create a private section of Windows Store in which organizations can manage apps specific and private to them. Store for Business allows organizations to make apps available to their users and purchase app licenses for them. They can also integrate their Store for Business subscriptions with their MDM systems, so the MDM system can deploy apps from their free Store for Business subscription.
 
@@ -1073,7 +1073,7 @@ The process for using Store for Business is as follows:
 
 For more information about Store for Business, see [Windows Store for Business](windows-store-for-business.md).
 
-### Mobile application management (MAM) policies
+### <a href="" id="mam"></a>Mobile application management (MAM) policies
 
 With MDM, you can manage Device Guard on Windows 10 Mobile and create an allow (whitelist) or deny (blacklist) list of apps. This capability extends to built-in apps, as well, such as phone, text messaging, email, and calendar. The ability to allow or deny apps helps to ensure that people use their mobile devices for their intended purposes.
 
@@ -1099,7 +1099,7 @@ Table 18. Windows 10 Mobile app management settings
 
 One potential security issue is that users can register as Windows 10 Mobile app developers and turn on developer features on their device, potentially installing apps from unknown sources and opening the device to malware threats. To prevent users from turning on developer features on their devices, set the **Disable development unlock (side loading)** policy, which you can configure through your MDM system.
 
-### Microsoft Edge
+### <a href="" id="edge"></a>Microsoft Edge
 
 MDM systems give you the ability to manage Microsoft Edge on mobile devices. Table 19 lists the Microsoft Edge settings for Windows 10 Mobile.
 
@@ -1129,21 +1129,21 @@ Table 19. Microsoft Edge settings for Windows 10 Mobile
 
 In this section, you learn how MDM settings in Windows 10 Mobile enable the following scenarios:
 
--   [Device update](#device_update)
+-   [Device update](#device-update)
 
--   [Device compliance monitoring](#device_comp)
+-   [Device compliance monitoring](#device-comp)
 
--   [Device inventory](#data_inv)
+-   [Device inventory](#data-inv)
 
--   [Remote assistance](#remote_assist)
+-   [Remote assistance](#remote-assist)
 
--   [Cloud services](#cloud_serv)
+-   [Cloud services](#cloud-serv)
 
 ### Device update
 
 To help protect mobile devices and their data, you must keep those devices updated. Windows Update automatically installs updates and upgrades when they become available.
 
-The device update features described in this section are available only in [Windows 10 Mobile Enterprise](#mobile_edition). You can use your MDM system to postpone system upgrades when you activate an Enterprise license on managed Windows 10 Mobile devices and control how updates and upgrades are applied. For example, you can disable updates altogether, defer updates and upgrades, and schedule the day and time to install updates, as you would with Windows Server Update Services (WSUS) on Windows 10 desktops running the [Current Branch for Business](introduction-to-windows-10-servicing.md). Table 20 lists the Windows 10 Mobile Enterprise settings that you can use to configure updates and upgrades.
+The device update features described in this section are available only in [Windows 10 Mobile Enterprise](#mobile-edition). You can use your MDM system to postpone system upgrades when you activate an Enterprise license on managed Windows 10 Mobile devices and control how updates and upgrades are applied. For example, you can disable updates altogether, defer updates and upgrades, and schedule the day and time to install updates, as you would with Windows Server Update Services (WSUS) on Windows 10 desktops running the [Current Branch for Business](introduction-to-windows-10-servicing.md). Table 20 lists the Windows 10 Mobile Enterprise settings that you can use to configure updates and upgrades.
 
 Table 20. Windows 10 Mobile Enterprise update management settings
 
@@ -1282,7 +1282,7 @@ Table 21. Windows 10 Mobile Enterprise approved update information
 
  
 
-### Device compliance monitoring
+### <a href="" id="device-comp"></a>Device compliance monitoring
 
 You can use your MDM system to monitor compliance. Windows 10 Mobile provides audit information to track issues or perform remedial actions. This information helps you ensure that devices are configured to comply with organizational standards.
 
@@ -1339,7 +1339,7 @@ Table 21. Windows 10 Mobile HAS data points
 
  
 
-### Device inventory
+### <a href="" id="data-inv"></a>Device inventory
 
 Device inventory helps organizations better manage devices because it provides in-depth information about those devices. MDM systems collect inventory information remotely, and you can use the system’s reporting capabilities to analyze device resources and information. With this information, you can determine the current hardware and software resources of the device (for example, installed updates).
 
@@ -1370,7 +1370,7 @@ Table 22. Windows 10 Mobile software and hardware inventory examples
 
  
 
-### Remote assistance
+### <a href="" id="remote-assist"></a>Remote assistance
 
 The remote assistance features in Windows 10 Mobile help resolve issues that users might encounter even when the help desk does not have physical access to the device. These features include:
 
@@ -1394,7 +1394,7 @@ Table 23. Windows 10 Mobile remote find settings
 
  
 
-### Cloud services
+### <a href="" id="cloud-serv"></a>Cloud services
 
 On mobile devices that run Windows 10 Mobile, users can easily connect to apps and data. As a result, they frequently connect to cloud services that provide user notifications and collect telemetry (usage data). Windows 10 Mobile enables organizations to manage how devices consume these cloud services.
 
diff --git a/windows/manage/working-with-line-of-business-apps.md b/windows/manage/working-with-line-of-business-apps.md
index 8194e17dc0..82ac833b02 100644
--- a/windows/manage/working-with-line-of-business-apps.md
+++ b/windows/manage/working-with-line-of-business-apps.md
@@ -22,7 +22,7 @@ Developers within your own company, or ISVs that you invite, can become LOB publ
 
 One advantage of making apps available through Store for Business is that the app has been signed by the Store, and uses the standard Store policies. For companies that can’t submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](http://go.microsoft.com/fwlink/p/?LinkId=623433) is also supported in Windows 10.
 
-## Adding LOB apps to your private store
+## <a href="" id="adding-lob-apps"></a>Adding LOB apps to your private store
 
 
 Your Store for Business admin and ISV each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees. They’ll use the Store for Business portal, and the Windows Dev center on MSDN. Here’s what’s involved:
@@ -41,7 +41,7 @@ What you'll have to set up:
 
 -   LOB publishers need to have an app in the Store, or have an app ready to submit to the Store.
 
-### Add an LOB publisher (admin)
+### <a href="" id="add-lob-publisher"></a>Add an LOB publisher (admin)
 
 For developers within your own organization, or ISVs you're working with to create LOB apps, you'll need to invite them to become a LOB publisher.
 
@@ -51,7 +51,7 @@ For developers within your own organization, or ISVs you're working with to crea
 2.  Click **Settings**, and then choose **LOB publishers**.
 3.  On the Line-of business publishers page, click **Add** to complete a form and send an email invitation to a developer.
 
-### Submit apps (LOB publisher)
+### <a href="" id="submit-lob-app"></a>Submit apps (LOB publisher)
 
 The developer receives an email invite to become an LOB publisher for your company. Once they accept the invite, they can log in to the Windows Dev Center to create an app submission for your company. The info here assumes that devs or ISVs have an active developer account.
 
@@ -79,7 +79,7 @@ After an app is published and available in the Store, ISVs publish an updated ve
 
 For more information, see [Organizational licensing options]( http://go.microsoft.com/fwlink/p/?LinkId=708615) and [Distributing LOB apps to enterprises](http://go.microsoft.com/fwlink/p/?LinkId=627543).
 
-### Add app to inventory (admin)
+### <a href="" id="add-lob-app-to-inventory"></a>Add app to inventory (admin)
 
 After an ISV submits the LOB app for your company, the Store for Businessadmin needs to accept the app.
 
diff --git a/windows/plan/TOC.md b/windows/plan/TOC.md
index c11effc96c..bc320b4898 100644
--- a/windows/plan/TOC.md
+++ b/windows/plan/TOC.md
@@ -1,4 +1,4 @@
-# [Plan for Windows 10 deployment](index.md)
+# [Plan for Windows 10 deployment]
 ## [Change history for Plan for Windows 10 deployment](change-history-for-plan-for-windows-10-deployment.md)
 ## [Windows 10 servicing options](windows-10-servicing-model.md)
 ## [Windows 10 deployment considerations](windows-10-deployment-considerations.md)
diff --git a/windows/plan/application-dialog-box.md b/windows/plan/application-dialog-box.md
index 8bbcad3398..2736bf45f0 100644
--- a/windows/plan/application-dialog-box.md
+++ b/windows/plan/application-dialog-box.md
@@ -30,7 +30,7 @@ In Application Compatibility Manager (ACM), the *&lt;Application&gt;* dialog box
 
 3.  Double-click the name of an application.
 
-## Tabs in the &lt;Application&gt; dialog box
+## <a href="" id="tabs-in-the--application--dialog-box"></a>Tabs in the &lt;Application&gt; dialog box
 
 
 The following table shows the information available in the *&lt;Application&gt;* dialog box.
@@ -98,7 +98,7 @@ The following table shows the information available in the *&lt;Application&gt;*
 
  
 
-## Using the &lt;Application&gt; Dialog Box
+## <a href="" id="using-the--application--dialog-box"></a>Using the &lt;Application&gt; Dialog Box
 
 
 In the **&lt;Application&gt;** dialog box, you can perform the following actions:
diff --git a/windows/plan/change-history-for-plan-for-windows-10-deployment.md b/windows/plan/change-history-for-plan-for-windows-10-deployment.md
index d5ea58e8d1..518a60037d 100644
--- a/windows/plan/change-history-for-plan-for-windows-10-deployment.md
+++ b/windows/plan/change-history-for-plan-for-windows-10-deployment.md
@@ -11,7 +11,7 @@ author: TrudyHa
 # Change history for Plan for Windows 10 deployment
 
 
-This topic lists new and updated topics in the [Plan for Windows 10 deployment](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
+This topic lists new and updated topics in the [Plan for Windows 10 deployment] documentation for [Windows 10 and Windows 10 Mobile](../index.md).
 
 ## December 2015
 
diff --git a/windows/plan/chromebook-migration-guide.md b/windows/plan/chromebook-migration-guide.md
index 741a3223fe..8d8aca4ddb 100644
--- a/windows/plan/chromebook-migration-guide.md
+++ b/windows/plan/chromebook-migration-guide.md
@@ -18,35 +18,35 @@ author: TrudyHa
 
 **In this article**
 
--   [Plan Chromebook migration](#plan_migration)
--   [Plan for app migration or replacement](#plan_app_migrate_replace)
--   [Plan for migration of user and device settings](#plan_migrate_user_device_settings)
--   [Plan for email migration](#plan_email_migrate)
--   [Plan for cloud storage migration](#plan_cloud_storage_migration)
--   [Plan for cloud services migration](#plan_cloud_services)
--   [Plan for Windows device deployment](#plan_windevice_deploy)
--   [Perform Chromebook migration](#perform_chromebook_migration)
--   [Perform network infrastructure remediation](#network_infra_remediation)
--   [Perform AD DS and Azure AD services deployment or remediation](#perform_ad_ds_and_azure_ad_services_deployment_or_remediation)
--   [Prepare device, user, and app management systems](#prepare_device__user__and_app_management_systems)
--   [Perform app migration or replacement](#perform_app_migration_or_replacement_)
--   [Perform migration of user and device settings](#migrate_user_device_settings)
--   [Perform email migration](#perform_email_migration)
--   [Perform cloud storage migration](#perform_cloud_storage_migration)
--   [Perform cloud services migration](#perform_cloud_services_migration)
--   [Perform Windows device deployment](#perform_windows_device_deployment)
--   [Related topics](#related_topics)
+-   [Plan Chromebook migration](#plan-migration)
+-   [Plan for app migration or replacement](#plan-app-migrate-replace)
+-   [Plan for migration of user and device settings](#plan-migrate-user-device-settings)
+-   [Plan for email migration](#plan-email-migrate)
+-   [Plan for cloud storage migration](#plan-cloud-storage-migration)
+-   [Plan for cloud services migration](#plan-cloud-services)
+-   [Plan for Windows device deployment](#plan-windevice-deploy)
+-   [Perform Chromebook migration](#perform-chromebook-migration)
+-   [Perform network infrastructure remediation](#network-infra-remediation)
+-   [Perform AD DS and Azure AD services deployment or remediation](#perform-ad-ds-and-azure-ad-services-deployment-or-remediation)
+-   [Prepare device, user, and app management systems](#prepare-device--user--and-app-management-systems)
+-   [Perform app migration or replacement](#perform-app-migration-or-replacement-)
+-   [Perform migration of user and device settings](#migrate-user-device-settings)
+-   [Perform email migration](#perform-email-migration)
+-   [Perform cloud storage migration](#perform-cloud-storage-migration)
+-   [Perform cloud services migration](#perform-cloud-services-migration)
+-   [Perform Windows device deployment](#perform-windows-device-deployment)
+-   [Related topics](#related-topics)
 
 In this guide you will learn how to migrate a Google Chromebook-based learning environment to a Windows 10-based learning environment. You will learn how to perform the necessary planning steps, including Windows device deployment, migration of user and device settings, app migration or replacement, and cloud storage migration. You will then learn the best method to perform the migration by using automated deployment and migration tools.
 
-## Plan Chromebook migration
+## <a href="" id="plan-migration"></a>Plan Chromebook migration
 
 
 Before you begin to migrate Chromebook devices, plan your migration. As with most projects, there can be an urge to immediately start doing before planning. When you plan your Chromebook migration before you perform the migration, you can save countless hours of frustration and mistakes during the migration process.
 
 In the planning portion of this guide, you will identify all the decisions that you need to make and how to make each decision. At the end of the planning section, you will have a list of information you need to collect and what you need to do with the information. You will be ready to perform your Chromebook migration.
 
-## Plan for app migration or replacement
+## <a href="" id="plan-app-migrate-replace"></a>Plan for app migration or replacement
 
 
 App migration or replacement is an essential part of your Chromebook migration. In this section you will plan how you will migrate or replace Chromebook (Chrome OS) apps that are currently in use with the same or equivalent Windows apps. At the end of this section, you will have a list of the active Chrome OS apps and the Windows app counterparts.
@@ -56,7 +56,7 @@ App migration or replacement is an essential part of your Chromebook migration.
 Before you can do any analysis or make decisions about which apps to migrate or replace, you need to identify which apps are currently in use on the Chromebook devices. You will create a list of apps that are currently in use (also called an app portfolio).
 
 **Note**  
-The majority of Chromebook apps are web apps. For these apps you need to first perform Microsoft Edge compatibility testing and then publish the web app URL to the Windows users. For more information, see the [Perform app compatibility testing for web apps](#perform_testing_webapps) section.
+The majority of Chromebook apps are web apps. For these apps you need to first perform Microsoft Edge compatibility testing and then publish the web app URL to the Windows users. For more information, see the [Perform app compatibility testing for web apps](#perform-testing-webapps) section.
 
  
 
@@ -80,7 +80,7 @@ Record the following information about each app in your app portfolio:
 
 Throughout the entire app migration or replacement process, focus on the higher priority apps. Focus on lower priority apps only after you have determined what you will do with the higher priority apps.
 
-### 
+### <a href="" id="select-googleapps"></a>
 
 **Select Google Apps replacements**
 
@@ -100,17 +100,17 @@ Table 1. Google App replacements
 
  
 
-It may be that you will decide to replace Google Apps after you deploy Windows devices. For more information on making this decision, see the [Select cloud services migration strategy](#select_CS_migrationstrat) section of this guide.
+It may be that you will decide to replace Google Apps after you deploy Windows devices. For more information on making this decision, see the [Select cloud services migration strategy](#select-cs-migrationstrat) section of this guide.
 
 **Find the same or similar apps in the Windows Store**
 
-In many instances, software vendors will create a version of their app for multiple platforms. You can search the Windows Store to find the same or similar apps to any apps not identified in the [Select Google Apps replacements](#select_googleapps) section.
+In many instances, software vendors will create a version of their app for multiple platforms. You can search the Windows Store to find the same or similar apps to any apps not identified in the [Select Google Apps replacements](#select-googleapps) section.
 
 In other instances, the offline app does not have a version written for the Windows Store or is not a web app. In these cases, look for an app that provides similar functions. For example, you might have a graphing calculator offline Android app published on the Chrome OS, but the software publisher does not have a version for Windows devices. Search the Windows Store for a graphing calculator app that provides similar features and functionality. Use that Windows Store app as a replacement for the graphing calculator offline Android app published on the Chrome OS.
 
 Record the Windows app that replaces the Chromebook app in your app portfolio.
 
-### 
+### <a href="" id="perform-testing-webapps"></a>
 
 **Perform app compatibility testing for web apps**
 
@@ -118,7 +118,7 @@ The majority of Chromebook apps are web apps. Because you cannot run native offl
 
 Ensure that you test these web apps in Microsoft Edge. Record the level of compatibility for each web app in Microsoft Edge in your app portfolio.
 
-## Plan for migration of user and device settings
+## <a href="" id="plan-migrate-user-device-settings"></a>Plan for migration of user and device settings
 
 
 Some institutions have configured the Chromebook devices to make the devices easier to use by using the Google Chrome Admin Console. You have also probably configured the Chromebook devices to help ensure the user data access and ensure that the devices themselves are secure by using the Google Chrome Admin Console.
@@ -127,7 +127,7 @@ However, in addition to your centralized configuration in the Google Admin Conso
 
 In this section, you will identify the user and device configuration settings for your Chromebook users and devices. Then you will prioritize these settings to focus on the configuration settings that are essential to your educational institution.
 
-At the end of this section, you should have a list of Chromebook user and device settings that you want to migrate to Windows, as well as a level of priority for each setting. You may discover at the end of this section that you have few or no higher priority settings to be migrated. If this is the case, you can skip the [Perform migration of user and device settings](#migrate_user_device_settings) section of this guide.
+At the end of this section, you should have a list of Chromebook user and device settings that you want to migrate to Windows, as well as a level of priority for each setting. You may discover at the end of this section that you have few or no higher priority settings to be migrated. If this is the case, you can skip the [Perform migration of user and device settings](#migrate-user-device-settings) section of this guide.
 
 **Identify Google Admin Console settings to migrate**
 
@@ -275,7 +275,7 @@ After you have collected all the Chromebook user, app, and device settings that
 
 Assign the setting-migration priority based on how critical the setting is to the faculty performing their day-to-day tasks and how the setting affects the curriculum in the classrooms. Focus on the migration of higher priority settings and put less effort into the migration of lower priority settings. There may be some settings that are not necessary at all and can be dropped from your list of settings entirely. Record the setting priority in the list of settings you plan to migrate.
 
-## Plan for email migration
+## <a href="" id="plan-email-migrate"></a>Plan for email migration
 
 
 Many of your users may be using Google Apps Gmail to manage their email, calendars, and contacts. You need to create the list of users you will migrate and the best time to perform the migration.
@@ -304,7 +304,7 @@ Typically, the best time to perform the migration is between academic years or d
 
 Ensure that you communicate the time the migration will occur to your users well in advance. Also, ensure that users know how to access their Office 365 email after the migration is complete. Finally, ensure that your users know how to perform the common tasks they performed in Google Apps Gmail in Office 365 and/or Outlook 2016.
 
-## Plan for cloud storage migration
+## <a href="" id="plan-cloud-storage-migration"></a>Plan for cloud storage migration
 
 
 Chromebook devices have limited local storage. So, most of your users will store data in cloud storage, such as Google Drive. You will need to plan how to migrate your cloud storage as a part of the Chromebook migration process.
@@ -323,7 +323,7 @@ Typically, most Chromebook users use Google Drive for cloud storage services bec
 
 -   Approximate storage currently in use per user
 
-Use this information as the requirements for your cloud storage services after you migrate to Windows devices. If at the end of this discovery you determine there is no essential data being stored in cloud storage services that requires migration, then you can skip to the [Plan for cloud services migration](#plan_cloud_services) section.
+Use this information as the requirements for your cloud storage services after you migrate to Windows devices. If at the end of this discovery you determine there is no essential data being stored in cloud storage services that requires migration, then you can skip to the [Plan for cloud services migration](#plan-cloud-services) section.
 
 **Optimize cloud storage services migration plan**
 
@@ -339,18 +339,18 @@ Consider the following to help optimize your cloud storage services migration pl
 
 Record your optimization changes in your cloud storage services migration plan.
 
-## Plan for cloud services migration
+## <a href="" id="plan-cloud-services"></a>Plan for cloud services migration
 
 
-Many of your users may use cloud services on their Chromebook device, such as Google Apps, Google Drive, or Google Apps Gmail. You have planned for these individual cloud services in the [Plan for app migration or replacement](#plan_app_migrate_replace), [Plan for Google Apps Gmail to Office 365 migration](#plan_email_migrate), and [Plan for cloud storage migration](#plan_cloud_storage_migration) sections.
+Many of your users may use cloud services on their Chromebook device, such as Google Apps, Google Drive, or Google Apps Gmail. You have planned for these individual cloud services in the [Plan for app migration or replacement](#plan-app-migrate-replace), [Plan for Google Apps Gmail to Office 365 migration](#plan-email-migrate), and [Plan for cloud storage migration](#plan-cloud-storage-migration) sections.
 
 In this section, you will create a combined list of these cloud services and then select the appropriate strategy to migrate these cloud services.
 
-### 
+### <a href="" id="identify-cloud-services-inuse"></a>
 
 **Identify cloud services currently in use**
 
-You have already identified the individual cloud services that are currently in use in your educational institution in the [Plan for app migration or replacement](#plan_app_migrate_replace), [Plan for Google Apps Gmail to Office 365 migration](#plan_email_migrate), and [Plan for cloud storage migration](#plan_cloud_storage_migration) sections. Create a unified list of these cloud services and record the following about each service:
+You have already identified the individual cloud services that are currently in use in your educational institution in the [Plan for app migration or replacement](#plan-app-migrate-replace), [Plan for Google Apps Gmail to Office 365 migration](#plan-email-migrate), and [Plan for cloud storage migration](#plan-cloud-storage-migration) sections. Create a unified list of these cloud services and record the following about each service:
 
 -   Cloud service name
 
@@ -372,7 +372,7 @@ Here is a list of reasons that describe why you might want to migrate from an ex
 
 -   **Improve storage capacity and cross-platform features.** Microsoft cloud services provide competitive storage capacity and provide more Windows-centric features than other cloud services providers. While the Microsoft cloud services user experience is highly optimized for Windows devices, Microsoft cloud services are also highly optimized for companion devices (such as iOS or Android devices).
 
-Review the list of existing cloud services that you created in the [Identify cloud services currently in use](#identify_cloud_services_inuse) section and identify the cloud services that you want to migrate to Microsoft cloud services. If you determine at the end of this task that there are no cloud services to be migrated, then skip to the [Plan for Windows device deployment](#plan_windevice_deploy) section. Also, skip the [Perform cloud services migration](#perform_cloud_services_migration) section later in this guide.
+Review the list of existing cloud services that you created in the [Identify cloud services currently in use](#identify-cloud-services-inuse) section and identify the cloud services that you want to migrate to Microsoft cloud services. If you determine at the end of this task that there are no cloud services to be migrated, then skip to the [Plan for Windows device deployment](#plan-windevice-deploy) section. Also, skip the [Perform cloud services migration](#perform-cloud-services-migration) section later in this guide.
 
 **Prioritize cloud services**
 
@@ -382,7 +382,7 @@ Assign the priority based on how critical the cloud service is to the faculty an
 
 Focus on the migration of higher priority cloud services first and put less effort into the migration of lower priority cloud services. There may be some cloud services that are unnecessary and you can remove them from your list of cloud services to migrate entirely. Record the cloud service migration priority in the list of cloud services you plan to migrate.
 
-### 
+### <a href="" id="select-cs-migrationstrat"></a>
 
 **Select cloud services migration strategy**
 
@@ -402,14 +402,14 @@ Consider the following when you create your cloud services migration strategy:
 
 -   **Overlap existing and new cloud services.** For faculty and staff, consider overlapping the existing and new cloud services (having both services available) for one business cycle (end of semester or academic year) after migration. This allows you to easily recover any data that might not have migrated successfully from the existing cloud services. At a minimum, overlap the user of existing and new cloud services until the user can verify the migration. Of course, the tradeoff for using this strategy is the cost of the existing cloud services. However, depending on when license renewal occurs, the cost may be minimal.
 
-## Plan for Windows device deployment
+## <a href="" id="plan-windevice-deploy"></a>Plan for Windows device deployment
 
 
 You need to plan for Windows device deployment to help ensure that the devices are successfully installed and configured to replace the Chromebook devices. Even if the vendor that provides the devices pre-loads Windows 10 on them, you still will need to perform other tasks.
 
 In this section you will select a Windows device deployment strategy; plan for Active Directory Domain Services (AD DS) and Azure AD services; plan for device, user, and app management; and plan for any necessary network infrastructure remediation.
 
-### 
+### <a href="" id="select-windows-device-deploy"></a>
 
 **Select a Windows device deployment strategy**
 
@@ -431,7 +431,7 @@ For each classroom that has Chromebook devices, select a combination of the foll
 
 Record the combination of Windows device deployment strategies that you selected.
 
-### 
+### <a href="" id="plan-adservices"></a>
 
 **Plan for AD DS and Azure AD services**
 
@@ -500,7 +500,7 @@ Table 5. Select on-premises AD DS, Azure AD, or hybrid
 
  
 
-### 
+### <a href="" id="plan-userdevapp-manage"></a>
 
 **Plan device, user, and app management**
 
@@ -624,7 +624,7 @@ You can use Configuration Manager and Intune in conjunction with each other to p
 
 Record the device, user, and app management products and technologies that you selected.
 
-### 
+### <a href="" id="plan-network-infra-remediation"></a>
 
 **Plan network infrastructure remediation**
 
@@ -660,21 +660,21 @@ Examine each of the following network infrastructure technologies and services a
 
     If you plan to significantly increase the number of Windows devices or you plan to run Chromebook and Windows devices side-by-side, you need to ensure that the power outlets, power strips, and other power management components can support the number of devices.
 
-At the end of this process, you may determine that no network infrastructure remediation is necessary. If so, you can skip the [Perform network infrastructure remediation](#network_infra_remediation) section of this guide.
+At the end of this process, you may determine that no network infrastructure remediation is necessary. If so, you can skip the [Perform network infrastructure remediation](#network-infra-remediation) section of this guide.
 
 ## Perform Chromebook migration
 
 
 Thus far, planning has been the primary focus. Believe it or not most of the work is now done. The rest of the Chromebook migration is just the implementation of the plan you have created.
 
-In this section you will perform the necessary steps for the Chromebook device migration. You will perform the migration based on the planning decision that you made in the [Plan Chromebook migration](#plan_migration) section earlier in this guide.
+In this section you will perform the necessary steps for the Chromebook device migration. You will perform the migration based on the planning decision that you made in the [Plan Chromebook migration](#plan-migration) section earlier in this guide.
 
 You must perform some of the steps in this section in a specific sequence. Each section has guidance about when to perform a step. You can perform other steps before, during, or after the migration. Again, each section will tell you if the sequence is important.
 
-## Perform network infrastructure remediation
+## <a href="" id="network-infra-remediation"></a>Perform network infrastructure remediation
 
 
-The first migration task is to perform any network infrastructure remediation. In the [Plan network infrastructure remediation](#plan_network_infra_remediation) section, you determined the network infrastructure remediation (if any) that you needed to perform.
+The first migration task is to perform any network infrastructure remediation. In the [Plan network infrastructure remediation](#plan-network-infra-remediation) section, you determined the network infrastructure remediation (if any) that you needed to perform.
 
 It is important that you perform any network infrastructure remediation first because the remaining migration steps are dependent on the network infrastructure. Table 7 lists the Microsoft network infrastructure products and technologies and deployment resources for each.
 
@@ -718,7 +718,7 @@ If you use network infrastructure products and technologies from other vendors,
 
 It is important that you perform AD DS and Azure AD services deployment or remediation right after you finish network infrastructure remediation. Many of the remaining migration steps are dependent on you having your identity system (AD DS or Azure AD) in place and up to necessary expectations.
 
-In the [Plan for Active Directory services](#plan_ADservices) section, you determined the AD DS and/or Azure AD deployment or remediation (if any) that needed to be performed. Table 8 list AD DS, Azure AD, and the deployment resources for both. Use the resources in this table to deploy or remediate on-premises AD DS, Azure AD, or both.
+In the [Plan for Active Directory services](#plan-adservices) section, you determined the AD DS and/or Azure AD deployment or remediation (if any) that needed to be performed. Table 8 list AD DS, Azure AD, and the deployment resources for both. Use the resources in this table to deploy or remediate on-premises AD DS, Azure AD, or both.
 
 Table 8. AD DS, Azure AD and deployment resources
 
@@ -759,7 +759,7 @@ If you decided not to migrate to AD DS or Azure AD as a part of the migration, o
 ## Prepare device, user, and app management systems
 
 
-In the [Plan device, user, and app management](#plan_userdevapp_manage) section of this guide, you selected the products and technologies that you will use to manage devices, users, and apps on Windows devices. You need to prepare your management systems prior to Windows 10 device deployment. You will use these management systems to manage the user and device settings that you selected to migrate in the [Plan for migration of user and device settings](#plan_migrate_user_device_settings) section. You need to prepare these systems prior to the migration of user and device settings.
+In the [Plan device, user, and app management](#plan-userdevapp-manage) section of this guide, you selected the products and technologies that you will use to manage devices, users, and apps on Windows devices. You need to prepare your management systems prior to Windows 10 device deployment. You will use these management systems to manage the user and device settings that you selected to migrate in the [Plan for migration of user and device settings](#plan-migrate-user-device-settings) section. You need to prepare these systems prior to the migration of user and device settings.
 
 Table 9 lists the Microsoft management systems and the deployment resources for each. Use the resources in this table to prepare (deploy or remediate) these management systems.
 
@@ -821,12 +821,12 @@ Table 9. Management systems and deployment resources
 
 If you determined that no new management system or no remediation of existing systems is necessary, you can skip this section. If you use a management system from another vendor, refer to the vendor documentation on how to perform the necessary steps.
 
-## Perform app migration or replacement
+## <a href="" id="perform-app-migration-or-replacement-"></a>Perform app migration or replacement
 
 
-In the [Plan for app migration or replacement](#plan_app_migrate_replace) section, you identified the apps currently in use on Chromebook devices and selected the Windows apps that will replace the Chromebook apps. You also performed app compatibility testing for web apps to ensure that web apps on the Chromebook devices would run on Microsoft Edge and Internet Explorer.
+In the [Plan for app migration or replacement](#plan-app-migrate-replace) section, you identified the apps currently in use on Chromebook devices and selected the Windows apps that will replace the Chromebook apps. You also performed app compatibility testing for web apps to ensure that web apps on the Chromebook devices would run on Microsoft Edge and Internet Explorer.
 
-In this step, you need to configure your management system to deploy the apps to the appropriate Windows users and devices. Table 10 lists the Microsoft management systems and the app deployment resources for each. Use the resources in this table to configure these management systems to deploy the apps that you selected in the [Plan for app migration or replacement](#plan_app_migrate_replace) section of this guide.
+In this step, you need to configure your management system to deploy the apps to the appropriate Windows users and devices. Table 10 lists the Microsoft management systems and the app deployment resources for each. Use the resources in this table to configure these management systems to deploy the apps that you selected in the [Plan for app migration or replacement](#plan-app-migrate-replace) section of this guide.
 
 Table 10. Management systems and app deployment resources
 
@@ -871,18 +871,18 @@ Table 10. Management systems and app deployment resources
 
 If you determined that no deployment of apps is necessary, you can skip this section. If you use a management system from another vendor, refer to the vendor documentation on how to perform the necessary steps.
 
-## Perform migration of user and device settings
+## <a href="" id="migrate-user-device-settings"></a>Perform migration of user and device settings
 
 
-In the [Plan for migration of user and device settings](#plan_migrate_user_device_settings) section, you determined the user and device settings that you want to migrate. You selected settings that are configured in the Google Admin Console and locally on the Chromebook device.
+In the [Plan for migration of user and device settings](#plan-migrate-user-device-settings) section, you determined the user and device settings that you want to migrate. You selected settings that are configured in the Google Admin Console and locally on the Chromebook device.
 
 Perform the user and device setting migration by using the following steps:
 
-1.  From the list of institution-wide settings that you created in the [Plan for migration of user and device settings](#plan_migrate_user_device_settings) section, configure as many as possible in your management system (such as Group Policy, Configuration Manager, or Intune).
+1.  From the list of institution-wide settings that you created in the [Plan for migration of user and device settings](#plan-migrate-user-device-settings) section, configure as many as possible in your management system (such as Group Policy, Configuration Manager, or Intune).
 
-2.  From the list of device-specific settings that you created in the [Plan for migration of user and device settings](#plan_migrate_user_device_settings) section, configure device-specific setting for higher priority settings.
+2.  From the list of device-specific settings that you created in the [Plan for migration of user and device settings](#plan-migrate-user-device-settings) section, configure device-specific setting for higher priority settings.
 
-3.  From the list of user-specific settings that you created in the [Plan for migration of user and device settings](#plan_migrate_user_device_settings) section, configure user-specific setting for higher priority settings.
+3.  From the list of user-specific settings that you created in the [Plan for migration of user and device settings](#plan-migrate-user-device-settings) section, configure user-specific setting for higher priority settings.
 
 4.  Verify that all higher-priority user and device settings have been configured in your management system.
 
@@ -891,7 +891,7 @@ If you do no want to migrate any user or device settings from the Chromebook dev
 ## Perform email migration
 
 
-In the [Plan for email migration](#plan_email_migrate) section, you identified the user mailboxes to migrate, identified the companion devices that access Google Apps Gmail, and identified the optimal timing for migration. You can perform this migration before or after you deploy the Windows devices.
+In the [Plan for email migration](#plan-email-migrate) section, you identified the user mailboxes to migrate, identified the companion devices that access Google Apps Gmail, and identified the optimal timing for migration. You can perform this migration before or after you deploy the Windows devices.
 
 Office 365 supports automated migration from Google Apps Gmail to Office 365. For more information on how to automate the migration from Google Apps Gmail to Office 365, see [Migrate Google Apps mailboxes to Office 365](http://go.microsoft.com/fwlink/p/?LinkId=690252).
 
@@ -910,7 +910,7 @@ Alternatively, if you want to migrate to Office 365 from:
 ## Perform cloud storage migration
 
 
-In the [Plan for cloud storage migration](#plan_cloud_storage_migration) section, you identified the cloud storage services currently in use, selected the Microsoft cloud storage services that you will use, and optimized your cloud storage services migration plan. You can perform the cloud storage migration before or after you deploy the Windows devices.
+In the [Plan for cloud storage migration](#plan-cloud-storage-migration) section, you identified the cloud storage services currently in use, selected the Microsoft cloud storage services that you will use, and optimized your cloud storage services migration plan. You can perform the cloud storage migration before or after you deploy the Windows devices.
 
 Manually migrate the cloud storage migration by using the following steps:
 
@@ -929,7 +929,7 @@ There are also a number of software vendors who provide software that helps auto
 ## Perform cloud services migration
 
 
-In the [Plan for cloud services migration](#plan_cloud_services)section, you identified the cloud services currently in use, selected the cloud services that you want to migrate, prioritized the cloud services to migrate, and then selected the cloud services migration strategy. You can perform the cloud services migration before or after you deploy the Windows devices.
+In the [Plan for cloud services migration](#plan-cloud-services)section, you identified the cloud services currently in use, selected the cloud services that you want to migrate, prioritized the cloud services to migrate, and then selected the cloud services migration strategy. You can perform the cloud services migration before or after you deploy the Windows devices.
 
 Migrate the cloud services that you currently use to the Microsoft cloud services that you selected. For example, you could migrate from a collaboration website to Office 365 SharePoint. Perform the cloud services migration based on the existing cloud services and the Microsoft cloud services that you selected.
 
@@ -938,7 +938,7 @@ There are also a number of software vendors who provide software that helps auto
 ## Perform Windows device deployment
 
 
-In the [Select a Windows device deployment strategy](#select_windows_device_deploy) section, you selected how you wanted to deploy Windows 10 devices. The other migration task that you designed in the [Plan for Windows device deployment](#plan_windevice_deploy) section have already been performed. Now it's time to deploy the actual devices.
+In the [Select a Windows device deployment strategy](#select-windows-device-deploy) section, you selected how you wanted to deploy Windows 10 devices. The other migration task that you designed in the [Plan for Windows device deployment](#plan-windevice-deploy) section have already been performed. Now it's time to deploy the actual devices.
 
 For example, if you selected to deploy Windows devices by each classroom, start with the first classroom and then proceed through all of the classrooms until you’ve deployed all Windows devices.
 
diff --git a/windows/plan/computer-dialog-box.md b/windows/plan/computer-dialog-box.md
index 8868744fa1..3dc13ae7b8 100644
--- a/windows/plan/computer-dialog-box.md
+++ b/windows/plan/computer-dialog-box.md
@@ -30,7 +30,7 @@ In Application Compatibility Manager (ACM), the *&lt;Computer&gt;* dialog box sh
 
 3.  Double-click the name of a computer.
 
-## Tabs in the &lt;Computer&gt; dialog box
+## <a href="" id="tabs-in-the--computer--dialog-box"></a>Tabs in the &lt;Computer&gt; dialog box
 
 
 The following table shows the information available in the *&lt;Computer&gt;* dialog box.
@@ -89,7 +89,7 @@ The following table shows the information available in the *&lt;Computer&gt;* di
 
  
 
-## Using the &lt;Computer&gt; Dialog Box
+## <a href="" id="using-the--computer--dialog-box"></a>Using the &lt;Computer&gt; Dialog Box
 
 
 In the *&lt;Computer&gt;* dialog box, you can perform the following actions:
diff --git a/windows/plan/creating-a-custom-compatibility-fix-in-compatibility-administrator.md b/windows/plan/creating-a-custom-compatibility-fix-in-compatibility-administrator.md
index 722d28be44..d7bf4169b9 100644
--- a/windows/plan/creating-a-custom-compatibility-fix-in-compatibility-administrator.md
+++ b/windows/plan/creating-a-custom-compatibility-fix-in-compatibility-administrator.md
@@ -22,10 +22,10 @@ author: TrudyHa
 
 **In this article**
 
--   [What is a Compatibility Fix?](#what_is_a_compatibility_fix_)
--   [Searching for Existing Compatibility Fixes](#searching_for_existing_compatibility_fixes)
--   [Creating a New Compatibility Fix](#creating_a_new_compatibility_fix)
--   [Related topics](#related_topics)
+-   [What is a Compatibility Fix?](#what-is-a-compatibility-fix-)
+-   [Searching for Existing Compatibility Fixes](#searching-for-existing-compatibility-fixes)
+-   [Creating a New Compatibility Fix](#creating-a-new-compatibility-fix)
+-   [Related topics](#related-topics)
 
 The Compatibility Administrator tool uses the term *fix* to describe the combination of compatibility information added to a customized database for a specific application. This combination can include single application fixes, groups of fixes that work together as a compatibility mode, and blocking and non-blocking AppHelp messages.
 
diff --git a/windows/plan/creating-a-custom-compatibility-mode-in-compatibility-administrator.md b/windows/plan/creating-a-custom-compatibility-mode-in-compatibility-administrator.md
index 661ad8bd6a..49362655f0 100644
--- a/windows/plan/creating-a-custom-compatibility-mode-in-compatibility-administrator.md
+++ b/windows/plan/creating-a-custom-compatibility-mode-in-compatibility-administrator.md
@@ -22,10 +22,10 @@ author: TrudyHa
 
 **In this article**
 
--   [What Is a Compatibility Mode?](#what_is_a_compatibility_mode_)
--   [Searching for Existing Compatibility Modes](#searching_for_existing_compatibility_modes)
--   [Creating a New Compatibility Mode](#creating_a_new_compatibility_mode)
--   [Related topics](#related_topics)
+-   [What Is a Compatibility Mode?](#what-is-a-compatibility-mode-)
+-   [Searching for Existing Compatibility Modes](#searching-for-existing-compatibility-modes)
+-   [Creating a New Compatibility Mode](#creating-a-new-compatibility-mode)
+-   [Related topics](#related-topics)
 
 Windows® provides several *compatibility modes*, groups of compatibility fixes found to resolve many common application-compatibility issues. While working with Compatibility Administrator, you might decide to group some of your individual compatibility fixes into a custom-compatibility mode, which you can then deploy and use on any of your compatibility databases.
 
diff --git a/windows/plan/creating-an-apphelp-message-in-compatibility-administrator.md b/windows/plan/creating-an-apphelp-message-in-compatibility-administrator.md
index 0f9059eb1d..a1ffaec3c3 100644
--- a/windows/plan/creating-an-apphelp-message-in-compatibility-administrator.md
+++ b/windows/plan/creating-an-apphelp-message-in-compatibility-administrator.md
@@ -22,11 +22,11 @@ author: TrudyHa
 
 **In this article**
 
--   [Blocking Versus Non-Blocking AppHelp Messages](#blocking_versus_non-blocking_apphelp_messages)
--   [Searching for Existing Compatibility Fixes](#searching_for_existing_compatibility_fixes)
--   [Creating a New AppHelp Message](#creating_a_new_apphelp_message)
--   [Issues with AppHelp Messages and Computers Running Windows 2000](#issues_with_apphelp_messages_and_computers_running_windows_2000)
--   [Related topics](#related_topics)
+-   [Blocking Versus Non-Blocking AppHelp Messages](#blocking-versus-non-blocking-apphelp-messages)
+-   [Searching for Existing Compatibility Fixes](#searching-for-existing-compatibility-fixes)
+-   [Creating a New AppHelp Message](#creating-a-new-apphelp-message)
+-   [Issues with AppHelp Messages and Computers Running Windows 2000](#issues-with-apphelp-messages-and-computers-running-windows-2000)
+-   [Related topics](#related-topics)
 
 The Compatibility Administrator tool enables you to create an AppHelp text message. This is a blocking or non-blocking message that appears when a user starts an application that you know has major functionality issues on the Windows® operating system.
 
diff --git a/windows/plan/creating-an-enterprise-environment-for-compatibility-testing.md b/windows/plan/creating-an-enterprise-environment-for-compatibility-testing.md
index d5d0587feb..e5993f73fd 100644
--- a/windows/plan/creating-an-enterprise-environment-for-compatibility-testing.md
+++ b/windows/plan/creating-an-enterprise-environment-for-compatibility-testing.md
@@ -22,11 +22,11 @@ author: TrudyHa
 
 **In this article**
 
--   [Modeling the Production Environment](#modeling_the_production_environment)
--   [Configuring the Test Environment for Automated Testing](#configuring_the_test_environment_for_automated_testing)
--   [Determining When Virtualization Is Appropriate](#determining_when_virtualization_is_appropriate)
--   [Testing Methodology](#testing_methodology)
--   [Related topics](#related_topics)
+-   [Modeling the Production Environment](#modeling-the-production-environment)
+-   [Configuring the Test Environment for Automated Testing](#configuring-the-test-environment-for-automated-testing)
+-   [Determining When Virtualization Is Appropriate](#determining-when-virtualization-is-appropriate)
+-   [Testing Methodology](#testing-methodology)
+-   [Related topics](#related-topics)
 
 The goal of the test environment is to model the operating system that you want to deploy and assess compatibility before deploying the operating system to your production environment. Your test environment is composed of computers on which the new operating system is installed. Your test environment can be a long-term investment. Consider retaining the test environment after deployment to assist in future deployment projects.
 
diff --git a/windows/plan/customizing-your-report-views.md b/windows/plan/customizing-your-report-views.md
index e41f2f89d0..725122266c 100644
--- a/windows/plan/customizing-your-report-views.md
+++ b/windows/plan/customizing-your-report-views.md
@@ -22,7 +22,7 @@ author: TrudyHa
 
 You can customize how you view your report data in Application Compatibility Manager (ACM).
 
-## Modifying the &lt;Operating\_System&gt; Reports View
+## <a href="" id="modifying-the--operating-system--reports-view"></a>Modifying the &lt;Operating\_System&gt; Reports View
 
 
 You can choose which operating systems ACM shows in the compatibility reports. For operating systems that you exclude from the reports, the data continues to be collected but ACM does not display it.
diff --git a/windows/plan/deployment-considerations-for-windows-to-go.md b/windows/plan/deployment-considerations-for-windows-to-go.md
index 8f2edec923..a7c14e1f47 100644
--- a/windows/plan/deployment-considerations-for-windows-to-go.md
+++ b/windows/plan/deployment-considerations-for-windows-to-go.md
@@ -25,23 +25,23 @@ Windows To Go does not support operating system upgrades. Windows To Go is desig
 
 The following sections discuss the boot experience, deployment methods, and tools that you can use with Windows To Go.
 
--   [Initial boot experiences](#wtg_initboot)
+-   [Initial boot experiences](#wtg-initboot)
 
--   [Image deployment and drive provisioning considerations](#wtg_imagedep)
+-   [Image deployment and drive provisioning considerations](#wtg-imagedep)
 
--   [Application installation and domain join](#wtg_appinstall)
+-   [Application installation and domain join](#wtg-appinstall)
 
--   [Management of Windows To Go using Group Policy](#BKMK_wtggp)
+-   [Management of Windows To Go using Group Policy](#bkmk-wtggp)
 
--   [Supporting booting from USB](#wtg_bootusb)
+-   [Supporting booting from USB](#wtg-bootusb)
 
--   [Updating firmware](#stg_firmware)
+-   [Updating firmware](#stg-firmware)
 
--   [Configure Windows To Go startup options](#wtg_startup)
+-   [Configure Windows To Go startup options](#wtg-startup)
 
--   [Change firmware settings](#wtg_changefirmware)
+-   [Change firmware settings](#wtg-changefirmware)
 
-## Initial boot experiences
+## <a href="" id="wtg-initboot"></a>Initial boot experiences
 
 
 The following diagrams illustrate the two different methods you could use to provide Windows To Go drives to your users. The experiences differ depending on whether the user will be booting the device initially on-premises or off-premises:
@@ -61,7 +61,7 @@ Applying BitLocker Drive Encryption to the drives before provisioning is a much
 
 DirectAccess can be used to ensure that the user can login with their domain credentials without needing a local account. For instructions on setting up a DirectAccess solution, for a small pilot deployment see [Deploy a Single Remote Access Server using the Getting Started Wizard](http://go.microsoft.com/fwlink/p/?LinkId=619077) for a larger scale deployment, see [Deploy Remote Access in an Enterprise](http://go.microsoft.com/fwlink/p/?LinkId=619078). If you do not want to use DirectAccess as an alternative users could log on using a local user account on the Windows To Go workspace and then use a virtual private network for remote access to your organizational network.
 
-### Image deployment and drive provisioning considerations
+### <a href="" id="wtg-imagedep"></a>Image deployment and drive provisioning considerations
 
 The Image Deployment process can be accomplished either by a centralized IT process for your organization or by individual users creating their own Windows To Go workspaces. You must have local Administrator access and access to a Windows 10 Enterprise or Windows 10 Education image to create a Windows To Go workspace, or you must be using System Center Configuration Manager 2012 Service Pack 1 or later to distribute Windows To Go workspaces to users. The image deployment process takes a blank USB drive and a Windows 10 Enterprise image (WIM) and turns it into a Windows To Go drive.
 
@@ -226,11 +226,11 @@ The following list of commonly used Wi-Fi network adapters that are not supporte
 
 IT administrators that want to target Windows To Go images for specific systems should test their images to ensure that the necessary system drivers are in the image, especially for critical functionality like Wi-Fi that is not supported by class drivers. Some consumer devices require OEM specific driver packages, which may not be available on Windows Update. For more information on how to add a driver to a Windows Image, please refer to the [Basic Windows Deployment Step-by-Step Guide](http://go.microsoft.com/fwlink/p/?LinkId=619079).
 
-### Application installation and domain join
+### <a href="" id="wtg-appinstall"></a>Application installation and domain join
 
 Unless you are using a customized Windows image that includes unattended installation settings, the initial Windows To Go workspace will not be domain joined and will not contain applications. This is exactly like a new installation of Windows on a desktop or laptop computer. When planning your deployment, you should develop methods to join Windows to Go drives to the domain and install the standard applications that users in your organization require. These methods probably will be similar to the ones used for setting up desktop and laptop computers with domain privileges and applications
 
-### Management of Windows To Go using Group Policy
+### <a href="" id="bkmk-wtggp"></a>Management of Windows To Go using Group Policy
 
 In general, management of Windows To Go workspaces is same as that for desktop and laptop computers. There are Windows To Go specific Group Policy settings that should be considered as part of Windows To Go deployment. Windows To Go Group Policy settings are located at `\\Computer Configuration\Administrative Templates\Windows Components\Portable Operating System\` in the Local Group Policy Editor.
 
@@ -262,7 +262,7 @@ The use of the Store on Windows To Go workspaces that are running Windows 8 can
 
      
 
-## Supporting booting from USB
+## <a href="" id="wtg-bootusb"></a>Supporting booting from USB
 
 
 The biggest hurdle for a user wanting to use Windows To Go is configuring their computer to boot from USB. This is traditionally done by entering the firmware and configuring the appropriate boot order options. To ease the process of making the firmware modifications required for Windows To Go, Windows includes a feature named **Windows To Go Startup Options** that allows a user to configure their computer to boot from USB from within Windows—without ever entering their firmware, as long as their firmware supports booting from USB.
@@ -274,7 +274,7 @@ Enabling a system to always boot from USB first has implications that you should
 
 If you are going to be using a Windows 7 computer as a host-PC, see the wiki article [Tips for configuring your BIOS settings to work with Windows To Go](http://go.microsoft.com/fwlink/p/?LinkID=618951).
 
-### Roaming between different firmware types
+### <a href="" id="stg-firmware"></a>Roaming between different firmware types
 
 Windows supports two types of PC firmware: Unified Extensible Firmware Interface (UEFI), which is the new standard, and legacy BIOS firmware, which was used in most PCs shipping with Windows 7 or earlier version of Windows. Each firmware type has completely different Windows boot components that are incompatible with each other. Beyond the different boot components, Windows supports different partition styles and layout requirements for each type of firmware as shown in the following diagrams.
 
@@ -288,7 +288,7 @@ To enable booting Windows To Go on both types of firmware, a new disk layout is
 
 This is the only supported disk configuration for Windows To Go. With this disk configuration, a single Windows To Go drive can be booted on computers with UEFI and legacy BIOS firmware.
 
-### Configure Windows To Go startup options
+### <a href="" id="wtg-startup"></a>Configure Windows To Go startup options
 
 Windows To Go Startup Options is a setting available on Windows 10-based PCs that enables the computer to be booted from a USB without manually changing the firmware settings of the PC. To configure Windows To Go Startup Options you must have administrative rights on the computer and the **Windows To Go Default Startup Options** Group Policy setting must not be configured.
 
@@ -307,7 +307,7 @@ Windows To Go Startup Options is a setting available on Windows 10-based PCs th
 
 3.  Click **Save Changes**. If the User Account Control dialog box is displayed, confirm that the action it displays is what you want, and then click **Yes**.
 
-### Change firmware settings
+### <a href="" id="wtg-changefirmware"></a>Change firmware settings
 
 If you choose to not use the Windows To Go startup options or are using a PC running Windows 7 as your host computer you will need to manually configure the firmware settings. The process used to accomplish this will depend on the firmware type and manufacturer. If your host computer is protected by BitLocker and running Windows 7 you should suspend BitLocker before making the change to the firmware settings. After the firmware settings have been successfully reconfigured, resume BitLocker protection. If you do not suspend BitLocker first, BitLocker will assume that the computer has been tampered with and will boot into BitLocker recovery mode.
 
diff --git a/windows/plan/device-dialog-box.md b/windows/plan/device-dialog-box.md
index 37929da162..401b831c3b 100644
--- a/windows/plan/device-dialog-box.md
+++ b/windows/plan/device-dialog-box.md
@@ -30,7 +30,7 @@ In Application Compatibility Manager (ACM), the *&lt;Device&gt;* dialog box show
 
 3.  Double-click the name of a device.
 
-## Tabs in the &lt;Device&gt; dialog box
+## <a href="" id="tabs-in-the--device--dialog-box"></a>Tabs in the &lt;Device&gt; dialog box
 
 
 The following table shows the information available in the *&lt;Device&gt;* dialog box.
@@ -70,7 +70,7 @@ The following table shows the information available in the *&lt;Device&gt;* dial
 
  
 
-## Using the &lt;Device&gt; Dialog Box
+## <a href="" id="using-the--device--dialog-box"></a>Using the &lt;Device&gt; Dialog Box
 
 
 In the *&lt;Device&gt;* dialog box, you can perform the following actions:
diff --git a/windows/plan/identifying-computers-for-inventory-collection.md b/windows/plan/identifying-computers-for-inventory-collection.md
index 7161dbdfb1..316e985187 100644
--- a/windows/plan/identifying-computers-for-inventory-collection.md
+++ b/windows/plan/identifying-computers-for-inventory-collection.md
@@ -22,12 +22,12 @@ author: TrudyHa
 
 **In this article**
 
--   [Managed and Unmanaged Environments](#BMK_ManagedUnmanaged)
--   [Role-Based Applications](#BMK_RolebasedApplications)
--   [Software Distribution](#BMK_SoftwareDistribution)
--   [Geographic Distribution](#BMK_GeographicDistribution)
--   [Computer Types](#BMK_ComputerTypes)
--   [Related topics](#related_topics)
+-   [Managed and Unmanaged Environments](#bmk-managedunmanaged)
+-   [Role-Based Applications](#bmk-rolebasedapplications)
+-   [Software Distribution](#bmk-softwaredistribution)
+-   [Geographic Distribution](#bmk-geographicdistribution)
+-   [Computer Types](#bmk-computertypes)
+-   [Related topics](#related-topics)
 
 An inventory-collector package gathers inventory data from the computers on which it is installed. This data includes the following:
 
@@ -41,17 +41,17 @@ To generate a complete inventory and obtain a comprehensive view of your organiz
 
 If you decide to deploy inventory-collector packages to representative subsets of computers in your organization, consider the following:
 
--   [Managed and Unmanaged Environments](#BMK_ManagedUnmanaged)
+-   [Managed and Unmanaged Environments](#bmk-managedunmanaged)
 
--   [Role-Based Applications](#BMK_RolebasedApplications)
+-   [Role-Based Applications](#bmk-rolebasedapplications)
 
--   [Software Distribution](#BMK_SoftwareDistribution)
+-   [Software Distribution](#bmk-softwaredistribution)
 
--   [Geographic Distribution](#BMK_GeographicDistribution)
+-   [Geographic Distribution](#bmk-geographicdistribution)
 
--   [Computer Types](#BMK_ComputerTypes)
+-   [Computer Types](#bmk-computertypes)
 
-## Managed and Unmanaged Environments
+## <a href="" id="bmk-managedunmanaged"></a>Managed and Unmanaged Environments
 
 
 In your organization, you may have managed environments and unmanaged environments.
@@ -60,22 +60,22 @@ In a managed environment, IT administrators strictly control and manage the inst
 
 In an unmanaged environment, users have administrator permissions and can install applications at their own discretion. To obtain the full inventory, you must deploy your inventory-collector packages to more computers.
 
-## Role-Based Applications
+## <a href="" id="bmk-rolebasedapplications"></a>Role-Based Applications
 
 
 Your organization may use role-based applications that relate to job function. For example, accountants may use finance-related applications. Reviewing application use together with job function helps you better identify which subsets of computers need inventory-collector packages.
 
-## Software Distribution
+## <a href="" id="bmk-softwaredistribution"></a>Software Distribution
 
 
 You can distribute applications in various ways within an organization. For example, you can use Group Policy, Microsoft® IntelliMirror®, Microsoft System Center Configuration Manager, or a customized distribution method. Reviewing the policies for your software distribution system helps you better identify which subsets of computers need inventory-collector packages.
 
-## Geographic Distribution
+## <a href="" id="bmk-geographicdistribution"></a>Geographic Distribution
 
 
 While you plan for inventory collection, consider the geographic distribution of your organization, and consider application use within each region. Be sure to account for divisional applications, localized applications, and applications that are specific to the geographic location and export restrictions. Consult with technical and business leaders from each region to understand the differences and determine which subsets of computers need inventory-collector packages.
 
-## Computer Types
+## <a href="" id="bmk-computertypes"></a>Computer Types
 
 
 Computer types can be an important factor in the deployment of inventory-collector packages. The following sections describe common computer types.
diff --git a/windows/plan/integration-with-management-solutions-.md b/windows/plan/integration-with-management-solutions-.md
index 5b6ea8cd28..e8aa0648f1 100644
--- a/windows/plan/integration-with-management-solutions-.md
+++ b/windows/plan/integration-with-management-solutions-.md
@@ -18,24 +18,24 @@ author: TrudyHa
 
 **In this article**
 
--   [System Center Configuration Manager](#system_center_configuration_manager)
--   [WSUS standalone](#wsus_standalone_)
--   [Enterprise Mobility Suite: Intune](#enterprise_mobility_suite__intune)
--   [Related topics](#related_topics)
+-   [System Center Configuration Manager](#system-center-configuration-manager)
+-   [WSUS standalone](#wsus-standalone-)
+-   [Enterprise Mobility Suite: Intune](#enterprise-mobility-suite--intune)
+-   [Related topics](#related-topics)
 
 You can integrate Windows Update for Business deployments with existing management tools such as Windows Server Update Services (WSUS), System Center Configuration Manager, and Microsoft Intune.
 
 ## System Center Configuration Manager
 
 
-For Windows 10, Version 1511, organizations that already manage their systems with Configuration Manager can also have their devices configured for Windows Update for Business (in other words, set deferral policies on those machines). For Windows 10, Version 1511, such devices will be visible in the Configuration Manager console, however they will appear with a detection state of “Unknown”.
+For Windows 10, version 1511, organizations that already manage their systems with Configuration Manager can also have their devices configured for Windows Update for Business (in other words, set deferral policies on those machines). For Windows 10, version 1511, such devices will be visible in the Configuration Manager console, however they will appear with a detection state of “Unknown”.
 
 ![figure 1](images/wuforbusiness-fig10-sccmconsole.png)
 
-## WSUS standalone
+## <a href="" id="wsus-standalone-"></a>WSUS standalone
 
 
-For Windows 10, Version 1511, you cannot configure devices for both Windows Update for Business *and* to receive updates from WSUS. If both group policies are set (for both deferrals as well as WSUS scanning), Windows Update for Business settings will NOT be respected and devices will continue to scan against WSUS.
+For Windows 10, version 1511, you cannot configure devices for both Windows Update for Business *and* to receive updates from WSUS. If both group policies are set (for both deferrals as well as WSUS scanning), Windows Update for Business settings will NOT be respected and devices will continue to scan against WSUS.
 
 ## Enterprise Mobility Suite: Intune
 
diff --git a/windows/plan/operatingsystem---application-report.md b/windows/plan/operatingsystem---application-report.md
index b784962421..b23b7523f7 100644
--- a/windows/plan/operatingsystem---application-report.md
+++ b/windows/plan/operatingsystem---application-report.md
@@ -46,7 +46,7 @@ The **&lt;OperatingSystem&gt; - Application Report** screen shows the following
 
 2.  In the **Quick Reports** pane, under an operating system heading, click **Applications**.
 
-## Using the &lt;OperatingSystem&gt; - Application Report Screen
+## <a href="" id="using-the--operatingsystem----application-report-screen"></a>Using the &lt;OperatingSystem&gt; - Application Report Screen
 
 
 On the **&lt;OperatingSystem&gt; - Application Report** screen, you can perform the following actions:
diff --git a/windows/plan/operatingsystem---computer-report.md b/windows/plan/operatingsystem---computer-report.md
index d54c6212c6..3bfea9a20a 100644
--- a/windows/plan/operatingsystem---computer-report.md
+++ b/windows/plan/operatingsystem---computer-report.md
@@ -34,7 +34,7 @@ The **&lt;OperatingSystem&gt; - Computer Report** screen shows the following inf
 
 2.  In the **Quick Reports** pane, under an operating system heading, click **Computers**.
 
-## Using the &lt;OperatingSystem&gt; - Computer Report Screen
+## <a href="" id="using-the--operatingsystem----computer-report-screen"></a>Using the &lt;OperatingSystem&gt; - Computer Report Screen
 
 
 On the **&lt;OperatingSystem&gt; - Computer Report** screen, you can perform the following actions:
diff --git a/windows/plan/operatingsystem---device-report.md b/windows/plan/operatingsystem---device-report.md
index 434b34487b..93ddd7cec8 100644
--- a/windows/plan/operatingsystem---device-report.md
+++ b/windows/plan/operatingsystem---device-report.md
@@ -36,7 +36,7 @@ The **&lt;OperatingSystem&gt; - Device Report** screen shows the following infor
 
 2.  In the **Quick Reports** pane, under an operating system heading, click **Devices**.
 
-## Using the &lt;OperatingSystem&gt; - Device Report Screen
+## <a href="" id="using-the--operatingsystem----device-report-screen"></a>Using the &lt;OperatingSystem&gt; - Device Report Screen
 
 
 On the **&lt;OperatingSystem&gt; - Device Report** screen, you can:
diff --git a/windows/plan/prepare-your-organization-for-windows-to-go.md b/windows/plan/prepare-your-organization-for-windows-to-go.md
index 49b177a81d..d0eb68f7b9 100644
--- a/windows/plan/prepare-your-organization-for-windows-to-go.md
+++ b/windows/plan/prepare-your-organization-for-windows-to-go.md
@@ -18,15 +18,15 @@ author: TrudyHa
 
 **In this article**
 
--   [What is Windows To Go?](#what_is_windows_to_go_)
--   [Usage scenarios](#usage_scenarios)
--   [Infrastructure considerations](#infrastructure_considerations)
--   [Activation considerations](#activation_considerations)
--   [Organizational unit structure and use of Group Policy Objects](#organizational_unit_structure_and_use_of_group_policy_objects)
--   [Computer account management](#computer_account_management)
--   [User account and data management](#user_account_and_data_management)
--   [Remote connectivity](#remote_connectivity)
--   [Related topics](#related_topics)
+-   [What is Windows To Go?](#what-is-windows-to-go-)
+-   [Usage scenarios](#usage-scenarios)
+-   [Infrastructure considerations](#infrastructure-considerations)
+-   [Activation considerations](#activation-considerations)
+-   [Organizational unit structure and use of Group Policy Objects](#organizational-unit-structure-and-use-of-group-policy-objects)
+-   [Computer account management](#computer-account-management)
+-   [User account and data management](#user-account-and-data-management)
+-   [Remote connectivity](#remote-connectivity)
+-   [Related topics](#related-topics)
 
 The following information is provided to help you plan and design a new deployment of a Windows To Go in your production environment. It provides answers to the “what”, “why”, and “when” questions an IT professional might have when planning to deploy Windows To Go.
 
diff --git a/windows/plan/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md b/windows/plan/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md
index 88498f566b..2ae7930a08 100644
--- a/windows/plan/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md
+++ b/windows/plan/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md
@@ -22,12 +22,12 @@ author: TrudyHa
 
 **In this article**
 
--   [Querying by Using the Program Properties Tab](#querying_by_using_the_program_properties_tab)
--   [Querying by Using the Fix Properties Tab](#querying_by_using_the_fix_properties_tab)
--   [Querying by Using the Fix Description Tab](#querying_by_using_the_fix_description_tab)
--   [Querying by Using the Fix Description Tab](#querying_by_using_the_fix_description_tab)
--   [Exporting Your Search Results](#exporting_your_search_results)
--   [Related topics](#related_topics)
+-   [Querying by Using the Program Properties Tab](#querying-by-using-the-program-properties-tab)
+-   [Querying by Using the Fix Properties Tab](#querying-by-using-the-fix-properties-tab)
+-   [Querying by Using the Fix Description Tab](#querying-by-using-the-fix-description-tab)
+-   [Querying by Using the Fix Description Tab](#querying-by-using-the-fix-description-tab)
+-   [Exporting Your Search Results](#exporting-your-search-results)
+-   [Related topics](#related-topics)
 
 You can access the Query tool from within Compatibility Administrator. The Query tool provides the same functionality as using the Search feature.
 
diff --git a/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md b/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md
index 0541523ece..bb0891ee24 100644
--- a/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md
+++ b/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md
@@ -18,11 +18,11 @@ author: TrudyHa
 
 **In this article**
 
--   [Backup and restore](#backup_and_restore)
+-   [Backup and restore](#backup-and-restore)
 -   [BitLocker](#bitlocker)
--   [Disk discovery and data leakage](#disk_discovery_and_data_leakage)
--   [Security certifications for Windows To Go](#security_certifications_for_windows_to_go)
--   [Related topics](#related_topics)
+-   [Disk discovery and data leakage](#disk-discovery-and-data-leakage)
+-   [Security certifications for Windows To Go](#security-certifications-for-windows-to-go)
+-   [Related topics](#related-topics)
 
 One of the most important requirements to consider when you plan your Windows To Go deployment is to ensure that the data, content, and resources you work with in the Windows To Go workspace is protected and secure.
 
@@ -41,7 +41,7 @@ We recommend that you use BitLocker with your Windows To Go drives to protect th
 You can enable BitLocker while using the Windows To Go Creator wizard as part of the drive provisioning process before first use; or it can be enabled afterward by the user from within the Windows To Go workspace.
 
 **Tip**  
-If the Windows To Go Creator wizard is not able to enable BitLocker, see [Why can't I enable BitLocker from Windows To Go Creator?](windows-to-go-frequently-asked-questions.md#wtg_faq_blfail)
+If the Windows To Go Creator wizard is not able to enable BitLocker, see [Why can't I enable BitLocker from Windows To Go Creator?](windows-to-go-frequently-asked-questions.md#wtg-faq-blfail)
 
  
 
diff --git a/windows/plan/settings-dialog-box---preferences-tab.md b/windows/plan/settings-dialog-box---preferences-tab.md
index f0849a0e99..faf33d73e4 100644
--- a/windows/plan/settings-dialog-box---preferences-tab.md
+++ b/windows/plan/settings-dialog-box---preferences-tab.md
@@ -24,14 +24,14 @@ To display the **Settings** dialog box, in Application Compatibility Manager (AC
 
 In the **Settings** dialog box, on the **Preferences** tab, use the following controls to join or leave the ACT Community, send ACT usage data to Microsoft, or be notified when there are updates available for ACT.
 
-**Yes, I want to join the ACT Community**  
+<a href="" id="yes--i-want-to-join-the-act-community"></a>**Yes, I want to join the ACT Community**  
 If this check box is selected, you are a member of the ACT Community and can share application compatibility data with other ACT users.
 
 If this check box is cleared, you still receive compatibility data from the Microsoft compatibility database, but not from other ACT users.
 
 For more information about the ACT Community, see [ACT Community Ratings and Process](act-community-ratings-and-process.md).
 
-**Send ACT usage data to Microsoft**  
+<a href="" id="send-act-usage-data-to-microsoft"></a>**Send ACT usage data to Microsoft**  
 If this check box is selected, the following ACT usage data is sent to Microsoft:
 
 -   The version of SQL Server being used by the ACT database.
@@ -46,7 +46,7 @@ If this check box is selected, the following ACT usage data is sent to Microsoft
 
 If this check box is cleared, your ACT usage data is not sent to Microsoft.
 
-**Notify me when a newer version of ACT is available (recommended)**  
+<a href="" id="notify-me-when-a-newer-version-of-act-is-available--recommended-"></a>**Notify me when a newer version of ACT is available (recommended)**  
 If this check box is selected, ACM notifies you when an update is available for ACT.
 
 ## Related topics
diff --git a/windows/plan/settings-dialog-box---settings-tab.md b/windows/plan/settings-dialog-box---settings-tab.md
index 4d9773ed8c..28bde93086 100644
--- a/windows/plan/settings-dialog-box---settings-tab.md
+++ b/windows/plan/settings-dialog-box---settings-tab.md
@@ -24,28 +24,28 @@ To display the **Settings** dialog box, in Application Compatibility Manager (AC
 
 In the **Settings** dialog box, on the **Settings** tab, use the following controls to modify the settings for your ACT database and ACT Log Processing Service.
 
-**SQL Server**  
+<a href="" id="sql-server"></a>**SQL Server**  
 Lists the database server name for the SQL Server database server that contains your ACT database.
 
 Click **Browse** to search for available database servers. A **Select Server** dialog box appears from which you can select the database server that contains your ACT database.
 
-**Database**  
+<a href="" id="database"></a>**Database**  
 Lists the database name of your ACT database.
 
-**Change**  
+<a href="" id="change"></a>**Change**  
 Opens the user interface where you can create, open, or migrate an ACT database.
 
-**This computer is configured as a Log Processing Service**  
+<a href="" id="this-computer-is-configured-as-a-log-processing-service"></a>**This computer is configured as a Log Processing Service**  
 If selected, indicates that this computer is used for the ACT Log Processing Service. Clear this check box to use a different computer to process the logs.
 
 If there is no designated ACT Log Processing Service, log processing defaults to the local computer.
 
-**Log Processing Service Account**  
+<a href="" id="log-processing-service-account"></a>**Log Processing Service Account**  
 Specifies the account information, including the account type and account credentials, to be used to start the ACT Log Processing Service.
 
 The account must have read and write access to the ACT database. For information about setting up database permissions for the ACT Log Processing Service, see [Troubleshooting ACT Database Issues](troubleshooting-act-database-issues.md).
 
-**Log Share**  
+<a href="" id="log-share"></a>**Log Share**  
 Specifies the absolute path to the ACT Log Processing Service share where log files are processed. Click **Browse** to search for a location. The **Share as** box automatically updates to show the directory name.
 
 For information about ensuring that all computers can access the share, see [Troubleshooting the ACT Log Processing Service](troubleshooting-the-act-log-processing-service.md).
diff --git a/windows/plan/setup-and-deployment.md b/windows/plan/setup-and-deployment.md
index 2bd004159d..415fa85dee 100644
--- a/windows/plan/setup-and-deployment.md
+++ b/windows/plan/setup-and-deployment.md
@@ -18,13 +18,13 @@ author: TrudyHa
 
 **In this article**
 
--   [Configure your systems to receive updates on CBB](#configure_your_systems_to_receive_updates_on_cbb)
--   [Defer OS upgrade and update deployments](#defer_OS_upgrade)
--   [Pause upgrades and updates](#pause_upgrades_and_updates)
--   [Create validation groups for deployments](#create_validation_groups_for_deployments)
--   [Peer-to-peer networking for deployments](#peer-to-peer_networking_for_deployments_)
--   [Use Group Policy to configure Windows Update Delivery Optimization](#use_group_policy_to_configure_windows_update_delivery_optimization_)
--   [Related topics](#related_topics)
+-   [Configure your systems to receive updates on CBB](#configure-your-systems-to-receive-updates-on-cbb)
+-   [Defer OS upgrade and update deployments](#defer-os-upgrade)
+-   [Pause upgrades and updates](#pause-upgrades-and-updates)
+-   [Create validation groups for deployments](#create-validation-groups-for-deployments)
+-   [Peer-to-peer networking for deployments](#peer-to-peer-networking-for-deployments-)
+-   [Use Group Policy to configure Windows Update Delivery Optimization](#use-group-policy-to-configure-windows-update-delivery-optimization-)
+-   [Related topics](#related-topics)
 
 This article describes the basic features of a Windows Update for Business deployment. Use this information to familiarize yourself with a simple deployment with a single group of machines connected to Windows Update, in addition to more complex scenarios such as the creation of Windows Update for Business validation groups that receive updates from Windows Update at different time intervals, as well as Windows Update for Business deployments integrated with existing management tools such as Windows Server Update Services (WSUS), System Center Configuration Manager, or Microsoft Intune.
 
@@ -39,7 +39,7 @@ To use Windows Update for Business, Windows 10-based devices must first be conf
 
 ![figure 3](images/wuforbusiness-fig3-mdm.png)
 
-## Defer OS upgrade and update deployments
+## <a href="" id="defer-os-upgrade"></a>Defer OS upgrade and update deployments
 
 
 Windows Update for Business allows administrators to control when upgrades and updates are deployed to their Windows 10 clients by specifying deferral windows from when they are initially made available on the Windows Update service. As mentioned, there are restrictions as to how long you can delay upgrades and updates. The following table details these restrictions, per deployment category type:
@@ -135,7 +135,7 @@ Administrators can establish validation groups to maintain a level of control ov
 
 ![figure 7](images/wuforbusiness-fig7-validationgroup.png)
 
-## Peer-to-peer networking for deployments
+## <a href="" id="peer-to-peer-networking-for-deployments-"></a>Peer-to-peer networking for deployments
 
 
 Windows Update Delivery Optimization enables Windows Update for Business enrolled devices to download Windows updates and Windows Store apps from sources other than Microsoft. With multiple devices, Delivery Optimization can reduce the amount of Internet bandwidth that is required to keep all of your Windows Update for Business enrolled systems up to date. It can also help ensure that devices get updates and apps more quickly if they have a limited or unreliable Internet connection.
@@ -156,7 +156,7 @@ Delivery Optimization configuration settings can be viewed by going to: Settings
 
 ![figure 8](images/wuforbusiness-fig8a-chooseupdates.png)
 
-## Use Group Policy to configure Windows Update Delivery Optimization
+## <a href="" id="use-group-policy-to-configure-windows-update-delivery-optimization-"></a>Use Group Policy to configure Windows Update Delivery Optimization
 
 
 You can use Group Policy to configure Windows Update Delivery Optimization. To do this, use the following steps:
diff --git a/windows/plan/troubleshooting-act-database-issues.md b/windows/plan/troubleshooting-act-database-issues.md
index 7e2111d90f..031d5e3122 100644
--- a/windows/plan/troubleshooting-act-database-issues.md
+++ b/windows/plan/troubleshooting-act-database-issues.md
@@ -22,11 +22,11 @@ author: TrudyHa
 
 **In this article**
 
--   [Connecting to a SQL Server Database](#connecting_to_a_sql_server_database)
--   [Verifying SQL Server Version](#verifying_sql_server_version)
--   [Creating an ACT Database](#creating_an_act_database)
--   [Granting ACT Database Permissions for the ACT Log Processing Service](#granting_act_database_permissions_for_the_act_log_processing_service)
--   [Related topics](#related_topics)
+-   [Connecting to a SQL Server Database](#connecting-to-a-sql-server-database)
+-   [Verifying SQL Server Version](#verifying-sql-server-version)
+-   [Creating an ACT Database](#creating-an-act-database)
+-   [Granting ACT Database Permissions for the ACT Log Processing Service](#granting-act-database-permissions-for-the-act-log-processing-service)
+-   [Related topics](#related-topics)
 
 The following solutions may help you resolve issues that are related to your Microsoft® SQL Server® database for the Application Compatibility Toolkit (ACT).
 
diff --git a/windows/plan/troubleshooting-the-act-log-processing-service.md b/windows/plan/troubleshooting-the-act-log-processing-service.md
index f4a138dc96..8b23e635e9 100644
--- a/windows/plan/troubleshooting-the-act-log-processing-service.md
+++ b/windows/plan/troubleshooting-the-act-log-processing-service.md
@@ -22,12 +22,12 @@ author: TrudyHa
 
 **In this article**
 
--   [Reviewing Files in ACT Log File Format](#reviewing_files_in_act_log_file_format)
--   [Uploading Files to the ACT Log Processing Service Share After Setting Permissions](#uploading_files_to_the_act_log_processing_service_share_after_setting_permissions)
--   [Working Around Windows Firewall on the Computer That Hosts the ACT Log Processing Service Share](#working_around_windows_firewall_on_the_computer_that_hosts_the_act_log_processing_service_share)
--   [Viewing and Assigning "Log on as a service" Permissions](#viewing_and_assigning__log_on_as_a_service__permissions)
--   [Starting the ACT Log Processing Service](#starting_the_act_log_processing_service)
--   [Related topics](#related_topics)
+-   [Reviewing Files in ACT Log File Format](#reviewing-files-in-act-log-file-format)
+-   [Uploading Files to the ACT Log Processing Service Share After Setting Permissions](#uploading-files-to-the-act-log-processing-service-share-after-setting-permissions)
+-   [Working Around Windows Firewall on the Computer That Hosts the ACT Log Processing Service Share](#working-around-windows-firewall-on-the-computer-that-hosts-the-act-log-processing-service-share)
+-   [Viewing and Assigning "Log on as a service" Permissions](#viewing-and-assigning--log-on-as-a-service--permissions)
+-   [Starting the ACT Log Processing Service](#starting-the-act-log-processing-service)
+-   [Related topics](#related-topics)
 
 The following solutions may help you resolve issues that are related to the Application Compatibility Toolkit (ACT) Log Processing Service.
 
diff --git a/windows/plan/websiteurl-dialog-box.md b/windows/plan/websiteurl-dialog-box.md
index b57ec7ab74..330b5b6aa3 100644
--- a/windows/plan/websiteurl-dialog-box.md
+++ b/windows/plan/websiteurl-dialog-box.md
@@ -30,7 +30,7 @@ In Application Compatibility Manager (ACM), the *&lt;websiteURL&gt;* dialog box
 
 3.  Double-click the URL for a website.
 
-## Using the &lt;WebsiteURL&gt; Dialog Box
+## <a href="" id="using-the--websiteurl--dialog-box"></a>Using the &lt;WebsiteURL&gt; Dialog Box
 
 
 In the *&lt;websiteURL&gt;* dialog box, you can perform the following actions:
diff --git a/windows/plan/windows-10-compatibility.md b/windows/plan/windows-10-compatibility.md
index bd313c0ef8..86f1c43f4b 100644
--- a/windows/plan/windows-10-compatibility.md
+++ b/windows/plan/windows-10-compatibility.md
@@ -18,8 +18,8 @@ author: TrudyHa
 
 **In this article**
 
--   [Recommended application testing process](#recommended_application_testing_process)
--   [Related topics](#related_topics)
+-   [Recommended application testing process](#recommended-application-testing-process)
+-   [Related topics](#related-topics)
 
 Windows 10 will be compatible with most existing PC hardware; most devices running Windows 7, Windows 8, or Windows 8.1 will meet the requirements for Windows 10.
 
diff --git a/windows/plan/windows-10-deployment-considerations.md b/windows/plan/windows-10-deployment-considerations.md
index d6002441ce..c09e9413bc 100644
--- a/windows/plan/windows-10-deployment-considerations.md
+++ b/windows/plan/windows-10-deployment-considerations.md
@@ -18,10 +18,10 @@ author: TrudyHa
 
 **In this article**
 
--   [Migration from previous Windows versions](#migration_from_previous_windows_versions)
--   [Setup of new computers](#setup_of_new_computers)
--   [Stay up to date](#stay_up_to_date)
--   [Related topics](#related_topics)
+-   [Migration from previous Windows versions](#migration-from-previous-windows-versions)
+-   [Setup of new computers](#setup-of-new-computers)
+-   [Stay up to date](#stay-up-to-date)
+-   [Related topics](#related-topics)
 
 There are new deployment options in Windows 10 that help you simplify the deployment process and automate migration of existing settings and applications.
 
diff --git a/windows/plan/windows-10-infrastructure-requirements.md b/windows/plan/windows-10-infrastructure-requirements.md
index d9398f8658..f2d31ce529 100644
--- a/windows/plan/windows-10-infrastructure-requirements.md
+++ b/windows/plan/windows-10-infrastructure-requirements.md
@@ -18,11 +18,11 @@ author: TrudyHa
 
 **In this article**
 
--   [High-level requirements](#high-level_requirements)
--   [Deployment tools](#deployment_tools)
--   [Management tools](#management_tools)
+-   [High-level requirements](#high-level-requirements)
+-   [Deployment tools](#deployment-tools)
+-   [Management tools](#management-tools)
 -   [Activation](#activation)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 There are specific infrastructure requirements to deploy and manage Windows 10 that should be in place prior to significant Windows 10 deployments within your organization.
 
diff --git a/windows/plan/windows-10-servicing-model.md b/windows/plan/windows-10-servicing-model.md
index 14a2df977f..e8eebd62bf 100644
--- a/windows/plan/windows-10-servicing-model.md
+++ b/windows/plan/windows-10-servicing-model.md
@@ -19,13 +19,13 @@ author: TrudyHa
 
 **In this article**
 
--   [Key terminology](#key_terminology)
--   [Windows 10 branch overview](#windows_10_branch_overview)
--   [Current Branch versus Current Branch for Business](#current_branch_versus_current_branch_for_business)
--   [Long-Term Servicing Branch](#long-term_servicing_branch)
--   [Windows Insider Program](#windows_insider_program)
--   [Switching between branches](#switching_between_branches)
--   [Related topics](#related_topics)
+-   [Key terminology](#key-terminology)
+-   [Windows 10 branch overview](#windows-10-branch-overview)
+-   [Current Branch versus Current Branch for Business](#current-branch-versus-current-branch-for-business)
+-   [Long-Term Servicing Branch](#long-term-servicing-branch)
+-   [Windows Insider Program](#windows-insider-program)
+-   [Switching between branches](#switching-between-branches)
+-   [Related topics](#related-topics)
 
 Windows 10 provides a new model for organizations to deploy and upgrade Windows by providing updates to features and capabilities through a continual process.
 
diff --git a/windows/plan/windows-to-go-feature-overview-scenario.md b/windows/plan/windows-to-go-feature-overview-scenario.md
index 4c02107052..56a9a7a9f0 100644
--- a/windows/plan/windows-to-go-feature-overview-scenario.md
+++ b/windows/plan/windows-to-go-feature-overview-scenario.md
@@ -20,20 +20,20 @@ Windows To Go is a feature in Windows 10 Enterprise and Windows 10 Education t
 
 PCs that meet the Windows 7 or later [certification requirements](http://go.microsoft.com/fwlink/p/?LinkId=618711) can run Windows 10 in a Windows To Go workspace, regardless of the operating system running on the PC. Windows To Go workspaces can use the same image enterprises use for their desktops and laptops and can be managed the same way. Windows To Go is not intended to replace desktops, laptops or supplant other mobility offerings. Rather, it provides support for efficient use of resources for alternative workplace scenarios. There are some additional considerations that you should keep in mind before you start to use Windows To Go:
 
--   [Differences between Windows To Go and a typical installation of Windows](#BKMK_wtgdif)
+-   [Differences between Windows To Go and a typical installation of Windows](#bkmk-wtgdif)
 
--   [Roaming with Windows To Go](#BKMK_wtgroam)
+-   [Roaming with Windows To Go](#bkmk-wtgroam)
 
--   [Prepare for Windows To Go](#wtg_prep_intro)
+-   [Prepare for Windows To Go](#wtg-prep-intro)
 
--   [Hardware considerations for Windows To Go](#wtg_hardware)
+-   [Hardware considerations for Windows To Go](#wtg-hardware)
 
 **Note**  
 Windows To Go is not supported on Windows RT.
 
  
 
-## Differences between Windows To Go and a typical installation of Windows
+## <a href="" id="bkmk-wtgdif"></a>Differences between Windows To Go and a typical installation of Windows
 
 
 Windows To Go workspace operates just like any other installation of Windows with a few exceptions. These exceptions are:
@@ -50,14 +50,14 @@ Windows To Go workspace operates just like any other installation of Windows wit
 
 -   **Upgrading a Windows To Go workspace is not supported.** Older Windows 8 or Windows 8.1 Windows To Go workspaces cannot be upgraded to Windows 10 workspaces, nor can Windows 10 Windows To Go workspaces be upgraded to future versions of Windows 10. For new versions, the workspace needs to be re-imaged with a fresh image of Windows.
 
-## Roaming with Windows To Go
+## <a href="" id="bkmk-wtgroam"></a>Roaming with Windows To Go
 
 
 Windows To Go drives can be booted on multiple computers. When a Windows To Go workspace is first booted on a host computer it will detect all hardware on the computer and install any needed drivers. When the Windows To Go workspace is subsequently booted on that host computer it will be able to identify the host computer and load the correct set of drivers automatically.
 
 The applications that you want to use from the Windows To Go workspace should be tested to make sure they also support roaming. Some applications bind to the computer hardware which will cause difficulties if the workspace is being used with multiple host computers.
 
-## Prepare for Windows To Go
+## <a href="" id="wtg-prep-intro"></a>Prepare for Windows To Go
 
 
 Enterprises install Windows on a large group of computers either by using configuration management software (such as System Center Configuration Manager), or by using standard Windows deployment tools such as DiskPart and the Deployment Image Servicing and Management (DISM) tool.
@@ -83,7 +83,7 @@ What remote connectivity solution should be supported in the image if Windows To
 
 For more information about designing and planning your Windows To Go deployment, see [Prepare your organization for Windows To Go](prepare-your-organization-for-windows-to-go.md).
 
-## Hardware considerations for Windows To Go
+## <a href="" id="wtg-hardware"></a>Hardware considerations for Windows To Go
 
 
 **For USB drives**
diff --git a/windows/plan/windows-to-go-frequently-asked-questions.md b/windows/plan/windows-to-go-frequently-asked-questions.md
index f4066d339f..0d59e94106 100644
--- a/windows/plan/windows-to-go-frequently-asked-questions.md
+++ b/windows/plan/windows-to-go-frequently-asked-questions.md
@@ -18,109 +18,109 @@ author: TrudyHa
 
 The following list identifies some commonly asked questions about Windows To Go.
 
--   [What is Windows To Go?](#wtg_faq_whatis)
+-   [What is Windows To Go?](#wtg-faq-whatis)
 
--   [Does Windows To Go rely on virtualization?](#wtg_faq_virt)
+-   [Does Windows To Go rely on virtualization?](#wtg-faq-virt)
 
--   [Who should use Windows To Go?](#wtg_faq_who)
+-   [Who should use Windows To Go?](#wtg-faq-who)
 
--   [How can Windows To Go be deployed in an organization?](#wtg_faq_deploy)
+-   [How can Windows To Go be deployed in an organization?](#wtg-faq-deploy)
 
--   [Is Windows To Go supported on both USB 2.0 and USB 3.0 drives?](#wtg_faq_usbvs)
+-   [Is Windows To Go supported on both USB 2.0 and USB 3.0 drives?](#wtg-faq-usbvs)
 
--   [Is Windows To Go supported on USB 2.0 and USB 3.0 ports?](#wtg_faq_usbports)
+-   [Is Windows To Go supported on USB 2.0 and USB 3.0 ports?](#wtg-faq-usbports)
 
--   [How do I identify a USB 3.0 port?](#wtg_faq_usb3port)
+-   [How do I identify a USB 3.0 port?](#wtg-faq-usb3port)
 
--   [Does Windows To Go run faster on a USB 3.0 port?](#wtg_faq_usb3speed)
+-   [Does Windows To Go run faster on a USB 3.0 port?](#wtg-faq-usb3speed)
 
--   [Can the user self-provision Windows To Go?](#wtg_faq_selfpro)
+-   [Can the user self-provision Windows To Go?](#wtg-faq-selfpro)
 
--   [How can Windows To Go be managed in an organization?](#wtg_faq_mng)
+-   [How can Windows To Go be managed in an organization?](#wtg-faq-mng)
 
--   [How do I make my computer boot from USB?](#wtf_faq_startup)
+-   [How do I make my computer boot from USB?](#wtf-faq-startup)
 
--   [Why isn’t my computer booting from USB?](#wtg_faq_noboot)
+-   [Why isn’t my computer booting from USB?](#wtg-faq-noboot)
 
--   [What happens if I remove my Windows To Go drive while it is running?](#wtg_faq_surprise)
+-   [What happens if I remove my Windows To Go drive while it is running?](#wtg-faq-surprise)
 
--   [Can I use BitLocker to protect my Windows To Go drive?](#wtg_faq_bitlocker)
+-   [Can I use BitLocker to protect my Windows To Go drive?](#wtg-faq-bitlocker)
 
--   [Why can’t I enable BitLocker from Windows To Go Creator?](#wtg_faq_blfail)
+-   [Why can’t I enable BitLocker from Windows To Go Creator?](#wtg-faq-blfail)
 
--   [What power states does Windows To Go support?](#wtg_faq_power)
+-   [What power states does Windows To Go support?](#wtg-faq-power)
 
--   [Why is hibernation disabled in Windows To Go?](#wtg_faq_hibernate)
+-   [Why is hibernation disabled in Windows To Go?](#wtg-faq-hibernate)
 
--   [Does Windows To Go support crash dump analysis?](#wtg_faq_crashdump)
+-   [Does Windows To Go support crash dump analysis?](#wtg-faq-crashdump)
 
--   [Do “Windows To Go Startup Options” work with dual boot computers?](#wtg_faq_dualboot)
+-   [Do “Windows To Go Startup Options” work with dual boot computers?](#wtg-faq-dualboot)
 
--   [I plugged my Windows To Go drive into a running computer and I can’t see the partitions on the drive. Why not?](#wtg_faq_diskpart)
+-   [I plugged my Windows To Go drive into a running computer and I can’t see the partitions on the drive. Why not?](#wtg-faq-diskpart)
 
--   [I’m booted into Windows To Go, but I can’t browse to the internal hard drive of the host computer. Why not?](#wtg_faq_san4)
+-   [I’m booted into Windows To Go, but I can’t browse to the internal hard drive of the host computer. Why not?](#wtg-faq-san4)
 
--   [Why does my Windows To Go drive have an MBR disk format with a FAT32 system partition?](#wtg_faq_fatmbr)
+-   [Why does my Windows To Go drive have an MBR disk format with a FAT32 system partition?](#wtg-faq-fatmbr)
 
--   [Is Windows To Go secure if I use it on an untrusted machine?](#wtg_faq_malhost)
+-   [Is Windows To Go secure if I use it on an untrusted machine?](#wtg-faq-malhost)
 
--   [Does Windows To Go work with ARM processors?](#wtg_faq_arm)
+-   [Does Windows To Go work with ARM processors?](#wtg-faq-arm)
 
--   [Can I synchronize data from Windows To Go with my other computer?](#wtg_faq_datasync)
+-   [Can I synchronize data from Windows To Go with my other computer?](#wtg-faq-datasync)
 
--   [What size USB Flash Drive do I need to make a Windows To Go drive?](#wtg_faq_usbsz)
+-   [What size USB Flash Drive do I need to make a Windows To Go drive?](#wtg-faq-usbsz)
 
--   [Do I need to activate Windows To Go every time I roam?](#wtg_faq_roamact)
+-   [Do I need to activate Windows To Go every time I roam?](#wtg-faq-roamact)
 
--   [Can I use all Windows features on Windows To Go?](#wtg_faq_features)
+-   [Can I use all Windows features on Windows To Go?](#wtg-faq-features)
 
--   [Can I use all my applications on Windows To Go?](#wtg_faq_approam)
+-   [Can I use all my applications on Windows To Go?](#wtg-faq-approam)
 
--   [Does Windows To Go work slower than standard Windows?](#wtg_faq_slow)
+-   [Does Windows To Go work slower than standard Windows?](#wtg-faq-slow)
 
--   [If I lose my Windows To Go drive, will my data be safe?](#wtg_faq_safeloss)
+-   [If I lose my Windows To Go drive, will my data be safe?](#wtg-faq-safeloss)
 
--   [Can I boot Windows To Go on a Mac?](#wtg_faq_mac)
+-   [Can I boot Windows To Go on a Mac?](#wtg-faq-mac)
 
--   [Are there any APIs that allow applications to identify a Windows To Go workspace?](#wtg_faq_api)
+-   [Are there any APIs that allow applications to identify a Windows To Go workspace?](#wtg-faq-api)
 
--   [How is Windows To Go licensed?](#wtg_faq_lic)
+-   [How is Windows To Go licensed?](#wtg-faq-lic)
 
--   [Does Windows Recovery Environment work with Windows To Go? What’s the guidance for recovering a Windows To Go drive?](#wtg_faq_recovery)
+-   [Does Windows Recovery Environment work with Windows To Go? What’s the guidance for recovering a Windows To Go drive?](#wtg-faq-recovery)
 
--   [Why won’t Windows To Go work on a computer running Windows XP or Windows Vista?](#wtg_faq_oldos)
+-   [Why won’t Windows To Go work on a computer running Windows XP or Windows Vista?](#wtg-faq-oldos)
 
--   [Why does the operating system on the host computer matter?](#wtg_faq_oldos2)
+-   [Why does the operating system on the host computer matter?](#wtg-faq-oldos2)
 
--   [My host computer running Windows 7 is protected by BitLocker Drive Encryption. Why did I need to use the recovery key to unlock and reboot my host computer after using Windows To Go?](#wtg_faq_blreckey)
+-   [My host computer running Windows 7 is protected by BitLocker Drive Encryption. Why did I need to use the recovery key to unlock and reboot my host computer after using Windows To Go?](#wtg-faq-blreckey)
 
--   [I decided to stop using a drive for Windows To Go and reformatted it – why doesn’t it have a drive letter assigned and how can I fix it?](#wtg_faq_reformat)
+-   [I decided to stop using a drive for Windows To Go and reformatted it – why doesn’t it have a drive letter assigned and how can I fix it?](#wtg-faq-reformat)
 
--   [Why do I keep on getting the message “Installing devices…” when I boot Windows To Go?](#BKMK_roamconflict)
+-   [Why do I keep on getting the message “Installing devices…” when I boot Windows To Go?](#bkmk-roamconflict)
 
--   [How do I upgrade the operating system on my Windows To Go drive?](#BKMK_upgradewtg)
+-   [How do I upgrade the operating system on my Windows To Go drive?](#bkmk-upgradewtg)
 
-## What is Windows To Go?
+## <a href="" id="wtg-faq-whatis"></a>What is Windows To Go?
 
 
 Windows To Go is a feature for users of Windows 10 Enterprise and Windows 10 Education that enables users to boot a full version of Windows from external USB drives on host PCs.
 
-## Does Windows To Go rely on virtualization?
+## <a href="" id="wtg-faq-virt"></a>Does Windows To Go rely on virtualization?
 
 
 No. Windows To Go is a native instance of Windows 10 that runs from a USB device. It is just like a laptop hard drive with Windows 8 that has been put into a USB enclosure.
 
-## Who should use Windows To Go?
+## <a href="" id="wtg-faq-who"></a>Who should use Windows To Go?
 
 
 Windows To Go was designed for enterprise usage and targets scenarios such as continuance of operations, contractors, managed free seating, traveling workers, and work from home.
 
-## How can Windows To Go be deployed in an organization?
+## <a href="" id="wtg-faq-deploy"></a>How can Windows To Go be deployed in an organization?
 
 
 Windows To Go can be deployed using standard Windows deployment tools like Diskpart and DISM. The prerequisites for deploying Windows To Go are:
 
--   A Windows To Go recommended USB drive to provision; See the list of currently available USB drives at [Hardware considerations for Windows To Go](windows-to-go-feature-overview-scenario.md#wtg_hardware)
+-   A Windows To Go recommended USB drive to provision; See the list of currently available USB drives at [Hardware considerations for Windows To Go](windows-to-go-feature-overview-scenario.md#wtg-hardware)
 
 -   A Windows 10 Enterprise or Windows 10 Education image
 
@@ -128,37 +128,37 @@ Windows To Go can be deployed using standard Windows deployment tools like Diskp
 
 You can use a Windows PowerShell script to target several drives and scale your deployment for a large number of Windows To Go drives. You can also use a USB duplicator to duplicate a Windows To Go drive after it has been provisioned if you are creating a large number of drives. See the [Windows To Go Step by Step](http://go.microsoft.com/fwlink/p/?LinkId=618950) article on the TechNet wiki for a walkthrough of the drive creation process.
 
-## Is Windows To Go supported on both USB 2.0 and USB 3.0 drives?
+## <a href="" id="wtg-faq-usbvs"></a>Is Windows To Go supported on both USB 2.0 and USB 3.0 drives?
 
 
 No. Windows To Go is supported on USB 3.0 drives that are certified for Windows To Go.
 
-## Is Windows To Go supported on USB 2.0 and USB 3.0 ports?
+## <a href="" id="wtg-faq-usbports"></a>Is Windows To Go supported on USB 2.0 and USB 3.0 ports?
 
 
 Yes. Windows To Go is fully supported on either USB 2.0 ports or USB 3.0 ports on PCs certified for Windows 7 or later.
 
-## How do I identify a USB 3.0 port?
+## <a href="" id="wtg-faq-usb3port"></a>How do I identify a USB 3.0 port?
 
 
 USB 3.0 ports are usually marked blue or carry a SS marking on the side.
 
-## Does Windows To Go run faster on a USB 3.0 port?
+## <a href="" id="wtg-faq-usb3speed"></a>Does Windows To Go run faster on a USB 3.0 port?
 
 
 Yes. Because USB 3.0 offers significantly faster speeds than USB 2.0, a Windows To Go drive running on a USB 3.0 port will operate considerably faster. This speed increase applies to both drive provisioning and when the drive is being used as a workspace.
 
-## Can the user self-provision Windows To Go?
+## <a href="" id="wtg-faq-selfpro"></a>Can the user self-provision Windows To Go?
 
 
 Yes, if the user has administrator permissions they can self-provision a Windows To Go drive using the Windows To Go Creator wizard which is included in Windows 10 Enterprise and Windows 10 Education. Additionally, System Center 2012 Configuration Manager SP1 and later releases includes support for user self-provisioning of Windows To Go drives. Configuration Manager can be downloaded for evaluation from the [Microsoft TechNet Evaluation Center](http://go.microsoft.com/fwlink/p/?LinkID=618746).
 
-## How can Windows To Go be managed in an organization?
+## <a href="" id="wtg-faq-mng"></a>How can Windows To Go be managed in an organization?
 
 
 Windows To Go can be deployed and managed like a traditional desktop PC using standard Windows enterprise software distribution tools like System Center Configuration Manager. Computer and user settings for Windows To Go workspaces can be managed using Group Policy setting also in the same manner that you manage Group Policy settings for other PCs in your organization. Windows To Go workspaces can be configured to connect to the organizational resources remotely using DirectAccess or a virtual private network connection so that they can connect securely to your network.
 
-## How do I make my computer boot from USB?
+## <a href="" id="wtf-faq-startup"></a>How do I make my computer boot from USB?
 
 
 For host computers running Windows 10
@@ -192,7 +192,7 @@ Configuring a computer to boot from USB will cause your computer to attempt to b
 
  
 
-## Why isn’t my computer booting from USB?
+## <a href="" id="wtg-faq-noboot"></a>Why isn’t my computer booting from USB?
 
 
 Computers certified for Windows 7 and later are required to have support for USB boot. Check to see if any of the following items apply to your situation:
@@ -205,7 +205,7 @@ Computers certified for Windows 7 and later are required to have support for US
 
 If none of these items enable the computer to boot from USB, contact the hardware manufacturer for additional support.
 
-## What happens if I remove my Windows To Go drive while it is running?
+## <a href="" id="wtg-faq-surprise"></a>What happens if I remove my Windows To Go drive while it is running?
 
 
 If the Windows To Go drive is removed, the computer will freeze and the user will have 60 seconds to reinsert the Windows To Go drive. If the Windows To Go drive is reinserted into the same port it was removed from, Windows will resume at the point where the drive was removed. If the USB drive is not reinserted, or is reinserted into a different port, the host computer will turn off after 60 seconds.
@@ -215,12 +215,12 @@ You should never remove your Windows To Go drive when your workspace is running.
 
  
 
-## Can I use BitLocker to protect my Windows To Go drive?
+## <a href="" id="wtg-faq-bitlocker"></a>Can I use BitLocker to protect my Windows To Go drive?
 
 
 Yes. In Windows 8 and later, BitLocker has added support for using a password to protect operating system drives. This means that you can use a password to secure your Windows To Go workspace and you will be prompted to enter this password every time you use the Windows To Go workspace.
 
-## Why can’t I enable BitLocker from Windows To Go Creator?
+## <a href="" id="wtg-faq-blfail"></a>Why can’t I enable BitLocker from Windows To Go Creator?
 
 
 Several different Group Policies control the use of BitLocker on your organizations computers. These policies are located in the **Computer Configuration\\Policies\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption** folder of the local Group Policy editor. The folder contains three sub-folders for fixed, operating system and removable data drive types.
@@ -241,29 +241,29 @@ When you are using Windows To Go Creator, the Windows To Go drive is considered
 
 Additionally, the Windows To Go Creator will disable the BitLocker option if the drive does not have any volumes. In this situation, you should initialize the drive and create a volume using the Disk Management console before provisioning the drive with Windows To Go.
 
-## What power states does Windows To Go support?
+## <a href="" id="wtg-faq-power"></a>What power states does Windows To Go support?
 
 
 Windows To Go supports all power states except the hibernate class of power states, which include hybrid boot, hybrid sleep, and hibernate. This default behavior can be modified by using Group Policy settings to enable hibernation of the Windows To Go workspace.
 
-## Why is hibernation disabled in Windows To Go?
+## <a href="" id="wtg-faq-hibernate"></a>Why is hibernation disabled in Windows To Go?
 
 
 When a Windows To Go workspace is hibernated, it will only successfully resume on the exact same hardware. Therefore, if a Windows To Go workspace is hibernated on one computer and roamed to another, the hibernation state (and therefore user state) will be lost. To prevent this from happening, the default settings for a Windows To Go workspace disable hibernation. If you are confident that you will only attempt to resume on the same computer, you can enable hibernation using the Windows To Go Group Policy setting, **Allow hibernate (S4) when started from a Windows To Go workspace** that is located at **\\\\Computer Configuration\\Administrative Templates\\Windows Components\\Portable Operating System\\** in the Local Group Policy Editor (gpedit.msc).
 
-## Does Windows To Go support crash dump analysis?
+## <a href="" id="wtg-faq-crashdump"></a>Does Windows To Go support crash dump analysis?
 
 
 Yes. Windows 8 and later support crash dump stack analysis for both USB 2.0 and 3.0.
 
-## Do “Windows To Go Startup Options” work with dual boot computers?
+## <a href="" id="wtg-faq-dualboot"></a>Do “Windows To Go Startup Options” work with dual boot computers?
 
 
 Yes, if both operating systems are running the Windows 8 operating system. Enabling “Windows To Go Startup Options” should cause the computer to boot from the Windows To Go workspace when the drive is plugged in before the computer is turned on.
 
 If you have configured a dual boot computer with a Windows operating system and another operating system it might work occasionally and fail occasionally. Using this configuration is unsupported.
 
-## I plugged my Windows To Go drive into a running computer and I can’t see the partitions on the drive. Why not?
+## <a href="" id="wtg-faq-diskpart"></a>I plugged my Windows To Go drive into a running computer and I can’t see the partitions on the drive. Why not?
 
 
 Windows To Go Creator and the recommended deployment steps for Windows To Go set the NO\_DEFAULT\_DRIVE\_LETTER flag on the Windows To Go drive. This flag prevents Windows from automatically assigning drive letters to the partitions on the Windows To Go drive. That’s why you can’t see the partitions on the drive when you plug your Windows To Go drive into a running computer. This helps prevent accidental data leakage between the Windows To Go drive and the host computer. If you really need to access the files on the Windows To Go drive from a running computer, you can use diskmgmt.msc or diskpart to assign a drive letter.
@@ -273,7 +273,7 @@ It is strongly recommended that you do not plug your Windows To Go drive into a
 
  
 
-## I’m booted into Windows To Go, but I can’t browse to the internal hard drive of the host computer. Why not?
+## <a href="" id="wtg-faq-san4"></a>I’m booted into Windows To Go, but I can’t browse to the internal hard drive of the host computer. Why not?
 
 
 Windows To Go Creator and the recommended deployment steps for Windows To Go set SAN Policy 4 on Windows To Go drive. This policy prevents Windows from automatically mounting internal disk drives. That’s why you can’t see the internal hard drives of the host computer when you are booted into Windows To Go. This is done to prevent accidental data leakage between Windows To Go and the host system. This policy also prevents potential corruption on the host drives or data loss if the host operating system is in a hibernation state. If you really need to access the files on the internal hard drive, you can use diskmgmt.msc to mount the internal drive.
@@ -283,62 +283,62 @@ It is strongly recommended that you do not mount internal hard drives when boote
 
  
 
-## Why does my Windows To Go drive have an MBR disk format with a FAT32 system partition?
+## <a href="" id="wtg-faq-fatmbr"></a>Why does my Windows To Go drive have an MBR disk format with a FAT32 system partition?
 
 
 This is done to allow Windows To Go to boot from UEFI and legacy systems.
 
-## Is Windows To Go secure if I use it on an untrusted computer?
+## <a href="" id="wtg-faq-malhost"></a>Is Windows To Go secure if I use it on an untrusted computer?
 
 
 While you are more secure than if you use a completely untrusted operating system, you are still vulnerable to attacks from the firmware or anything that runs before Windows To Go starts. If you plug your Windows To Go drive into a running untrusted computer, your Windows To Go drive can be compromised because any malicious software that might be active on the computer can access the drive.
 
-## Does Windows To Go work with ARM processors?
+## <a href="" id="wtg-faq-arm"></a>Does Windows To Go work with ARM processors?
 
 
 No. Windows RT is a specialized version of Windows designed for ARM processors. Windows To Go is currently only supported on PCs with x86 or x64-based processors.
 
-## Can I synchronize data from Windows To Go with my other computer?
+## <a href="" id="wtg-faq-datasync"></a>Can I synchronize data from Windows To Go with my other computer?
 
 
 To get your data across all your computers, we recommend using folder redirection and client side caching to store copies of your data on a server while giving you offline access to the files you need.
 
-## What size USB flash drive do I need to make a Windows To Go drive?
+## <a href="" id="wtg-faq-usbsz"></a>What size USB flash drive do I need to make a Windows To Go drive?
 
 
 The size constraints are the same as full Windows. To ensure that you have enough space for Windows, your data, and your applications, we recommend USB drives that are a minimum of 20 GB in size.
 
-## Do I need to activate Windows To Go every time I roam?
+## <a href="" id="wtg-faq-roamact"></a>Do I need to activate Windows To Go every time I roam?
 
 
 No, Windows To Go requires volume activation; either using the [Key Management Service](http://go.microsoft.com/fwlink/p/?LinkId=619051) (KMS) server in your organization or using [Active Directory](http://go.microsoft.com/fwlink/p/?LinkId=619053) based volume activation. The Windows To Go workspace will not need to be reactivated every time you roam. KMS activates Windows on a local network, eliminating the need for individual computers to connect to Microsoft. To remain activated, KMS client computers must renew their activation by connecting to the KMS host on periodic basis. This typically occurs as soon as the user has access to the corporate network (either through a direct connection on-premises or a through remote connection using DirectAccess or a virtual private network connection), once activated the machine will not need to be activated again until the activation validity interval has passed. In a KMS configuration the activation validity interval is 180 days.
 
-## Can I use all Windows features on Windows To Go?
+## <a href="" id="wtg-faq-features"></a>Can I use all Windows features on Windows To Go?
 
 
 Yes, with some minor exceptions, you can use all Windows features with your Windows To Go workspace. The only currently unsupported features are using the Windows Recovery Environment and PC Reset & Refresh.
 
-## Can I use all my applications on Windows To Go?
+## <a href="" id="wtg-faq-approam"></a>Can I use all my applications on Windows To Go?
 
 
 Yes. Because your Windows To Go workspace is a full Windows 10 environment, all applications that work with Windows 10 should work in your Windows To Go workspace. However, any applications that use hardware binding (usually for licensing and/or digital rights management reasons) may not run when you roam your Windows To Go drive between different host computers, and you may have to use those applications on the same host computer every time.
 
-## Does Windows To Go work slower than standard Windows?
+## <a href="" id="wtg-faq-slow"></a>Does Windows To Go work slower than standard Windows?
 
 
 If you are using a USB 3.0 port and a Windows To Go certified device, there should be no perceivable difference between standard Windows and Windows To Go. However, if you are booting from a USB 2.0 port, you may notice some slowdown since USB 2.0 transfer speeds are slower than SATA speeds.
 
-## If I lose my Windows To Go drive, will my data be safe?
+## <a href="" id="wtg-faq-safeloss"></a>If I lose my Windows To Go drive, will my data be safe?
 
 
 Yes! If you enable BitLocker on your Windows To Go drive, all your data will be encrypted and protected and a malicious user will not be able to access your data without your password. If you don’t enable BitLocker, your data will be vulnerable if you lose your Windows To Go drive.
 
-## Can I boot Windows To Go on a Mac?
+## <a href="" id="wtg-faq-mac"></a>Can I boot Windows To Go on a Mac?
 
 
 We are committed to give customers a consistent and quality Windows 10 experience with Windows To Go. Windows To Go supports host devices certified for use with Windows 7 or later. Because Mac computers are not certified for use with Windows 7 or later, using Windows To Go is not supported on a Mac.
 
-## Are there any APIs that allow applications to identify a Windows To Go workspace?
+## <a href="" id="wtg-faq-api"></a>Are there any APIs that allow applications to identify a Windows To Go workspace?
 
 
 Yes. You can use a combination of identifiers to determine if the currently running operating system is a Windows To Go workspace. First, check if the **PortableOperatingSystem** property is true. When that value is true it means that the operating system was booted from an external USB device.
@@ -347,27 +347,27 @@ Next, check if the **OperatingSystemSKU** property is equal to **4** (for Window
 
 For more information, see the MSDN article on the [Win32\_OperatingSystem class](http://go.microsoft.com/fwlink/p/?LinkId=619059).
 
-## How is Windows To Go licensed?
+## <a href="" id="wtg-faq-lic"></a>How is Windows To Go licensed?
 
 
 Windows To Go allows organization to support the use of privately owned PCs at the home or office with more secure access to their organizational resources. With Windows To Go use rights under [Software Assurance](http://go.microsoft.com/fwlink/p/?LinkId=619062), an employee will be able to use Windows To Go on any company PC licensed with Software Assurance as well as from their home PC.
 
-## Does Windows Recovery Environment work with Windows To Go? What’s the guidance for recovering a Windows To Go drive?
+## <a href="" id="wtg-faq-recovery"></a>Does Windows Recovery Environment work with Windows To Go? What’s the guidance for recovering a Windows To Go drive?
 
 
 No, use of Windows Recovery Environment is not supported on Windows To Go. It is recommended that you implement user state virtualization technologies like Folder Redirection to centralize and back up user data in the data center. If any corruption occurs on a Windows To Go drive, you should re-provision the workspace.
 
-## Why won’t Windows To Go work on a computer running Windows XP or Windows Vista?
+## <a href="" id="wtg-faq-oldos"></a>Why won’t Windows To Go work on a computer running Windows XP or Windows Vista?
 
 
 Actually it might. If you have purchased a computer certified for Windows 7 or later and then installed an older operating system, Windows To Go will boot and run as expected as long as you have configured the firmware to boot from USB. However, if the computer was certified for Windows XP or Windows Vista, it might not meet the hardware requirements for Windows To Go to run. Typically computers certified for Windows Vista and earlier operating systems have less memory, less processing power, reduced video rendering, and slower USB ports.
 
-## Why does the operating system on the host computer matter?
+## <a href="" id="wtg-faq-oldos2"></a>Why does the operating system on the host computer matter?
 
 
 It doesn’t other than to help visually identify if the PC has compatible hardware. For a PC to be certified for Windows 7 or later it had to support booting from USB. If a computer cannot boot from USB there is no way that it can be used with Windows To Go. The Windows To Go workspace is a full Windows 10 environment, so all of the hardware requirements of Windows 10 with respect to processing speed, memory usage, and graphics rendering need to be supported to be assured that it will work as expected.
 
-## My host computer running Windows 7 is protected by BitLocker Drive Encryption. Why did I need to use the recovery key to unlock and reboot my host computer after using Windows To Go?
+## <a href="" id="wtg-faq-blreckey"></a>My host computer running Windows 7 is protected by BitLocker Drive Encryption. Why did I need to use the recovery key to unlock and reboot my host computer after using Windows To Go?
 
 
 The default BitLocker protection profile in Windows 7 monitors the host computer for changes to the boot order as part of protecting the computer from tampering. When you change the boot order of the host computer to enable it to boot from the Windows To Go drive, the BitLocker system measurements will reflect that change and boot into recovery mode so that the computer can be inspected if necessary.
@@ -397,7 +397,7 @@ The default BitLocker protection profile in Windows 8 or later does not monitor
 
  
 
-## I decided to stop using a drive for Windows To Go and reformatted it – why doesn’t it have a drive letter assigned and how can I fix it?
+## <a href="" id="wtg-faq-reformat"></a>I decided to stop using a drive for Windows To Go and reformatted it – why doesn’t it have a drive letter assigned and how can I fix it?
 
 
 Reformatting the drive erases the data on the drive, but doesn’t reconfigure the volume attributes. When a drive is provisioned for use as a Windows To Go drive the NODEFAULTDRIVELETTER attribute is set on the volume. To remove this attribute, use the following steps:
@@ -415,7 +415,7 @@ Reformatting the drive erases the data on the drive, but doesn’t reconfigure t
 
 4.  After selecting the disk, run the `clean` command to remove all data, formatting, and initialization information from the drive.
 
-## Why do I keep on getting the message “Installing devices…” when I boot Windows To Go?
+## <a href="" id="bkmk-roamconflict"></a>Why do I keep on getting the message “Installing devices…” when I boot Windows To Go?
 
 
 One of the challenges involved in moving the Windows To Go drive between PCs while seamlessly booting Windows with access to all of their applications and data is that for Windows to be fully functional, specific drivers need to be installed for the hardware in each machine that runs Windows. Windows 8 or later has a process called respecialize which will identify new drivers that need to be loaded for the new PC and disable drivers which are not present on the new configuration. In general this feature is reliable and efficient when roaming between PCs of widely varying hardware configurations.
@@ -424,7 +424,7 @@ In certain cases, third party drivers for different hardware models or versions
 
 This process will occur on any boot that a new driver is found and a driver conflict is detected. In some cases that will result in a respecialize progress message “Installing devices…” displaying every time that a Windows to Go drive is roamed between two PCs which require conflicting drivers.
 
-## How do I upgrade the operating system on my Windows To Go drive?
+## <a href="" id="bkmk-upgradewtg"></a>How do I upgrade the operating system on my Windows To Go drive?
 
 
 There is no support in Windows for upgrading a Windows To Go drive. Deployed Windows To Go drives with older versions of Windows will need to be re-imaged with a new version of Windows in order to transition to the new operating system version.
diff --git a/windows/plan/windows-update-for-business.md b/windows/plan/windows-update-for-business.md
index b1b949c1be..13b46e9498 100644
--- a/windows/plan/windows-update-for-business.md
+++ b/windows/plan/windows-update-for-business.md
@@ -19,10 +19,10 @@ author: TrudyHa
 **In this article**
 
 -   [Introduction](#introduction)
--   [Deploy Windows Update for Business in your organization](#deploy_windows_update_for_business_in_your_organization)
--   [Eligible devices](#eligible_devices)
--   [OS upgrades and updates](#os_upgrades_and_updates)
--   [Related topics](#related_topics)
+-   [Deploy Windows Update for Business in your organization](#deploy-windows-update-for-business-in-your-organization)
+-   [Eligible devices](#eligible-devices)
+-   [OS upgrades and updates](#os-upgrades-and-updates)
+-   [Related topics](#related-topics)
 
 Get an overview of how you can implement and deploy a Windows Update for Business solution and how to maintain enrolled systems.
 
@@ -42,7 +42,7 @@ Together, these Windows Update for Business features help reduce device manageme
 ## Deploy Windows Update for Business in your organization
 
 
-For Windows 10, Version 1511, Windows Update for Business is enabled using a set of client-side configurations, allowing you to manage how and when Windows-based devices receive updates and upgrades. These capabilities use the Windows Update service like any other Windows 10 clients, but provides controls to help businesses validate update quality as well as time their update deployments to machines through the use of Group Policy Objects. Windows Update for Business also incorporates smart peer-to-peer networking for distribution of Windows updates, which will help maintain bandwidth efficiency in the absence of a WSUS solution.
+For Windows 10, version 1511, Windows Update for Business is enabled using a set of client-side configurations, allowing you to manage how and when Windows-based devices receive updates and upgrades. These capabilities use the Windows Update service like any other Windows 10 clients, but provides controls to help businesses validate update quality as well as time their update deployments to machines through the use of Group Policy Objects. Windows Update for Business also incorporates smart peer-to-peer networking for distribution of Windows updates, which will help maintain bandwidth efficiency in the absence of a WSUS solution.
 
 ## Eligible devices
 
@@ -56,7 +56,7 @@ In Windows 10, Windows Update for Business recognizes three deployment categori
 
 -   **Upgrades**
 
-    -   Examples: Windows 10 (Build 10240) to Windows 10, Version 1511; CBB 1 to CBB 2
+    -   Examples: Windows 10 (Build 10240) to Windows 10, version 1511; CBB 1 to CBB 2
 
         **Note**  
         In the Windows 10 servicing model, new CBBs will be declared 2-3 times per year.
diff --git a/windows/whats-new/TOC.md b/windows/whats-new/TOC.md
index c880033513..3f368f2155 100644
--- a/windows/whats-new/TOC.md
+++ b/windows/whats-new/TOC.md
@@ -1,4 +1,4 @@
-# [What's new in Windows 10](index.md)
+# [What's new in Windows 10]
 ## [Change history for What's new in Windows 10](change-history-for-what-s-new-in-windows-10.md)
 ## [AppLocker](applocker.md)
 ## [BitLocker](bitlocker.md)
diff --git a/windows/whats-new/bitlocker.md b/windows/whats-new/bitlocker.md
index 48a670fb52..e319a3db06 100644
--- a/windows/whats-new/bitlocker.md
+++ b/windows/whats-new/bitlocker.md
@@ -18,7 +18,7 @@ author: TrudyHa
 
 BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers.
 
-## New features in Windows 10, Version 1511
+## New features in Windows 10, version 1511
 
 
 -   **XTS-AES encryption algorithm**. BitLocker now supports the XTS-AES encryption algorithm. XTS-AES provides additional protection from a class of attacks on encryption that rely on manipulating cipher text to cause predictable changes in plain text. BitLocker supports both 128-bit and 256-bit XTS-AES keys.
@@ -37,7 +37,7 @@ BitLocker Drive Encryption is a data protection feature that integrates with the
 ## New features in Windows 10
 
 
--   **Encrypt and recover your device with Azure Active Directory**. In addition to using a Microsoft Account, automatic [Device Encryption](http://technet.microsoft.com/library/dn306081.aspx#BKMK_Encryption) can now encrypt your devices that are joined to an Azure Active Directory domain. When the device is encrypted, the BitLocker recovery key is automatically escrowed to Azure Active Directory. This will make it easier to recover your BitLocker key online.
+-   **Encrypt and recover your device with Azure Active Directory**. In addition to using a Microsoft Account, automatic [Device Encryption](http://technet.microsoft.com/library/dn306081.aspx#bkmk-encryption) can now encrypt your devices that are joined to an Azure Active Directory domain. When the device is encrypted, the BitLocker recovery key is automatically escrowed to Azure Active Directory. This will make it easier to recover your BitLocker key online.
 
 -   **DMA port protection**. You can use the [DataProtection/AllowDirectMemoryAccess](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) MDM policy to block DMA ports when the device is starting up. Also, when a device is locked, all unused DMA ports are turned off, but any devices that are already plugged into a DMA port will continue to work. When the device is unlocked, all DMA ports are turned back on.
 
diff --git a/windows/whats-new/business-store-for-windows-10.md b/windows/whats-new/business-store-for-windows-10.md
index 06133f7f07..f68e1e67af 100644
--- a/windows/whats-new/business-store-for-windows-10.md
+++ b/windows/whats-new/business-store-for-windows-10.md
@@ -52,7 +52,7 @@ You'll need this software to work with the Store for Business.
 
 -   IT Pros that are administering Store for Business need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, Microsoft Edge, or current versions of Chrome or Firefox.
 
--   Employees using apps from Store for Business need Windows 10, Version 1511 running on a PC or mobile device.
+-   Employees using apps from Store for Business need Windows 10, version 1511 running on a PC or mobile device.
 
 Microsoft Azure Active Directory (AD) accounts for your employees:
 
@@ -153,7 +153,7 @@ Line-of-business (LOB) apps are also supported via the Business store. You can i
 
 The Business store supports two options to license apps: online and offline. **Online** licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require users and devices to connect to the Store for Business service to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center.
 
-For more information, see [Apps in the Store for Business](../manage/apps-in-the-windows-store-for-business.md#licensing_model).
+For more information, see [Apps in the Store for Business](../manage/apps-in-the-windows-store-for-business.md#licensing-model).
 
 ### Distribute apps and content
 
@@ -302,7 +302,7 @@ Store for Business is currently available in these markets.
 
 -   Vietnam
 
-## ISVs and the Store for Business
+## <a href="" id="isv-wsfb"></a>ISVs and the Store for Business
 
 
 Developers in your organization, or ISVs can create content specific to your organization. In the Store for Business, we call these app line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this:
diff --git a/windows/whats-new/change-history-for-what-s-new-in-windows-10.md b/windows/whats-new/change-history-for-what-s-new-in-windows-10.md
index 5cc7b5634a..26c3211564 100644
--- a/windows/whats-new/change-history-for-what-s-new-in-windows-10.md
+++ b/windows/whats-new/change-history-for-what-s-new-in-windows-10.md
@@ -11,7 +11,7 @@ author: TrudyHa
 # Change history for What's new in Windows 10
 
 
-This topic lists new and updated topics in the [What's new in Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
+This topic lists new and updated topics in the [What's new in Windows 10] documentation for [Windows 10 and Windows 10 Mobile](../index.md).
 
 ## February 2016
 
diff --git a/windows/whats-new/credential-guard.md b/windows/whats-new/credential-guard.md
index d293ee989d..8ffb2e5965 100644
--- a/windows/whats-new/credential-guard.md
+++ b/windows/whats-new/credential-guard.md
@@ -17,7 +17,7 @@ author: TrudyHa
 
 Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them.
 
-## New features in Windows 10, Version 1511
+## New features in Windows 10, version 1511
 
 
 -   **Credential Manager support**. Credentials that are stored with Credential Manager, including domain credentials, are protected with Credential Guard with the following considerations:
diff --git a/windows/whats-new/device-guard-overview.md b/windows/whats-new/device-guard-overview.md
index 50626e7b3f..f3732a26b0 100644
--- a/windows/whats-new/device-guard-overview.md
+++ b/windows/whats-new/device-guard-overview.md
@@ -86,7 +86,7 @@ The following table shows the hardware and software you need to install and conf
 </tr>
 <tr class="even">
 <td align="left"><p>UEFI firmware version 2.3.1 or higher and Secure Boot</p></td>
-<td align="left"><p>To verify that the firmware is using UEFI version 2.3.1 or higher and Secure Boot, you can validate it against the [System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system_fundamentals_firmware_cs_uefisecureboot_connectedstandby) Windows Hardware Compatibility Program requirement.</p></td>
+<td align="left"><p>To verify that the firmware is using UEFI version 2.3.1 or higher and Secure Boot, you can validate it against the [System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby](http://msdn.microsoft.com/library/windows/hardware/dn932807.aspx#system-fundamentals-firmware-cs-uefisecureboot-connectedstandby) Windows Hardware Compatibility Program requirement.</p></td>
 </tr>
 <tr class="odd">
 <td align="left"><p>Virtualization extensions</p></td>
@@ -110,14 +110,14 @@ The following table shows the hardware and software you need to install and conf
 </tr>
 <tr class="odd">
 <td align="left"><p>Secure firmware update process</p></td>
-<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system_fundamentals_firmware_uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
+<td align="left"><p>To verify that the firmware complies with the secure firmware update process, you can validate it against the [System.Fundamentals.Firmware.UEFISecureBoot](http://msdn.microsoft.com/library/windows/hardware/dn932805.aspx#system-fundamentals-firmware-uefisecureboot) Windows Hardware Compatibility Program requirement.</p></td>
 </tr>
 </tbody>
 </table>
 
  
 
-## Before using Device Guard in your company
+## <a href="" id="before-you-begin"></a>Before using Device Guard in your company
 
 
 Before you can successfully use Device Guard, you must set up your environment and your policies.
@@ -146,7 +146,7 @@ For the Device Guard feature, devices should only have Code Integrity pre-config
 
  
 
-### Virtualization-based security using Windows 10 Enterprise Hypervisor
+### <a href="" id="virtualization-based-security-using-windows-10-hypervisor"></a>Virtualization-based security using Windows 10 Enterprise Hypervisor
 
 Windows 10 Enterprise Hypervisor introduces new capabilities around virtual trust levels, which helps Windows 10 Enterprise services to run in a protected environment, in isolation from the running operating system. Windows 10 Enterprise virtualization-based security helps protect kernel code integrity and helps to provide credential isolation for the local security authority (LSA). Letting the Kernel Code Integrity service run as a hypervisor-hosted service increases the level of protection around the root operating system, adding additional protections against any malware that compromises the kernel layer.
 
diff --git a/windows/whats-new/enterprise-data-protection-overview.md b/windows/whats-new/enterprise-data-protection-overview.md
index ba25a51b27..d56f40ee4e 100644
--- a/windows/whats-new/enterprise-data-protection-overview.md
+++ b/windows/whats-new/enterprise-data-protection-overview.md
@@ -142,15 +142,15 @@ Privileged apps are allowed to access your enterprise data and will react differ
 
 EDP lets you decide to block, allow overrides, or audit your employee's data sharing actions. Blocking the action stops it immediately, while allowing overrides let the employee know there's a problem, but lets the employee continue to share the info, and audit just logs the action without stopping it, letting you start to see patterns of inappropriate sharing so you can take educative action.
 
-### Persistent data encryption
+### <a href="" id="persistent-data-protection"></a>Persistent data encryption
 
 EDP helps keep your enterprise data protected, even when it roams. Apps like Office and OneNote work with EDP to persist your data encryption across locations and services. For example, if an employee opens EDP-encrypted content from Outlook, edits it, and then tries to save the edited version with a different name to remove the encryption, it won’t work. Outlook automatically applies EDP to the new document, keeping the data encryption in place.
 
-### Helping prevent accidental data disclosure to public spaces
+### <a href="" id="protection-against-accidental-disclosure-to-public-spaces"></a>Helping prevent accidental data disclosure to public spaces
 
 EDP helps protect your enterprise data from being shared to public spaces, like the public cloud, accidentally. For example, if an employee stores content in the **Documents** folder, which is automatically synched with OneDrive (an app on your privileged list), then the document is encrypted locally and not synched it to the user’s personal cloud. Likewise, if other synching apps, like Dropbox™, aren’t on the privileged list, they also won’t be able to sync encrypted files to the user’s personal cloud.
 
-### Helping prevent accidental data disclosure to other devices
+### <a href="" id="protection-against-accidental-data-disclosure-to-other-devices"></a>Helping prevent accidental data disclosure to other devices
 
 EDP helps protect your enterprise data from leaking to other devices while transferring or moving between them. For example, if an employee puts corporate data on a USB key that also includes personal data, the corporate data remains encrypted even though the personal information remains open. Additionally, the encryption continues when the employee copies the encrypted content back to another corporate-managed device.
 
@@ -158,7 +158,7 @@ EDP helps protect your enterprise data from leaking to other devices while trans
 
  
 
-### Turn off EDP
+### <a href="" id="turning-off-edp"></a>Turn off EDP
 
 You can turn off all enterprise data protection and restrictions, reverting to where you were pre-EDP, with no data loss. However, turning off EDP isn't recommended. If you choose to turn it off, you can always turn it back on, but EDP won't retain your decryption and policies info.
 
diff --git a/windows/whats-new/index.md b/windows/whats-new/index.md
index ec93bfe783..bf51d2d3b9 100644
--- a/windows/whats-new/index.md
+++ b/windows/whats-new/index.md
@@ -29,7 +29,7 @@ Learn about new features in Windows 10 for IT professionals, such as Enterprise
 <tbody>
 <tr class="odd">
 <td align="left"><p>[Change history for What's new in Windows 10](change-history-for-what-s-new-in-windows-10.md)</p></td>
-<td align="left"><p>**This topic lists new and updated topics in the What's new in Windows 10 documentation for [Windows 10 and Windows 10 Mobile](../index.md).**</p></td>
+<td align="left"><p>This topic lists new and updated topics in the What's new in Windows 10 documentation for [Windows 10 and Windows 10 Mobile](../index.md).</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p>[AppLocker](applocker.md)</p></td>
diff --git a/windows/whats-new/lockdown-features-from-windows-embedded-industry-8-1.md b/windows/whats-new/lockdown-features-from-windows-embedded-industry-8-1.md
index 788a239d0b..460a0a1dde 100644
--- a/windows/whats-new/lockdown-features-from-windows-embedded-industry-8-1.md
+++ b/windows/whats-new/lockdown-features-from-windows-embedded-industry-8-1.md
@@ -46,7 +46,7 @@ Many of the lockdown features available in Windows Embedded 8.1 Industry have be
 <tr class="odd">
 <td align="left"><p>[Keyboard Filter]( http://go.microsoft.com/fwlink/p/?LinkId=626761): block hotkeys and other key combinations</p></td>
 <td align="left">[Keyboard Filter](http://go.microsoft.com/fwlink/p/?LinkId=708391)</td>
-<td align="left"><p>Keyboard filter is added in Windows 10, Version 1511. As in Windows Embedded Industry 8.1, Keyboard Filter is an optional component that can be turned on via <strong>Turn Windows Features On/Off</strong>. Keyboard Filter (in addition to the WMI configuration previously available) will be configurable through Windows Imaging and Configuration Designer (ICD) in the SMISettings path.</p></td>
+<td align="left"><p>Keyboard filter is added in Windows 10, version 1511. As in Windows Embedded Industry 8.1, Keyboard Filter is an optional component that can be turned on via <strong>Turn Windows Features On/Off</strong>. Keyboard Filter (in addition to the WMI configuration previously available) will be configurable through Windows Imaging and Configuration Designer (ICD) in the SMISettings path.</p></td>
 </tr>
 <tr class="even">
 <td align="left"><p>[Shell Launcher](http://go.microsoft.com/fwlink/p/?LinkId=626676): launch a Classic Windows application on sign-on</p></td>
diff --git a/windows/whats-new/security-auditing.md b/windows/whats-new/security-auditing.md
index 3368032ca3..aba4ed1510 100644
--- a/windows/whats-new/security-auditing.md
+++ b/windows/whats-new/security-auditing.md
@@ -18,7 +18,7 @@ author: TrudyHa
 
 Security auditing is one of the most powerful tools that you can use to maintain the integrity of your system. As part of your overall security strategy, you should determine the level of auditing that is appropriate for your environment. Auditing should identify attacks (successful or not) that pose a threat to your network, and attacks against resources that you have determined to be valuable in your risk assessment.
 
-## New features in Windows 10, Version 1511
+## New features in Windows 10, version 1511
 
 
 -   The [WindowsSecurityAuditing](http://go.microsoft.com/fwlink/p/?LinkId=690517) and [Reporting](http://go.microsoft.com/fwlink/p/?LinkId=690525) configuration service providers allow you to add security audit policies to mobile devices.
@@ -28,10 +28,10 @@ Security auditing is one of the most powerful tools that you can use to maintain
 
 In Windows 10, security auditing has added some improvements:
 
--   [New audit subcategories](#BKMK_AuditSubCat)
--   [More info added to existing audit events](#BKMK_MoreInfo)
+-   [New audit subcategories](#bkmk-auditsubcat)
+-   [More info added to existing audit events](#bkmk-moreinfo)
 
-### New audit subcategories
+### <a href="" id="bkmk-auditsubcat"></a>New audit subcategories
 
 In Windows 10, two new audit subcategories were added to the Advanced Audit Policy Configuration to provide greater granularity in audit events:
 
@@ -45,35 +45,35 @@ In Windows 10, two new audit subcategories were added to the Advanced Audit Pol
 
     A PnP audit event can be used to track down changes in system hardware and will be logged on the PC where the change took place. A list of hardware vendor IDs are included in the event.
 
-### More info added to existing audit events
+### <a href="" id="bkmk-moreinfo"></a>More info added to existing audit events
 
 With Windows 10, we've added more info to existing audit events to make it easier for you to put together a full audit trail and come away with the information you need to protect your enterprise. Improvements were made to the following audit events:
 
--   [Changed the kernel default audit policy](#BKMK_KDAL)
+-   [Changed the kernel default audit policy](#bkmk-kdal)
 
--   [Added a default process SACL to LSASS.exe](#BKMK_LSASS)
+-   [Added a default process SACL to LSASS.exe](#bkmk-lsass)
 
--   [Added new fields in the logon event](#BKMK_LOGON)
+-   [Added new fields in the logon event](#bkmk-logon)
 
--   [Added new fields in the process creation event](#BKMK_LOGON)
+-   [Added new fields in the process creation event](#bkmk-logon)
 
--   [Added new Security Account Manager events](#BKMK_SAM)
+-   [Added new Security Account Manager events](#bkmk-sam)
 
--   [Added new BCD events](#BKMK_BCD)
+-   [Added new BCD events](#bkmk-bcd)
 
--   [Added new PNP events](#BKMK_PNP)
+-   [Added new PNP events](#bkmk-pnp)
 
-### Changed the kernel default audit policy
+### <a href="" id="bkmk-kdal"></a>Changed the kernel default audit policy
 
 In previous releases, the kernel depended on the Local Security Authority (LSA) to retrieve info in some of its events. In Windows 10, the process creation events audit policy is automatically enabled until an actual audit policy is received from LSA. This results in better auditing of services that may start before LSA starts.
 
-### Added a default process SACL to LSASS.exe
+### <a href="" id="bkmk-lsass"></a>Added a default process SACL to LSASS.exe
 
 In Windows 10, a default process SACL was added to LSASS.exe to log processes attempting to access LSASS.exe. The SACL is L"S:(AU;SAFA;0x0010;;;WD)". You can enable this under **Advanced Audit Policy Configuration\\Object Access\\Audit Kernel Object**.
 
 This can help identify attacks that steal credentials from the memory of a process.
 
-### New fields in the logon event
+### <a href="" id="bkmk-logon"></a>New fields in the logon event
 
 The logon event ID 4624 has been updated to include more verbose information to make them easier to analyze. The following fields have been added to event 4624:
 
@@ -105,7 +105,7 @@ The logon event ID 4624 has been updated to include more verbose information to
 
     For more info on restricted admin mode, see [Restricted Admin mode for RDP](http://blogs.technet.com/b/kfalde/archive/2013/08/14/restricted-admin-mode-for-rdp-in-windows-8-1-2012-r2.aspx).
 
-### New fields in the process creation event
+### <a href="" id="bkmk-process"></a>New fields in the process creation event
 
 The logon event ID 4688 has been updated to include more verbose information to make them easier to analyze. The following fields have been added to event 4688:
 
@@ -133,7 +133,7 @@ The logon event ID 4688 has been updated to include more verbose information to
 
     A pointer to the actual parent process if it's different from the creator process.
 
-### New Security Account Manager events
+### <a href="" id="bkmk-sam"></a>New Security Account Manager events
 
 In Windows 10, new SAM events were added to cover SAM APIs that perform read/query operations. In previous versions of Windows, only write operations were audited. The new events are event ID 4798 and event ID 4799. The following APIs are now audited:
 
@@ -150,7 +150,7 @@ In Windows 10, new SAM events were added to cover SAM APIs that perform read/qu
 -   SamrGetMembersInAlias
 -   SamrGetUserDomainPasswordInformation
 
-### New BCD events
+### <a href="" id="bkmk-bcd"></a>New BCD events
 
 Event ID 4826 has been added to track the following changes to the Boot Configuration Database (BCD):
 
@@ -162,7 +162,7 @@ Event ID 4826 has been added to track the following changes to the Boot Configur
 -   Integrity Services
 -   Disable Winload debugging menu
 
-### New PNP events
+### <a href="" id="bkmk-pnp"></a>New PNP events
 
 Event ID 6416 has been added to track when an external device is detected through Plug and Play. One important scenario is if an external device that contains malware is inserted into a high-value machine that doesn’t expect this type of action, such as a domain controller.
 
diff --git a/windows/whats-new/security.md b/windows/whats-new/security.md
index 8250797922..1af9749c28 100644
--- a/windows/whats-new/security.md
+++ b/windows/whats-new/security.md
@@ -14,11 +14,11 @@ author: TrudyHa
 
 **In this article**
 
--   [Threat resistance](#threat_resistance)
--   [Information protection](#information_protection)
--   [Identity protection and access control](#identity_protection_and_access_control)
+-   [Threat resistance](#threat-resistance)
+-   [Information protection](#information-protection)
+-   [Identity protection and access control](#identity-protection-and-access-control)
 -   [Windows 10 hardware considerations](#hardware)
--   [Related topics](#related_topics)
+-   [Related topics](#related-topics)
 
 There are several key client security improvements Microsoft has made in Windows 10. These improvements focus on three key areas — threat resistance, information protection, and identity protection and access control. In addition to an overview of the features themselves, this article discusses the hardware requirements for each new feature and offers configuration recommendations and links to more detailed resources.
 
@@ -35,15 +35,15 @@ Today’s security threat landscape is one of aggressive and tenacious threats.
 
 Windows 10 introduces several new security features that help mitigate modern threats and protect organizations against cyber attackers, regardless of their motive. Microsoft has made significant investments in Windows 10 to make it the most malware-resistant Windows operating system to date. Rather than simply adding defenses to the operating system, as was the case in previous Windows releases, Microsoft introduces architectural changes in Windows 10 that address entire classes of threats. By fundamentally changing the way the operating system works, Microsoft seeks to make Windows 10 much more difficult for modern attackers to exploit. New features in Windows 10 include Device Guard, configurable code integrity, virtualization-based security (VBS), and improvements to Windows Defender, to name just a few. By enabling all these new features together, organizations can immediately protect themselves against the types of malware responsible for approximately 95 percent of modern attacks.
 
-### Virtualization-based security
+### <a href="" id="virtualization-security"></a>Virtualization-based security
 
 In the server world, virtualization technologies like Microsoft Hyper-V have proven extremely effective in isolating and protecting virtual machines (VMs) in the data center. Now, with those virtualization capabilities becoming more pervasive in modern client devices, there is an incredible opportunity for new Windows client security scenarios. Windows 10 can use virtualization technology to isolate core operating system services in a segregated, virtualized environment, similar to a VM. This additional level of protection, called virtualization-based security, ensures that no one can manipulate those services, even if the kernel mode of the host operating system is compromised.
 
 Just like with client Hyper-V, Windows itself can now take advantage of processors equipped with second-level address translation (SLAT) technology and virtualization extensions, such as Intel Virtualization Technology (VT) x and AMD V, to create a secure execution environment for sensitive Windows functions and data. This VBS environment protects the following services:
 
--   **Hypervisor Code Integrity (HVCI).** The HVCI service in Windows 10 determines whether code executing in kernel mode is securely designed and trustworthy. It offers Zero Day and vulnerability exploit protection capabilities by ensuring that all software running in kernel mode, including drivers, securely allocate memory and operate as they are intended. In Windows 10, kernel mode code integrity is configurable, which allows organizations to scope preboot code execution to their desired configuration. For more information about configurable code integrity in Windows 10, see the [Configurable code integrity](#config_code) section.
+-   **Hypervisor Code Integrity (HVCI).** The HVCI service in Windows 10 determines whether code executing in kernel mode is securely designed and trustworthy. It offers Zero Day and vulnerability exploit protection capabilities by ensuring that all software running in kernel mode, including drivers, securely allocate memory and operate as they are intended. In Windows 10, kernel mode code integrity is configurable, which allows organizations to scope preboot code execution to their desired configuration. For more information about configurable code integrity in Windows 10, see the [Configurable code integrity](#config-code) section.
 
--   **Local Security Authority (LSA).** The LSA service in Windows manages authentication operations, including NT LAN Manager (NTLM) and Kerberos mechanisms. In Windows 10, the Credential Guard feature isolates a portion of this service and helps mitigate the pass-the-hash and pass-the-ticket techniques by protecting domain credentials. In addition to logon credentials, this protection is extended to credentials stored within Credential Manager. For more information about Credential Guard, see the [Credential Guard](#credential_guard) section.
+-   **Local Security Authority (LSA).** The LSA service in Windows manages authentication operations, including NT LAN Manager (NTLM) and Kerberos mechanisms. In Windows 10, the Credential Guard feature isolates a portion of this service and helps mitigate the pass-the-hash and pass-the-ticket techniques by protecting domain credentials. In addition to logon credentials, this protection is extended to credentials stored within Credential Manager. For more information about Credential Guard, see the [Credential Guard](#credential-guard) section.
 
 **Note**  
 To determine whether virtualization is supported for a client machine model, simply run **systeminfo** from a command prompt window.
@@ -54,11 +54,11 @@ VBS provides the core framework for some of the most impactful mitigations Windo
 
 ### Device Guard
 
-Microsoft Device Guard is a feature set that combines system integrity–hardening features that revolutionize Windows security by taking advantage of new VBS options to protect the system core and a trust-nothing model often seen in mobile operating systems. This feature set takes advantage of the best preexisting Windows hardening features (for example, Unified Extensible Firmware Interface \[UEFI\] Secure Boot, Windows Trusted Boot), and then combines them with powerful new app control features like the VBS-powered HVCI service and configurable code integrity, which together help prevent vulnerability exploits and unauthorized apps from running on the device in both user and kernel modes. For more information about VBS in Windows 10 and the additional features that use it, see the [Virtualization-based security](#virtualization_security) section. For more information about configurable code integrity, see the [Configurable code integrity](#config_code) section.
+Microsoft Device Guard is a feature set that combines system integrity–hardening features that revolutionize Windows security by taking advantage of new VBS options to protect the system core and a trust-nothing model often seen in mobile operating systems. This feature set takes advantage of the best preexisting Windows hardening features (for example, Unified Extensible Firmware Interface \[UEFI\] Secure Boot, Windows Trusted Boot), and then combines them with powerful new app control features like the VBS-powered HVCI service and configurable code integrity, which together help prevent vulnerability exploits and unauthorized apps from running on the device in both user and kernel modes. For more information about VBS in Windows 10 and the additional features that use it, see the [Virtualization-based security](#virtualization-security) section. For more information about configurable code integrity, see the [Configurable code integrity](#config-code) section.
 
-Although Microsoft intends the Device Guard feature set to run alongside new Windows security features such as Credential Guard, it can run independently. Depending on your organization’s client resources, you can selectively choose which features make sense for your environment and device compatibility. For information about the hardware requirements for Device Guard and other Windows 10 security features, see the [Windows 10 hardware considerations](#hardware) section. For more information about Credential Guard, see the [Credential Guard](#credential_guard) section.
+Although Microsoft intends the Device Guard feature set to run alongside new Windows security features such as Credential Guard, it can run independently. Depending on your organization’s client resources, you can selectively choose which features make sense for your environment and device compatibility. For information about the hardware requirements for Device Guard and other Windows 10 security features, see the [Windows 10 hardware considerations](#hardware) section. For more information about Credential Guard, see the [Credential Guard](#credential-guard) section.
 
-For most organizations, implementing specific Device Guard functionality will depend on the role of the device and its primary user, employing more features on single-workload devices, such as kiosks, and fewer features on administrative machines over which users are allowed full control. By using this model, IT organizations can categorize users into groups that align with Device Guard security policies relating to device security and code integrity restrictions. For more information about configurable code integrity, see the [Configurable code integrity](#config_code) section.
+For most organizations, implementing specific Device Guard functionality will depend on the role of the device and its primary user, employing more features on single-workload devices, such as kiosks, and fewer features on administrative machines over which users are allowed full control. By using this model, IT organizations can categorize users into groups that align with Device Guard security policies relating to device security and code integrity restrictions. For more information about configurable code integrity, see the [Configurable code integrity](#config-code) section.
 
 New desktops and laptops will be available to expedite your Device Guard implementation efforts. Device Guard-ready devices will require the least amount of physical interaction with the actual device before it’s ready for use. Going forward, all devices will fall into one of the following three categories:
 
@@ -70,7 +70,7 @@ New desktops and laptops will be available to expedite your Device Guard impleme
 
 For more information about how to prepare for, manage, and deploy Device Guard, see the [Device Guard deployment guide](../keep-secure/device-guard-deployment-guide.md).
 
-### Configurable code integrity
+### <a href="" id="config-code"></a>Configurable code integrity
 
 *Code integrity* is the Windows component that verifies that the code Windows is running is trusted and safe. Like the operating modes found in Windows itself, Windows code integrity contains two primary components: kernel mode code integrity (KMCI) and user mode code integrity (UMCI). Microsoft has used KMCI in recent versions of Windows to prevent the Windows kernel from executing unsigned drivers. Although this approach is effective, drivers aren’t the only route malware can take to penetrate the operating system’s kernel mode space. So, for Windows 10, Microsoft has raised the standard for kernel mode code out of the box by requiring the use of security best practices regarding memory management and has provided enterprises with a way to set their own UMCI and KMCI standards.
 
@@ -109,7 +109,7 @@ Configurable code integrity is available in Windows 10 Enterprise and Windows 
 
 You can enable configurable code integrity as part of a Device Guard deployment or as a stand-alone component. In addition, you can run configurable code integrity on hardware that is compatible with the Windows 7 operating system, even if such hardware is not Device Guard ready. Code integrity policies can align with an existing application catalog, existing corporate imaging strategy, or with any other method that provides the organization’s desired levels of restriction. For more information about configurable code integrity with Device Guard, see the [Device Guard deployment guide](../keep-secure/device-guard-deployment-guide.md).
 
-### Measured Boot and remote attestation
+### <a href="" id="measured-boot-and-remote-attestation-"></a>Measured Boot and remote attestation
 
 Although software-based antimalware and antivirus solutions are effective, they have no way to detect pre–operating system resource modification or infection such as by bootkits and rootkits—malicious software that can manipulate a client before the operating system and antimalware solutions load. Bootkits and rootkits and similar software are nearly impossible to detect using software-based solutions alone, so Windows 10 uses the client’s Trusted Platform Module (TPM) and the Windows Measured Boot feature to analyze the overall boot integrity. When requested, Windows 10 reports integrity information to the Windows cloud-based device health attestation service, which can then be used in coordination with management solutions such as Intune to analyze the data and provide conditional access to resources based on the device’s health state.
 
@@ -140,7 +140,7 @@ Unlike some current DLP solutions, EDP does not require users to switch modes or
 
 In addition to EDP, Microsoft has made substantial improvements to BitLocker, including simplified manageability through Microsoft BitLocker Administration and Monitoring (MBAM), used-space-only encryption, and single sign-on (SSO) capability. For more information about BitLocker improvements in Windows 10, see the [Improvements to BitLocker](#bitlocker) section.
 
-### Enterprise Data Protection
+### <a href="" id="enterprise"></a>Enterprise Data Protection
 
 DLP systems are intended to protect sensitive corporate data through encryption and managed use while the data is in use, in motion, or at rest. Traditional DLP software is typically invasive and frustrating for users and can be complicated for administrators to configure and deploy. Windows 10 now includes an EDP feature that offers DLP capabilities and is built in and simple to use. This solution gives you the flexibility to define policies that will help determine what kind of data to protect as business data and what should be considered personal. Based on these policies, you can also choose what to do, either automatically or manually, whenever you suspect that data is about to be or has been compromised. For example, if an employee has a personal but managed device that contains business data, an IT organization could block that user from copying and pasting business data to nonbusiness documents and locations or could even selectively wipe the business data from the device at any time without affecting the personal data on the device.
 
@@ -148,7 +148,7 @@ You can configure EDP policies to encrypt and protect files automatically based
 
 To manage EDP, you use the same system management tools you probably already use to manage your Windows client computers, such as Configuration Manager and Intune. For more information about EDP, see [Enterprise data protection (EDP) overview](enterprise-data-protection-overview.md).
 
-### Improvements in BitLocker
+### <a href="" id="bitlocker"></a>Improvements in BitLocker
 
 With so many laptops stolen annually, protecting data at rest should be a top priority for any IT organization. Microsoft has provided an encryption solution called BitLocker directly in Windows since 2004. If your last encounter with BitLocker was in Windows 7, you’ll find that the manageability and SSO capabilities that were previously lacking are now included in Windows 10. These and other improvements make BitLocker one of the best choices on the marketplace for protecting data on Windows devices. Windows 10 builds on the BitLocker improvements made in the Windows 8.1 and Windows 8 operating systems to make BitLocker more manageable and to simplify its deployment even further.
 
@@ -158,7 +158,7 @@ Microsoft has made the following key improvements to BitLocker:
 
 -   **MBAM improvements.** MBAM provides a simplified management console for BitLocker administration. It also simplifies recovery requests by providing a self-service portal in which users can recover their drives without calling the help desk.
 
--   **SSO.** BitLocker for Windows 7 often required the use of a pre-boot PIN to access the protected drive’s encryption key and allow Windows to start. In Windows 10, user input-based preboot authentication (in other words, a PIN) is not required because the TPM maintains the keys. In addition, modern hardware often mitigates the cold boot attacks (for example, port-based direct memory access attacks) that have previously necessitated PIN protection. For more information to determine which cases and device types require the use of PIN protection, refer to [BitLocker Countermeasures](1f015738-3bf6-4abb-a1cd-21c04e9ef24f).
+-   **SSO.** BitLocker for Windows 7 often required the use of a pre-boot PIN to access the protected drive’s encryption key and allow Windows to start. In Windows 10, user input-based preboot authentication (in other words, a PIN) is not required because the TPM maintains the keys. In addition, modern hardware often mitigates the cold boot attacks (for example, port-based direct memory access attacks) that have previously necessitated PIN protection. For more information to determine which cases and device types require the use of PIN protection, refer to [BitLocker Countermeasures](../keep-secure/bitlocker-countermeasures.md).
 
 -   **Used-space-only encryption.** Rather than encrypting an entire hard drive, you can configure BitLocker to encrypt only the used space on a drive. This option drastically reduces the overall encryption time required.
 
@@ -171,9 +171,9 @@ Windows 10 also includes a feature called Microsoft Passport, a new 2FA mechani
 
 The biometrics factor available for Microsoft Passport is driven by another new feature in Windows 10 called Windows Hello. Windows Hello uses a variety of biometric sensors to accept different points of biometric measurement, such as the face, iris, and fingerprints, which allows organizations to choose from various options when they consider what makes the most sense for their users and devices. By combining Windows Hello with Microsoft Passport, users no longer need to remember a password to access corporate resources. For more information about Windows Hello, see the [Windows Hello](#hello) section.
 
-Finally, Windows 10 uses VBS to isolate the Windows service responsible for maintaining and brokering a user’s derived credentials (for example, Kerberos ticket, NTLM hash) through a feature called Credential Guard. In addition to service isolation, the TPM protects credential data while the machine is running and while it’s off. Credential Guard provides a comprehensive strategy to protect user-derived credentials at runtime as well as at rest, thus preventing them from being accessed and used in pass-the-hash–type attacks. For more information about Credential Guard, see the [Credential Guard](#credential_guard) section.
+Finally, Windows 10 uses VBS to isolate the Windows service responsible for maintaining and brokering a user’s derived credentials (for example, Kerberos ticket, NTLM hash) through a feature called Credential Guard. In addition to service isolation, the TPM protects credential data while the machine is running and while it’s off. Credential Guard provides a comprehensive strategy to protect user-derived credentials at runtime as well as at rest, thus preventing them from being accessed and used in pass-the-hash–type attacks. For more information about Credential Guard, see the [Credential Guard](#credential-guard) section.
 
-### Microsoft Passport
+### <a href="" id="passport"></a>Microsoft Passport
 
 Historically, companies have mitigated the risk of credential theft by implementing 2FA. In this method, a combination of something you know (for example, a PIN), something you have (traditionally a smart card or token), or possibly something about the user (for example, biometrics) strengthens the logon process. The additional factor beyond something you know requires that a credential thief acquire a physical device or, in the case of biometrics, the actual user.
 
@@ -183,7 +183,7 @@ Microsoft Passport can use the biometric information from Windows Hello or a uni
 
 In Windows 10, the physical factor of authentication is the user’s device—either his or her PC or mobile phone. By using the new phone sign-in capability which will available to Windows Insiders as a preview in early 2016, users can unlock their PC without ever touching it. Users simply enroll their phone with Microsoft Passport by pairing it with the PC via Wi-Fi or Bluetooth and install a simple-to-use application on their phone that allows them to select which PC to unlock. When selected, users can enter a PIN or their biometric login from their phone to unlock their PC.
 
-### Windows Hello
+### <a href="" id="hello"></a>Windows Hello
 
 Passwords represent a losing identity and access control mechanism. When an organization relies on password-driven Windows authentication, attackers only have to determine a single string of text to access anything on a corporate network that those credentials protect. Unfortunately, attackers can use several methods to retrieve a user’s password, making credential theft relatively easy for determined attackers. By moving to an MFA mechanism to verify user identities, organizations can remove the threats that single-factor options like passwords represent.
 
@@ -203,7 +203,7 @@ Pass the hash is the most commonly used derived credential attack today. This at
 
 Credential Guard is another new feature in Windows 10 Enterprise that employs VBS to protect domain credentials against theft, even when the host operating system is compromised. To achieve such protection, Credential Guard isolates a portion of the LSA service, which is responsible for managing authentication, inside a virtualized container. This container is similar to a VM running on a hypervisor but is extremely lightweight and contains only those files and components required to operate the LSA and other isolated services. By isolating a portion of the LSA service within this virtualized environment, credentials are protected even if the system kernel is compromised, removing the attack vector for pass the hash.
 
-For more information about the hardware requirements for Credential Guard, see the [Windows 10 hardware considerations](#hardware) section. For more information about VBS in Windows 10, see the [Virtualization-based security](#virtualization_security) section.
+For more information about the hardware requirements for Credential Guard, see the [Windows 10 hardware considerations](#hardware) section. For more information about VBS in Windows 10, see the [Virtualization-based security](#virtualization-security) section.
 
 **Note**  
 Because it requires isolated user mode and a Hyper-V hypervisor, you cannot configure Credential Guard on a VM, only on a physical computer.
@@ -212,7 +212,7 @@ Because it requires isolated user mode and a Hyper-V hypervisor, you cannot conf
 
 The Credential Guard feature is targeted at resisting the use of pass-the-hash and pass-the-ticket techniques. By employing a MFA option such as Microsoft Passport with Credential Guard, you can gain additional protection against such threats. For more in-depth information about how Credential Guard works and the specific mitigations it provides, see [Protect derived domain credentials with Credential Guard](../keep-secure/credential-guard.md).
 
-## Windows 10 hardware considerations
+## <a href="" id="hardware"></a>Windows 10 hardware considerations
 
 
 Most of the features this article describes rely on specific hardware to maximize their capabilities. By purchasing hardware that includes these features during your next purchase cycle, you will be able to take advantage of the most comprehensive client security package Windows 10 has to offer. Careful consideration about which hardware vendor and specific models to purchase is vital to the success of your organization’s client security portfolio. Table 1 contains a list of each new Windows 10 security feature and its hardware requirements.
diff --git a/windows/whats-new/trusted-platform-module.md b/windows/whats-new/trusted-platform-module.md
index 1cde0948c8..9edee75813 100644
--- a/windows/whats-new/trusted-platform-module.md
+++ b/windows/whats-new/trusted-platform-module.md
@@ -18,7 +18,7 @@ author: TrudyHa
 
 This topic for the IT professional describes new features for the Trusted Platform Module (TPM) in Windows 10.
 
-## New features in Windows 10, Version 1511
+## New features in Windows 10, version 1511
 
 
 -   Key Storage Providers (KSPs) and srvcrypt support elliptical curve cryptography (ECC).
@@ -28,12 +28,12 @@ This topic for the IT professional describes new features for the Trusted Platfo
 
 The following sections describe the new and changed functionality in the TPM for Windows 10:
 
--   [Device health attestation](#BKMK_DHA)
+-   [Device health attestation](#bkmk-dha)
 -   [Microsoft Passport](microsoft-passport.md) support
 -   [Device Guard](device-guard-overview.md) support
 -   [Credential Guard](credential-guard.md) support
 
-## Device health attestation
+## <a href="" id="bkmk-dha"></a>Device health attestation
 
 
 Device health attestation enables enterprises to establish trust based on hardware and software components of a managed device. With device heath attestation, you can configure an MDM server to query a health attestation service that will allow or deny a managed device access to a secure resource.
diff --git a/windows/whats-new/windows-spotlight.md b/windows/whats-new/windows-spotlight.md
index 304f847ce9..cf91b05b60 100644
--- a/windows/whats-new/windows-spotlight.md
+++ b/windows/whats-new/windows-spotlight.md
@@ -18,10 +18,10 @@ author: TrudyHa
 
 **In this article**
 
--   [What does Windows spotlight include?](#what_does_windows_spotlight_include_)
--   [How do you turn off Windows spotlight?](#how_do_you_turn_off_windows_spotlight_)
--   [How do you disable Windows spotlight for managed devices?](#how_do_you_disable_windows_spotlight_for_managed_devices_)
--   [Related topics](#related_topics)
+-   [What does Windows spotlight include?](#what-does-windows-spotlight-include-)
+-   [How do you turn off Windows spotlight?](#how-do-you-turn-off-windows-spotlight-)
+-   [How do you disable Windows spotlight for managed devices?](#how-do-you-disable-windows-spotlight-for-managed-devices-)
+-   [Related topics](#related-topics)
 
 Windows spotlight is an option for the lock screen background that displays different background images and occasionally offers suggestions on the lock screen. Windows spotlight is now available in Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education. For managed devices running Windows 10 Enterprise and Windows 10 Education, enterprise administrators can configure a mobile device management (MDM) or Group Policy setting to prevent users from using the Windows spotlight background.