From f9e9aeaa8b544203db7fe20f6b69cac35695032f Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 31 Jan 2018 21:28:19 +0000 Subject: [PATCH 01/13] Merged PR 5622: Merge fix-build-warning to master --- .openpublishing.publish.config.json | 18 -------------- microsoft-365/docfx.json | 37 ----------------------------- 2 files changed, 55 deletions(-) delete mode 100644 microsoft-365/docfx.json diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 7215ed2787..7c6bb4d033 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -102,24 +102,6 @@ "moniker_groups": [], "version": 0 }, - { - "docset_name": "microsoft-365", - "build_source_folder": "microsoft-365", - "build_output_subfolder": "microsoft-365", - "locale": "en-us", - "monikers": [], - "moniker_ranges": [], - "open_to_public_contributors": false, - "type_mapping": { - "Conceptual": "Content", - "ManagedReference": "Content", - "RestApi": "Content" - }, - "build_entry_point": "docs", - "template_folder": "_themes", - "moniker_groups": [], - "version": 0 - }, { "docset_name": "microsoft-edge-VSTS", "build_source_folder": "browsers/edge", diff --git a/microsoft-365/docfx.json b/microsoft-365/docfx.json deleted file mode 100644 index 585130e915..0000000000 --- a/microsoft-365/docfx.json +++ /dev/null @@ -1,37 +0,0 @@ -{ - "build": { - "content": [ - { - "files": [ - "**/*.md" - ], - "exclude": [ - "**/obj/**", - "**/includes/**", - "README.md", - "LICENSE", - "LICENSE-CODE", - "ThirdPartyNotices" - ] - } - ], - "resource": [ - { - "files": [ - "**/*.png", - "**/*.jpg" - ], - "exclude": [ - "**/obj/**", - "**/includes/**" - ] - } - ], - "overwrite": [], - "externalReference": [], - "globalMetadata": {}, - "fileMetadata": {}, - "template": [], - "dest": "microsoft-365" - } -} \ No newline at end of file From 5e05509b4974edf4696d03f657067c543b33fe67 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 31 Jan 2018 22:43:38 +0000 Subject: [PATCH 02/13] Merged PR 5629: Defender CSP - added new node OfflineScan --- windows/client-management/mdm/defender-csp.md | 10 +- windows/client-management/mdm/defender-ddf.md | 1256 +++++++++-------- .../mdm/images/provisioning-csp-defender.png | Bin 23712 -> 29644 bytes ...ew-in-windows-mdm-enrollment-management.md | 4 + 4 files changed, 648 insertions(+), 622 deletions(-) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index 36cb8e6e0f..bcab5ce598 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -7,12 +7,15 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/26/2017 +ms.date: 01/29/2018 --- # Defender CSP +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + The Windows Defender configuration service provider is used to configure various Windows Defender actions across the enterprise. The following image shows the Windows Defender configuration service provider in tree format. @@ -310,6 +313,11 @@ Node that can be used to perform signature updates for Windows Defender. Supported operations are Get and Execute. +**OfflineScan** +Added in Windows 10, next major update. OfflineScan action starts a Windows Defender offline scan on the computer where you run the command. This command causes the computer reboot and start in Windows Defender offline mode to begin the scan. + +Supported operations are Get and Execute. + ## Related topics diff --git a/windows/client-management/mdm/defender-ddf.md b/windows/client-management/mdm/defender-ddf.md index 126869323b..4077ab58af 100644 --- a/windows/client-management/mdm/defender-ddf.md +++ b/windows/client-management/mdm/defender-ddf.md @@ -7,12 +7,15 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 12/05/2017 +ms.date: 01/29/20178 --- # Defender DDF file +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + This topic shows the OMA DM device description framework (DDF) for the **Defender** configuration service provider. DDF files are used only with OMA DM provisioning XML. Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). @@ -22,648 +25,659 @@ The XML below is the current version for this CSP. ``` syntax ]> + "http://www.openmobilealliance.org/tech/DTD/DM_DDF-V1_2.dtd" + []> - 1.2 - + 1.2 + Defender ./Vendor/MSFT - - - - - - - - - - - - - - - + + + + + + + + + + + + + + com.microsoft/1.1/MDM/Defender + - Detections + Detections + + + + + + + + + + + + + + + + + + + - - - - - - - - - - - - - - - + + + + + + + + + + + + + ThreatId + + + - - - - - - - - - - - - - - - ThreatId - - - - - - Name - - - - - - - - - - - - - - - text/plain - - - - - URL - - - - - - - - - - - - - - - text/plain - - - - - Severity - - - - - - - - - - - - - - - text/plain - - - - - Category - - - - - - - - - - - - - - - text/plain - - - - - CurrentStatus - - - - - - - - - - - - - - - text/plain - - - - - ExecutionStatus - - - - - - - - - - - - - - - text/plain - - - - - InitialDetectionTime - - - - - - - - - - - - - - - text/plain - - - - - LastThreatStatusChangeTime - - - - - - - - - - - - - - - text/plain - - - - - NumberOfDetections - - - - - - - - - - - - - - - text/plain - - - + Name + + + + + + + + + + + + + + + text/plain + + + + URL + + + + + + + + + + + + + + + text/plain + + + + + Severity + + + + + + + + + + + + + + + text/plain + + + + + Category + + + + + + + + + + + + + + + text/plain + + + + + CurrentStatus + + + + + + + + + + + + + + + text/plain + + + + + ExecutionStatus + + + + + + + + + + + + + + + text/plain + + + + + InitialDetectionTime + + + + + + + + + + + + + + + text/plain + + + + + LastThreatStatusChangeTime + + + + + + + + + + + + + + + text/plain + + + + + NumberOfDetections + + + + + + + + + + + + + + + text/plain + + + + - Health + Health + + + + + + + + + + + + + + + + + + + ComputerState - - - - - - - - - - - - - - - + + + + + + + + + + + + + + text/plain + - - ComputerState - - - - - - - - - - - - - - - text/plain - - - - - DefenderEnabled - - - - - - - - - - - - - - - text/plain - - - - - RtpEnabled - - - - - - - - - - - - - - - text/plain - - - - - NisEnabled - - - - - - - - - - - - - - - text/plain - - - - - QuickScanOverdue - - - - - - - - - - - - - - - text/plain - - - - - FullScanOverdue - - - - - - - - - - - - - - - text/plain - - - - - SignatureOutOfDate - - - - - - - - - - - - - - - text/plain - - - - - RebootRequired - - - - - - - - - - - - - - - text/plain - - - - - FullScanRequired - - - - - - - - - - - - - - - text/plain - - - - - EngineVersion - - - - - - - - - - - - - - - text/plain - - - - - SignatureVersion - - - - - - - - - - - - - - - text/plain - - - - - DefenderVersion - - - - - - - - - - - - - - - text/plain - - - - - QuickScanTime - - - - - - - - - - - - - - - text/plain - - - - - FullScanTime - - - - - - - - - - - - - - - text/plain - - - - - QuickScanSigVersion - - - - - - - - - - - - - - - text/plain - - - - - FullScanSigVersion - - - - - - - - - - - - - - - text/plain - - - + + + DefenderEnabled + + + + + + + + + + + + + + + text/plain + + + + + RtpEnabled + + + + + + + + + + + + + + + text/plain + + + + + NisEnabled + + + + + + + + + + + + + + + text/plain + + + + + QuickScanOverdue + + + + + + + + + + + + + + + text/plain + + + + + FullScanOverdue + + + + + + + + + + + + + + + text/plain + + + + + SignatureOutOfDate + + + + + + + + + + + + + + + text/plain + + + + + RebootRequired + + + + + + + + + + + + + + + text/plain + + + + + FullScanRequired + + + + + + + + + + + + + + + text/plain + + + + + EngineVersion + + + + + + + + + + + + + + + text/plain + + + + + SignatureVersion + + + + + + + + + + + + + + + text/plain + + + + + DefenderVersion + + + + + + + + + + + + + + + text/plain + + + + + QuickScanTime + + + + + + + + + + + + + + + text/plain + + + + + FullScanTime + + + + + + + + + + + + + + + text/plain + + + + + QuickScanSigVersion + + + + + + + + + + + + + + + text/plain + + + + + FullScanSigVersion + + + + + + + + + + + + + + + text/plain + + + - Scan - - - - - - - - - - - - - - - - text/plain - - + Scan + + + + + + + + + + + + + + + + text/plain + + - UpdateSignature - - - - - - - - - - - - - - - - text/plain - - + UpdateSignature + + + + + + + + + + + + + + + + text/plain + + - + + OfflineScan + + + + + + + + + + + + + + + + text/plain + + + + ``` ## Related topics -[Defender configuration service provider](defender-csp.md) - -  - -  - - - - - - +[Defender configuration service provider](defender-csp.md) \ No newline at end of file diff --git a/windows/client-management/mdm/images/provisioning-csp-defender.png b/windows/client-management/mdm/images/provisioning-csp-defender.png index b3be3ba7f4735039aa1fd80e3e9b1a9e0ae4b129..8d34e77eb9a9a00c2dbad533ed220a5bc16adf9e 100644 GIT binary patch literal 29644 zcmdqJXFyZywl0hXu^}oVA_ywdrAw10g0x8QU8F?1f`Fl_EKsBgBt%;1y-61cU$n?;CKheRetf?0fh5{(L{yiX=00zGakWJmYy2sIIC&dGhi}GBPqsB}F++ zGO|PIWMoG_9X|}-+3U|Z2VM@jXe!(#%Wq+r0)HHZ%c#hZkrjrW+BPQ#f1h})Xy8Id zcIFG|zeDv-nU-W^F6K&dGTP5f=c>Kk8S2e5X7DK9x6-rHUZF0bYWZv5s@yHOdkWL+ zY-s9h#G-oM%nGWOxSb!MS9oG+$;=#~SgnB+87i@u|mT<(EfmNakK96HFL5LiYL?l7j5q3yAFMb#+EE zxuduv&tLZ{AVeGo*Vo6wD1LmJn3!me6-g8j%4;yVt5d6q z;@4D1eYCS#aDoyF-NNS{)e##vS-1L89mQ!Np6bXn?KrbZbFAQl<%C}CoY$|Btp>p} zWP);>PFc00(@tsMcfy7JvreEYLn9+sESmVvMGnSPEDd531hccaF)2>b4XCvpc&*3k zwk8yON5!}i(boG<;V(zPU=?b+?W<`%nc}=o#l#Sz)I2re5 z4O4SHTdp28!|1ZhF(V%J$OoG2oW1_G%CaYOei?pa5ghi}guxmmcaTRu&aMxx%=DNU zdVMlT-jaLM@HV_uETUUctyEbv>)h#z8<2o%ymdu>!tu5u%Wjl?GOt)yd#_;ULxIU? zf}2EUSyZyDowR5LBo`IcOFYzs!4G|SGB)1+vREodu%sn~8-=)Bs?DD4W(nozCe-$! zg`P~unnagd2^7WzG>BX-Y zL?3Rn96fvT`|8&$_F}efm2OhMGA3~#&k)W;GVDxwHur% zBP&+eS$~LF+|8)@ncLp}VO67z{?^E4i`a>IsOUZdEpkg%_I~!RhiQ^FqAu#OGg0#C zaz3hyI8I0LobEbmZDPT6Z|aoqXs#x+^CH~zY>>ooJyGN3d!G?m+KY5aatNG4rAxJJ zQxglXm5EZ@&le|=A`-G%_o1>jRF(unJT@;5wOY_Os05aKZ@pcO!jCEv&Om1UTANU6 z*Ap6#_-v3Sf0~GL97OWQ4eN$$ICN+^WWN_6TBU0V5$EnBuH!tEoD0uz6g&!udUqNf zC|V`KEfdps${y}GD#r$`7zBz>>p}U8{_T$)9uh`)-LQJr3f4EYUnQ7_ro*1 zbe{Mje4-*gFkxP^ydwraAkwzMJXlN)* zdiNRMrQBQ|5w-%1I2Uqlc!EcaSlsLn;~EX@9~{KG&P4fak|iQ8a5;f7-5e8y6-fC& z3yf2{zreBxaqi)_3+6qyo#Hj>w<>fFG? zZ#*}p*rE!T8Wg_@k|G(1&OEh^ZS;vx^l<}yeNzbwJ6%CEX1^4@mU4#OOg+8tZBr*F z7?V9BtAHGbDodZu-%5C8Y_U5Tw3cUVSm#03EW@RCvk?{KeWti{a&lW!s;C*pIgcWTPVZgPph4)#R-AEgsI`+KpI;y;|aIv>h+U26HNjT1ELEqimST`lZ zI!_`T>~Puo-P6yHT}71_RZ3L5FES9PBIY(iH8jtTWO>g#OFx9$`nE`sk98MA)E#;d zph)EA<`#pM)Sc$SOO-HAJ66F>OR4Xt44l!6WXaiS$>u3>4|RTB;?=Be`swi+!^Qa1 zl{=|QDj7E7zN<}oo0Av!o$dRio12^Jn%Zq}rwi`cwqNCPGW_0ih5Pvczzak z)VAFW7t1*@)s>ZC!g+-!K8zG?9!?T*`fEq8aR3+=_uk_L(v$px4x(ZTbmH z#5m6wG2yV}IQ3Xdk5C@!<&%ZyAw5KOx9wi-f!W%rijh(2q zp^RGW)3S^NXR>!!rt4|po)1-S=al4&;v(H$7WAF+4fs)dq&q8{)7!locc?Cg@t`P0 zT!}m13O#{&UHiS9CWr-yH&psZZhK`i1N;W9!TGc#?A>f`7{b4c6N!#i?Lw9p!~DOf zm>@v5tgNVr{vBQ%2R}SP30||rgq@#1dzfx}^Z+X%Y<##N5aP8p#Ty9U8nIYo z6kB;z;JX>m<+L<)nvYW5wB^;zLV~g35Ai$JjEndtURs~W)*GGO-BCUcWVVNiHUzJ& z_Axf!sa#2cFN1rXw6qr!jD|1$)H|MdMjbQmuGj6eGLY1Kk@PrNonlsgTZ&L)U`=Pg9y z1cOsfi~i&pr#U%Ra+$+zpp0_??3&L=`x~D=GS;iMLa9Ub06m6pIIjFTqlHJMP*;Q z0%96t$Q|ZRTv%m3rMDHYW8!FkcdNPt+KtJV9A#qjQK4eZ$ir>*5B86snoleZ?ArP6 ze0Gmd12>ziNHx~o8VxwF?onDS{Jli;N7hSQ-HJ!an@<&P%~!5CG}v}DK&ig4X2I{p z1yZXGYzaU2j+51;<>7Kz!fJZANI>FdURK??x60WPJsin{zf`-ka}5I{;?6BqIX7C* zpXFX+tt`oDI0>A%eUl;{q=%uwaoXhvn!Utk4>USUnV=XJVsp~X)~d_cf2uP>!bBlN z|3|mYD-*`f!wbab^=b)&qTz-oiimq%$~Ze6jKQ^at`AlAUL*|LeFol(u1PBm;F!XVt7MA|QEqs*X86q~-Gsl?CW zMwnWPKtQlIvJ5(zWmohiS6ExAbo+;mXq%%QJ3ilutMm>6k~b8Se8Qx^JK8HrJNzMW zf1^zh6x%(tme^lCwCc2lTw%3^4nFJjMw#KgD7GJw+A$1LO61ezM5T2s)>?i&6yNCQ zA%ln!8LoLc-lY)FqG0{bNqQ%Z8dkrqZJ9}nL<@e{`~)y?&DO(-bFt!uQ}glOD6_AA z{W6G);^N|7U;6Hkg8vcShbMBbm|srB9$sf0p!>Mi`}xIl=R6D zA>1iSB!&8a@Dg%FmjIA+`2*bS?Cj4Bde&n^|GE+sDf&}MdF{<2b}|Zixoh6PUuTH6 z1vv;eSy}sRG33-XCGNmb(ER+ zf*+UH@W3TTSY`gzyxYhvppcV?1YMDHwB4-J{@K+i?kd2gjBVOK(A z+!v$$wpU?APG9A>n))KK%_5xOGh01O@9>FXv6+xt*M_|}8$pq_)J;$XchA&Ah&T}> zx}-lT$chM4U8%OSay6(m`~emy!~^9H#;vj|@V2G@N6V@gJae0@!(eE@XinUpA_mlX zdyNzIo8*2wcMwS$DNw#y?QZ+%sg}dy>-({Q{*6F9wnS>hX)O2r%;)VoLShx4w$Jm8 z)ebX5W2rAxk0oXHzelLq?l!CaWdeWE%=4;pz!SIvCu}-!>;q@v>OqM&@&azYSdo{< zy;CH^LYj^?p}miU_=}1wt>(jH?K5cakxRfKI%M0$D}n%fY&mV#BswMm>~lT8M5d*&z-^j&oIS0WuH~KoqP5zR)1<6hQDQkEG$Q&X&+1{9kcwCfpY-j`l~ZWl z<;G*EL3JH~9u^Hg9(?@eMxBpJS#wxUi(9*{gG~hP8_`$&tVNSmFX$4n)RQrXjEYDL}fAWi=4IlX#>C_|%HkdLp0 zYU70DW2hIY+Ou{8V?~^%X%9XmC7Fs|C!Dy4CA)&D_tVEKM|NyqP_R?2j&$c4!MNb- z<7>xA)j4)!m1XDl3nuUh+}*w0w`NU`cQ>$j{Cn>8mg0xLYgJr!n>2@=)ES>$Q~dyf z+b>|RT)WlH%OrghE2#-ZMst&6*mj#TO8X07{e~6)fyjr1}Nt_xcXv z`Ty|t>&vL}(o&)4QIA)qy9Uag*mxPh_cApQFu11+n-8S8_9}J5Ky+z)V!|5woFwu3 zwZ}dfo%JfBwy_3NyFio)PQ;4(L02`^P2*$`XF1q;Tfi_bAZg+1jB+P&L4sg7ES$t< z5+E2D&=MDEgmJxq{?Mt#XYOVijNXm_IkkZgH@j5i~!>@NiT_HyMs7;ZjqzF zMXeU?uxwAfa$Z<_;EoGh?|#T>+*4^Rw)LC8tI4Khz7%i_+|1axmS=Y?i)C*lyk`O9 z``y4WM43~R$ZB<476F)%h0Y7*)O{=`J4RvI4YvoDuILQUYNZwn^YIArgAu0569c`L zM5NuKbW zI*l(YZ`Lwq?#DI?UZT@rD8xsaur6^bgdp#BS*HbeLuiqwV2ZRfi=4b$HnK0EPER*x z4!jRzWF$k(W{KbNxa))vc|^KskuQJ_ff)mM6-n3w8!D zg}{gaY9-2mLYK7I|LSeI5ZoA5OFy~q<751qDbTw9i;MnYG|v^Y^blUpw2eN$QuzDP z{8KY<-Zuk-1tjWe_c8a?)gt@cE4b_i*uYZ!vg6E4k`WQ4aE;h9zFKpADq{0_B!z_^ z>j`2h3z!vg*3)QI8dC|a)cefe%nN`YC1&}}*_!Fe zB7j|e>OC-vjTEz5mX4EC`{aDIh>#t8CSk0OzuJU??ndz6Kr z=aIH0(1gU-m^$^Yct)Q^F%;|0Pkq?m;(xXn|8z$?GqJ^7JJdn-7cV9-H{++$v=Y1^ zr323cu3B7NOg<-5YtK%V{2%US)%N@VS59LpjaaS6JRlz$PQ3!5;vkg*VB!7qr%CDt zVt1L^E8^r=#cJHxmz4hVQW7Wsr6Io5A&@dV;R>p2x3%lGOJ-FypjrjB2|qzZK;A+1 z0N(`>Al2~{%gRJ<&PtsoVbDW-89Z6@vo>aMl(O=aEU|+MCw`n13qDq1udifYiI(~` zotJ>@T=inh=~zfZpXAKJPz?Dv+ji@!2*JD2EUNhU(icLl_enA6JkfjdJIxb|&kQ~l zd+`}H0B=X%i-BdcNfO@Zv$Y!EDY7nOLAq*3M&JVPyBxv26BoBb>kYa%yVsHIi&kpz z;@)B>YHwAo_GwhNJ+lsq4ktO6y%U4A`_7)DWoW>O-#{p4K_@-C(bgaehhKMt1M8FC zTrnE87dPL1>a$YAHtz~DF|$buHpTI$7Cc7Iw2zf%xEZC(sD!vDDZ)(hY7NZUs2b@* zDm&HKr#U)>_;$3VN?vh0E`@_P&uMuun6zG3QEcVf(e98)XR5nB6Y*Sjzy5;5xKley zXH^|j9UIBw9QmkvM`Vd~t-3oR>ycbjbIf@I5B1Vp$n6hboQ=(i-bi%9>*9!)7&sFc z>-kTg+`6+w)$ydjLQYf>SK0b>54aeJD(MV}+m0;-V^*Y9_!rg+e7~jE&GAJ47eHS| z(4GOoqcc$zeK9-cvYguxzj2BiYKI z<#=cCH6+cux%JOASFl8{2jpbkY;v*`vN|^8Kdx!+%^xCDo^UH%=*l_w?qkdd#AVVN z$#AH>;fM^U<4C{nKhe@cAaeMoxl{5hMNW4V3jLvD=9ZS1ai%Aoe@n7Hf(Ab4cY+ii zWD&YeDp6??sx~%56bbVc~i+ekmgXq$y@0&V{)~r@UOANZs-6 z=?YNU{s~%IHUF;@+d&!x^$K8+$`e^EeH~ayxez>L)_*tfn+2ex!Y3w|+q3L?^8ad? z&$NU7&6Jl$gNrp1sgZZ99y5-Y0i0?3M(*mX{IYAnW6~CJGr9dS)SKczct1vcE|uWQ zK(>siyBqmNuBn%fKGThLBQ5C{6dQRV$!ev)e~5@M!pgW`D|ma9c!hzTsxG|`7rB*{ z9GTK85_CtCZxwYaOq?6Yw{C95YHM)&UQMIImVuo_o?>zg+Iu#Q^WDlYyA88T z4$i@DM|iq_P}8_pVbl+Q0cof5P$op_Q1gGC&X5qA%c`*o1m+fDLU0c?J}1K3G=ko0 z7VV8uIf-Hud1S5aAC6*6@qi7E>$)7ftb(}iJdr)8UFHc^@Ls0!c0F@w+UD-j`!n^l zJ|?WjTm}c4k4|Y&NM@s z#I(=nl~^BWcSsdw8{o7AZ=vAJy1RGUk+(gPNfS!vQj=Fwp1$+#{2$JLAYax(a?7Sg$-@BwpA%EEp1P+sWX0648eJ>`8Dn*>x#!VR&Y2Q0<^~D03`E^0&e>MCG3}A z;v(Y*PPqOnv+NJ5u$TWFc>Ya9R(3)57|;*)4G6aX7xHi6G-}HVaB=Y)w!S}Ymq^hi zCJj5c(W1VwEKu%v+wnZnRd;Pwxcf}j0O(_Mubxd?%+<93(>#fDIawe08ym1YDFZYX zo6c1*TopMW=a}AZkIMsX>Qm>059jD?I{3;YTMxZY<#6^lF2zL$~SHeDiY#VNsTH`x{(&B z%^$#(=d9sdYL*|CRIOvMS2WljDI9+jkB!8!OA@AgW%VQZd3CfKCyi^+45ZBd*E%A~ z7e`e#9be>d?Q5s*{3tC==g?t};53PuX_XtLZc}Hio9buMu;YmLsN4Il&P8a1 zX-5>ejn$_Zq%sFEJpG7^)NpA`pXS6zZ#=?LhYM;runo{nVU3F}ddKEAvRpAWJU% zrM5hqWs6Ypo6KTM_5x+Wxz}zIv#zznwwf&U5mxPMXF$rbiGs$VmWcivX1|&16=)5+)m>9LPJ6RcSP4p3A-|IzNYgWX-Q40+*EvdZwd*< zpP1rgf&qGw(oMWKVnKdYb6SUyiLoo{*NDbH$3QG(#6GhM6)eem)AJ;#n66AaqPwy_ zAlc~e68LKHWO`A5yD}CHhrEUy`!(JAg5BK>q+qIx2 z_TZ`_RGaQ{H08*$mS_oSFF>>xSIB=&Pd(wUhhEh&EfcjuRPG7TA~s&CS@IiWhTZzJ zZ^WDx>HIm>)zY8%co`y5-4RV+>DoTbbeFRj{kmbvu^~%p&_M_J+G#1Ix9dQqw}{ zDLIX-JSUDELGEIdsvL~Cs13Ur_0^(G*V`ydOBbWqC;OdLya1bOZ~FK0#P7-sGDmH85sBhHGbH z@7qGzjQrsbCQ3`J`-S6;+PnfB8&d_8!^&^F3E>I3wiOU=En=61*7HPr(`lOAanOf$ z4xXEBucifgX`lEfm%S)6YdS$2%EQ&m%AFgPiY?C;qmrg#CI@r4rH7~sld^j1Z>hx^ zVfW}HPOwfVoaW7>*1Uj@G+s{RW0o zeQF3>1ugYY>KGT-^Te!}{BO8Pi%=dW#qQRqa3Q5y!m`OwQnqle#2DfdsjRy<2bmUF zq1W{A@p}tugt?pC35r_ZSK{Qkol_pSn#?GjQw$vMa#rK;`+oO}7B#z?oB=Nrto!CW zHO)Rolh9ZlK^05ArCDyFcts~wQ%x5hPeyrCF=X@E6EXhdf8Y)ODMxZNNn)!fI8cEE z>F81LZGTxv@1&pxW{LK)&G@iJCaind=N75NO>@9$`98PmmHX*rktaA{VmiW9o`mIi z2|cjyPm|!F9V?jcXj*?Do{GJ=57U$p{!E9iMzHg4o${KDyw^ni2+}x=S}B&EEzdvW z9s$=!$SVm<+TUywp20DcXYbkUe@h9WDIeMraigXcJsbbvVfnb5b@H3dc9l)pd1yp? zN81*XRiBNYsKLRw)4!pc>Mwy#MaF)K8Vo^0X1kx%9W`T-J>>z4ITd3kT?{&U^$@Zx zI_||!)@FS7Yt2Jf>^rJLp;Yy8f^vo-!uGg3dU84Op=!z*qRxtR2nnIC?yP@~3Q}Il z=dLZ;<58o-t*A~&nbfOX!NqQtwd}7q8d?tc{wt`YcN3ccAzQLhY>u?pFxDB`EM2%J zajs|Y7Adb8rc2PVyte0MRnaK4(^Bn36^9wGKnnzpGl5n~GTo z&s0HVb-w8o4qDheNAh5EcKr5Dd;o`u;Z^SW;? zaX@caf@6j)#ZsmHd-Qk0xV9^mt4+TM>F#HVEQd9_f9aWe=)t(NIAUiU^sWmz+}_IZ zg+`WHhQ7{rZ(KBCp4f7qh3d!vmH9`qgy+n726i^0?Q5>Jh)C=QX_vF;h$`K3b|*s; zE`E$e&tuOhBc^ZJ%9#|QCJ8DQEk}tVpcPPfLJ<+De2ji0yjYhQZ6xfDMt^gS>nb*Q zXLIJ@0wv@c=(of4oj!Z*HT3LmMY@Z_?D`AilZ8DV;!#nT^wNUs)G>HZgnU4mYlBZ~ zCP%%1Yv94aj1AGaoWDevj?g@;`L`SCT1Al{)0(c1=?!RY+G=8M*a)OzOZW<=jvqWx zNgrF}x?0U$I26nG%4~jbN^7spz%Vsh20<1n5V;0@e@6P(OUMvd7a!Qyd;iyeI{yOx zUtr6+lG!BEtS~mj5rxfW3AqI?2RDiRVfHRvTx$cK#x6kW*yKqU;QS z$3#LA`m2D`?g!r|OOCaP53e?iddW zhL5SYK-J4Ka4Y;8kp=*m0v&|)h>Q^x@z8x-6N>HM>hf2U#uFU^wRdC&Ut^|8%fsHC zj+y1lq14gjmVS0wwPfHjz^((z-0B!?xUQ<&AO+|{@NrNSNC@nYAQ5|!96axhI^l0< zW3YzTd1|*-ank}e_gV@tRfwhi2GVau-M>`J{6%*60#dF3s^W_bS9=P~dekI8cHTko z00r}c?=M2%5)8KU4JgXKzaXZ4qm7D+0@|7lAbI{)E3&ylmPvy|Ge`9SL5dU*{ge+; z)PlZeJU-zXMI_UeolT&8c6_qYq`;InLwhVyN*yC_KfgKYS!=xhi6pi$_+$LX(p*OE z@_1HlZOQ880ZE`cU;}7M%w_e4cvU(P2iY7_2v5!)4AuB(2)7ErjJtAfhP$^gCZ(yjlXu=X7;c*k2?rJ1CHj4mc= zF<0!4@f|AUa{Aq5waYz0x2j!Hv8ptHVuOI#Pip;__fE{A`*%8V)by`_#_)Dd&b8b(R+Dn z?@5!8+phas6G^uar7Qces)5Jg-SB%i%ZIVL?`0ab_4BaX4+a+c=L_<`hk{|9B-y0ckn|L25v3|48ayAb>d?Uu)346^;~IzG+l4?i zTgzy4%PQz`^BvOQQhN+E*Mib2iJGLA&IX-sj`IBM(}u*VZhBo)9|*;gr$GQBt6wcB z57Q^F<9bQ`wo)LNe0=eejdqRe_!4|``x9NK>@1G@mRpKK#QSf4AeVdYt1I^AK)blj zz$W#?xxLFP__g)#5}BuvY#ZalyDMMY`Ez?pjt_HV#GAt}+8!m^03n5s#|FyUCtEpg zV`Fh4aOX-5Ng*Q!HWQFS^(_*Mev`XSpbdSb5g6|-fa4fr!)G(`B4YTvbBPjYz+A>x zx0-=Y^cuz^bxYRy!NyA9E0O?gn%C6Oh*%zKuAGQ{2>OI8QyB?o48M0|3~x^fPO8n36u~C;U;w)Z-;| zH-(2J^olq1YS?J>ZEtFdUq4~?YMi8%0Ntv2mBs;SW<^gn?9A?XEl{WNZgg6Mw? z7sSVoXF}3mX6OB!DB(*Q5%#zrNhI;ti{u4SA|&NMZ?i{zMgKBj_){az=BP{@?xR~N>Eipno^YNKvJSbThtUIpVbU>^Mwz{fh;8V?#3Hq-`E zsS*g!M_;U(WmXf#Mc5Lri-&jc;m7=|t;VeNswv{x4;C$+R{AU+?;U35^XunU=o)A?0JzVOT4)gtv#y5+Q^Tz_6J z6z6b_?rIhbP!W<#&DAtlf>@M`TH`6e9Bk#Sd9-$fcSzxE+L><8yIclI%XfF9x{u?y zJb3Z;*Q<(fc_J;^ROw+)b5CUU#Zb30S5^ZKcgz~MbonV@Z%Nj0OBEpyh-ufC(kx8n zdkFjsTT_dn;PNK|1C zgyKFc{+(I<)%M!h!^RKn;|}87vHd+eLcDkBV5Y!&dlyd3fL6lS(L$mNY!mfck0kNp zJ!6SKNw0#Y$-b4d|-M$3433QU;Pi&?#!8&Nxc}MlH_)%01EnDZrn;pU&i7)f|YA=hHvdpQO=41Mtt;NSujD6rCb+9(;E#X|F8(CcYg5xfo z@O_#1S>lw57UEmi%|?9%=?ovYtfwEIN>v)yy;qBZ&dsGd%x$i+Z`yFgYWB%qVmWX{ z-@YAn3F$RSpN&r`3u+M*n40ZLg^Q$t9wu7N7!X42>L?ThKV5pR$$t0?Y26A^ZqoQ<>L53 zZNp(*Q*)zg=`PA1byI3mTJPbd{JOOCcdnIgvv2|sA-NovC7hbLfx%mcPG74or) zWy+<=j%=0TO0h;OR(c*tIR~XHF0b2nhi*?HgQH`KfwweF$AI+n$zCM-+me>v?s~#r zadBn(1ta|^jsO&#K_bl{qAI|nsdoi-CN{L}h{ZwK|NrSzt|o%SAk!3$s+$3f>?Whzu@hPm*5G9L>^ zw3lAmGV%he(o?NuiJY3vDcgK3$iJbFmZh$CG`n^nCIa1TIPdbxpC0mX>}q$!Qs5N;sQ&LPSaC{3z6Hqn3>HNF zb*9$lXICcTK4%@kl$2^*q~UL!-=j7~IvvG~V&St6A;B5+NLnc{+x~osjteOqPM$S_ z+ENeIP1nJcAC*Jhlm1VOLNK+D)ERM0q@g#Wdibr(-_%8f=0;-7QB%rDG<$AwHWyXp zsqVCr$R?Gv6$c_s+0Kq9XsQQO%a ze(F)9XfN(XMAgR6{KtPWRc&AjK)wC6UOQRh+}f;I5d_I*;vV4yFK2(h9Xh6Nszvgu zu`wn9mTT&HrJpVDC_%+zPSShR#Xxy%doxSP>a=h$b7~&;R(8yL!XunkKMn_TN5~5q zAtrcuL$pGnn3KS(otSE_V-gx%_AF=<5JWoAkQXZJ?37oVP0B{0-&h|eW>KajVZ#ZH zg4eg&>K(eIadxa=jU)W#oHm(iH`?Hly3{3b{czAy#8h=qPlF;>^NbO$%ALipk(D7Ty zTaEv${+E~?d0_Sy7jcmRmBr|9aLF9jnfN5=1`%iUZdj2bCV+afyIA3xz)zkJG`7ca zv7{p5j3FY>?=*tLZk8)(5wy#HtKx!gue_0Ub5zYL7Jm0eUxRQTSkV*E0e-+bP>+*TeGaC(#pD}+`Ja01Nquf_d_F#S|6pkg-^A# z482Z!5<^8}7^xBe{oU$KpR2Z?{V3bQIBK>vPE%dGUU~WHR>L8QE7zsNs4DGrmp-#8 zq`hAnJ&0o48*OVKn!{=q!)WLCD*^+K0k=NQUeHBw$jClV%-JbH5vy`3Y!0P7{!qcw zRHss}Db#VI@$-F4+e9ynK?DUm3rg~SU*P4T%X)^UYfol;IG*I9yNUYG67oOj( zl5mldhrSdre*2m9*f`o|7Fs<>*>(4Ql)gQKtJoy#v$T_wJ3`p;!;QtBkrTMw z8|2}N<{v6BI=0k8^FBCO%=peslFP#DD*Bn~5Nx1Oe)tGw%1!>3Z~kg8SH_X*`bR!kdk7Y{_(UF2gvOrj!W?&gF7*D>Hx~6T*EN~ zUXN6i{VNCf(@Q`#UXQ+A#^RNgLaLpoH3@SAe7FnQ#D4p+-3>7B%Sl)bVY_=k#Wg?Ykb6b5oXWL) zhUV4mV4OMJfsdvz87mJ$5P-`K+=QoYrVZ>sb{_Uw$q%|rVl?CsOO3yS^dPZ$5-+g; zdTSRr)Mh(_9guS`4-+XJzP5k&S+==VYkOg0h?P0p$5P-0F5)F+d|X8CSS4?Q?Ff5v zIjO<lGAnyZ!LgqOM%l zwY;mGIcM@PA&lq49)YuKa+bn=L_1um4MS``Cf5UBWlIGwr@Cu3QaS4k8qPKONKnLvS_#?=7mg=~0(&c)i7` zCe(>(J~@=sHK9rGcTg0p~O~ibF;yn)L8N{9mSm+{kk^7q$j?hV7 zIK!>A#p49p>ia~%5?h&kQm0%glv+{5n0noke3r324o8|x>WV*#E? zX{2u*d8-AZK@d9g?Hg5x&oP__BlkhAqO!w+vW(A3<8f6_lkhg`5wSwLM)V+knr!n| zR`oE!ZDERKwT;(j#KZ1Za5$lsS-1E}$7^-oGg)u^mkoMX0e$~;;FEv)*1zk3|NkKr zju4wArq)7Z&2CE#9qiM66T}8B1UKs}sBs$JbljU@UD1eG%+u}<^YVeJ+=Rjj#{IG( z2Lbk80a}&aJ7n`vqdns6%UO zvzb&(2XU|xS6t55(Rd5Vwl#=Zcy=L%4$~mDbDT)0CmAbF=cse#z}AoS5-AJh?E){e znb9OER!|zx<&;%^wa*t0+>GdDigqt{jAU$Q-B49t7W=sxd9K(o{!HXuF^^9Hs&1&} z)|)qDm2{-(Wmis(TkRC{OLTpfImM*GcyQ~#4FYUt2+#u)aCT@cMKd~C1^aV{B=QpN z#0?5P;s*v85FCPv-T1d0xwd5x!>P=|_A=;uba0xSaU!Q=L(%Rl>moJjYzHC_{;l<* zg}WnK>N@j*xekjt-;WCd3LQQPO&T%=0AGF2rrw?K4bm}Zv`kY zZFToG4V|geL(#Jxctu?C!^$RGoz>UNCI{&uq;}S4eSr}%_9w0dp1-&KJ-H%(F!Ni2 z{m)<)&K{Q$o&t4t8=(q^&MX;(yc1{k-NHxh`B+rBn)I}MDRkeTM$%0K(32^lZv+n= zEJW5`gfe4R;9VkRUXwF1YbDMk<}(kk+6(W9yJE?;Q1%u$u7PNdsL!9V%)>Eh{Ek9d zoN7Fc_8iK*KhxgvYIuIiSk%U}r`cjWuZ5Vu_?pdv)3OkYYSXZYMq4I)q53pk`+&7; zN1F?uZ2^x$XVG6JQTixy+=$A>9L7C;QovRT4K9=ZnV(jpSaLmrcjc?x z^=dIhDd{IU&Q%s=Cz#=GYZMym_WF+8Z^Cg}OMk&}o?H&R>$^{YVsp@ydi5s%-9IOlnkx#RdgaZ{IzQm{U|zasxC4v-S!hbI<5 zhQHC%0(vw1%;EnIhW-t~LFouub`zRrdpoSR5>C6c;&stfJrj zWJ-hO@RQJeUcT)tF^hMurMA`0V(zV$IlC4(Boav{G(F(iBQ8rM$RH?4bmcKpoftW2 z@@}}-?3OF1ljG3&R?=nc1wy2vEg1@6&_?=cVtOpkNU$#?f=Z(87%@vST*}&dMnc0B zu7d{Uq7uSjr^vZjo$B_c<+8OpEpDJ8%`(E~$`>v9gwboHUyMLN?5kHEwwlNyD2{@s z)*@`KViI0eF)^C<#oY*7IaVvW`lh&KThJ@&zDiQJuPsB0;V8MoZ39Pr)*RmEA~l4E z2)h46WE(Nie@R9X30Jl5yjJ%c8Sbc=p2Mq|Y>fHt;#;PnVCN|PI;G%mH$yDue{^El zhfdN_7}*>`^hhqw>E+K~WOqt!5G8Kt*Wemwf+fC+9>h5HDr}EkA8}{y6t5VpQF`93 zj$lc5I6~tk2!8T0!5s)6cL`$1t-oCUXjaX>lss-og>it@fVzjAniKCNpo);{euksB zdHv*fs$FL?%k+*KNx79RQTp6IpXMrML>GGJr(+}T)O@HEU0=oSy^Cqz1xn`%ux+m{ z{f;Ef+L-=tma#Ek9StJVcup2GJ$>^|JVlO&(>fuI7%f*~C!Y}9=Eq)G_Mk6uLd}^A z$u`RWM_bpW-{AZ;^b%*8(Q@R#+K=IK0DQa(s_8`RrXO_p@W1Zm01ca|>FwPEarCc3 zPYuigeL?^~iUe4>eT6h)3o`mEJ@@=7D4{^FnG;yX|LY5QDrmvgkaL6Ii%_Vw-#@rp ziDdHv`4{{kfkI3IIIY!^{|~&%wR?b9`I7Q)GlOkBL@P7M$!oxOkZ$JG4UPS#ly%NO zqR`zxrgABvia8SEbmqJt2hOQA42D4Ir-9}6aXBH$%~G)~wmi({Z*SKM8gcGBkj}%r z0T1?qDU#DvL#ctshRDmUxeJjZoAy-K*`08t_c73T9h-DQKdkZ&!WOM(dA;<7a!cxl zP72?GFrCH8-wcgzo8<(vszwtuy>T^OLYs0PK#{*Gpgc zyKd4#Ls}J;?W-vCb^ZaNV;gomaYed8$Bzk||3>cEyOFL;v9PaHe$> z+nFoCX}!ZWUR}EOJAp}g?I$qOuX?mhXNMa9!s#jnd>c=bpyBYh-|>udyApUI^xbOo zSH7Tu+Wy4ADpdplRRBS^nW^~i9zc4)iflvmPCme8G=6!5|A`F)=`_uFT7*Py2F0BpACvIj;eb{8-3;Jf4U zb$j<7BM4o8bLGc`-rE;5bulHH-G0V?#4Vp^{nK(ftXEG8=8Lpyf zr-;%wdOu2`lP_^D?Aq*Pz2L!G73-M(C`9%Ep~*ofl;aq&biX<3^hO3T_doPY|63oM zpP#oww-oFjyMd~5kMjbr?M##SU-B^U+bG9c&jVq^{t@$ip6KBT&<36YC#RK`1l>p3 zymFtDyxms&FB)x9(f5y?wtty53qhquIX^o`N4Idw9Mo!S^SPk&w1ywtB*cTW2#-hf ztJCOwrGyS3K}s8rUZCY?^c{XEsGMSmy!d@_WqEnO2uz+5XGaIda#xRVBm5;e(1=7U zo(L`Pv)4V?!TxlK3Yg&>j4rDqzwi{GfxfGK+DKbwHze@Q2|K)lHH!`OXY`M-CNF{7 z?LPCInV~>ldS!nBwTZq|*X7@q7PSVok6Df$mxUWD)rH=#m_)gGZiw4c)Kkm4dV|y*dUBw$>eIcg7)3M}b_4 za|W55KRJ@HZZCj?39UV@|H3T8Ar^saAWFL3gPFlYz^ zdjm1OZY{wZf2*hW9L{rfd=|;(ctJY~ptse&@hjn5jGXVO1R&WI8fI>wPZI;#XIL6gZ=lPh z{9VWCl*-OUXZr3X>)n$F{V-9S;2BK*p}^mOo)4+#Ex_`-)W562NcTI;{3D+U{9#?Q zzU&WP*JV;)4WJ^RNb1VbTUom+J67Q~7vn=rJP#T(t{hZXNj-}HB}IhQOX2qw6Nao zma=hh6SJW*f*6tOkorJzfY11~{(2zi;U~7?a+5t=g1)>giS7r-bgh%TZf2F%pTgN) z2aaG3x-H*azVf3w3nXCOoSH8Ki;NCH>^~zp@^-F&~xofQlsz*nH3H=+@J7HgCT zp!oE&v{8{!GLgpTH+k3o6?5$MZFeUq)(R_A&}1hB#-Bq$70N`g+AQ?Jt}pp%u(Lzq z##tg&DM=K4jFZmNm+=qLLRL3Rh%K~ z8F;B(vA;tsL64jTn}uv?*1=ow%)>f?L!5dkI|&(UOl#sRIRPGpoxF;P&0;1tYG;}{ zAs*=NRL1{0l)=p8T35ZS+O?5lrcxE`g>3NoU7PLiyIpk!pa8!DV))N6*g5}gf$e{- zU4Xdt55ja+h!e#Kk9lMkHI;nW-;jY7rkIKT(D65`s!s3M1Fe`_;zWd$oGI7ob>LOf zm8=!YMxb8MR&EWGuhiMcMIBz;8+UN=_cFRBywhx)a+6=O;Hta4rfFG(Y}<>;5m06p zXKa?XD_lvCU)xK5O7z1Q_19EnV^j%mL4ltRlM}nXwi7ZkplS7jf%VsahU|q*2phY2 zQ$Fl>T}^T=xb+VA7Ic?(X)KRkr-dF0O}(H)>@_mwPc>2l+plfCAw)^G{j$>WKrLBl zT+&-@m2&?@7lix;RLHU{mKeQ60#BkUsffZjc=k(ur%jEc)v)__WT$dU$tf4jnoDA{ zmIb488^HujmK6`x-?18uGJ2K9bBlvVKb`h7>8~dlq)oA)(?;X~_3q-pu^YY}D%X`3 z%XJ7%goRghq{G&lhvh4bs|Zwl?WBA((<06W>v3rKxEX0O<73jK93O}&(vw+Vu^mP%Hc5X6^q{fBC@=0}aVJT{9* z%yP2J=Lb?U%RHvnn%$&^>9EA$_;`XD#x>+>uZx_Uh@j86Wx&=V0G7z4O&u|x@YZ>!f1u95^lbE2azSg&ZY4#Fy(qH+JXq_x!N) z^@Ks6SM^%D?%tERU~|m+T^um07!RCH{+-!}AJ9(oygPzjnACV7QWA?BTr%y`v7_?Q z`538ckk9s+XI|((6HQ<9lE6C@FxnaobKw}bRnGkynRfrc2!C*njBo$@AJ;_Z0E$8< zWOF(BWiaR&cvW&_r-t_lDJH>|p7Z{17bs5QoNu(<_`LJza-f{d*=fg#j%v<3*+~r1 z7mGu9gN8Z2JT(!e1yuR4Wl_?H-w~iyh4oKWRa-cBmMdb5%2Pxu|(f(C`vU3)4FM;gOT)`Mc&@dZ(L4^>~?! z!C#URHx@RK&aTlZWuB(RRn0O@bmB$aaf4U)px)2{3S`}PyCMR8YRHP)X_RPBN}33B ze76*=74W|2NPY5i$wV@jZCAta134bjm&{|WJINqLV`1?tgZmJh61u1_ zXAY{;?2(k=)TbSZ%9#{R)s1tb?^QG!mRr9na@=A@Rw11^_w%errYff)e#I|XhU*b_ zOFWy;gS{tvN!!4UUjJPF=J_#-n2_bU#M_2x(s`8m1zES9JGp84xv-Em*%%O5)t z(4|M!c?L+1+^(SjXCTEiH~@zpjaGf-Dxhg4RtS3AhU$C`V66KYQx@QlS^kS3;I0fX zT?UK+rrR+W#zSFqTOK*w9KRMCxXzB65lS$M=^}if7?bfW@H&@#89)D(1L3Nu=2in3cCDf zph%oUita*z=H(GjnXE~zR?d&}Lfr>w%`R}I_O$>d(IZbl_dP=^Z>+4`eZN{g_le5E zA94e$GXI%Ar&{gD01+1y#Pwv7b7Crxfn-i}Boc9tlCNIioPD=h%fg_{s{V3r0ZlFy ztKr}Fxnc$TWk#>C4Iqs4ws!W4ql0%#7y)YI)9BWSxpk#R{@J+@8QZ906;2XX_Y8lo zwYsYD@yI<7@Nq)50{{B)ja)tMkNL z97Iuz!6zu?BC@^Ahf=W`Z*-trl!inZi=y82Ev7zc?}93v)GP9z#M)mq*;n_+zu1ESH54BobDG&H8a!=-8)pqobpDRfPRP3!F4aGdq{dWy^5FcWp2X=0_24nFjM`ceN^E|H;_5$WvLx zf1$;1#qKN>(jj!D`Y?^!mF$byqa|k!EaD=frT~hhsifbbC;qWI5ZiE?;X()QCo8j& zW~ue4se{b*eL_r1I=obkp7iEtKkg_c79JEPwYRPgxX~x8@Sxwvc02zIyF%CjCPUDXzeZJDh0!#bUYs!TFznaYUD>ezsb5>D|RMaiQzvF%B7 z3uer@mlXO~LjQpWp$GKeP8@QKyfuaicNi5O%~eS(1aFR*;F0R6dnG>8sx~BEJM>HIn`Zm ziF}bs%D~WWB36>)Y>&;-_oVyrA<71$XQqd1$S3AxQ3S{U&5MdjB7geWh1Nc*v*YNU z5JL%HHBXxPMXB2naiVr0IaVjo4CBvH_R^}8!biI3fUxc!QdjJ7%p5pIlka;5lYhpxW0T)$ZU46} z`F9j*J#pYmy_*c0InMT(VOsmY6ihpp+HEIcRC_iy->|3_NO_2-=cXilf>mMO<=h%^ z9zrs8hxBfGbXnB>Km1|rQavk#(s0$e+%(`;0RYuYT$E5@e`$*QcOYC2Hv>iV{* zTKdZC)tg(I|8{C{;6dq?Z|yQbcG3?ITEnkf7%q;zLeX~9c0`zjk&PFty*DB1;U7tS zwF&_TjBw$tw2nKB>0Aw~sJdIGr<5mG0JeO5@JB{pPOvK^%!Wm4#a97V5T2>b6J{Pr zG1K_24|R|5I~z2eGCn?;bO#G%7NOhqK6nyA3oBZgta1}i= z4QfG;;NGFDqYQW|)+%_}wx({kX_^~?)1Li;7LUjj4Y-i8OCEbu%|&BPc~y6ze@oDO zSLncokJo&mRdo(?5j1ABZmsule%jDYTR&R6(%$BrLXb;2=et*tpbb2h<{TtGY)d-+ zKE>d>ILN3IPeDx364Ky3s(Z9VeU!`HY!a3ea}6*g_;7B^b-(PVwF1oGD%G$!abxq@ z8`b&gplyk=F}*UVWgF6GZqXziSDM)Dr|s|ao9T9(?oc)AL)yrOnCkUfQNxVgA{)~> zGNbo7>UzTBA;Y4WGMf=09+wLkpM99h4_L+G#g9G(S!B{}DC2PFGGxIAlWP(kiFCDK zJVuVli1V1%>R!1^LEB?bUw01$p-8BbV!SQZmgY?I8Rp;jP~5jiGY2RoNNnd;&q{B% z<^qKUA6r|Ty1$wBnBO&2Pn=)5wyS@8|CVv+vTAAnZIj34<=NZ5t20s{;nA5Zq#?gHeR53&4HnzoL==I2CxCPe_&`P=&B@-|H7-eL?RdoI{wE4l>uE zRbL`Q1=k;wp_0dfy9*6~4*bfSkiLyFz~FM}+XUelYBh9plEEkXcow724lj}T2V>XZ z8m!wMASfg<$Z>F#*C#-S%Y>ctPL^}s{VVxC}fK_%~^2=&Rha!on|L;!BE1V<47Vtm;P z2uE|J(U7$pVPFw|6mR2spJ9JW*SlZ|BN}>lD$dbC!_?_QkRB67 z&p|d8)0HmqA~)VD5wm)K|Iq;a z=VOh&{*#~^{gXn~j2$>+qrvB!(F2vxiV&VF9A)s!-*^iwI0a?!O>7?)bW9YG5x{Fk z;oe>$b1wpOYaF(KObuU+uB%fPE7;7L*AEE#EGh>&!og<&#}I`M`~Oah#5wyB-s=rA21aHPC3#b_Qz^Br#e1W@$9#T* z*h-ebDxO0gbAMk)Md+#>)WWFOh??581qt`K|;D9+&h7=(rhCC!-=Y0h-0p=b{1tTZjsS=($lu36-A+?UIWSzy2*x*x5T25Os z6fHUhk^DfJ=h5`#B#vk3v@^73V%e_tB*<8E! zcPGuSBO|3HA+x@=%EY}MxWdK zz!!qD+aq(XGYNh4)pyS`he~_GrJX(AjD7P3q(#m5EM4=KbZox z>LUlt?eX!tmY1SoI^B2eM$}GZnJ`3ERfg)vcu%98gU$KfTc*0adM(CO8-d5Sn0XFFez9$UQWzy+lh+g7}-lVksea z1VAh=~UcarZWp2;_exaEZzfl;mQqG2DGOS zV+{1OkW#p1D|z+u7@^v9h5b)@UPzOi_8mi5F2I}l&s9Cq^mFpxza6!ra#bo@J+Pc( zh5id(G{UX=p78C9b@LMNENhV~4Msn%jp@f$WRRV6k^cQNVh!m_urIb>(w}C`?d>(i zSyFkjf}3~mW-Q1K;=p4EuXgEOYxfdL;G}{>jCeS$d2(9H{6njA$^<4B6VO3Vg)VQU zQJp@flOs+*(iEvft-E-u-rzdp?(<#S^U zA?=`Lz*1GHd~mHiz3oSCf6(~r znr)pCaDo!6TzIQIXQ+cP*GJIOLs0yPP}HE$vw)?r0ToJul40^$>$I7%Ax|gXY@g6; zPwz&)+b6gkZuss&J;^RC6xjfq&{`EOOk$uzwO1CUdktFg@Gl6%^Lr0dvJT3%HG3h$ zJ(|nj?SnHH*7eDfJ^+RP61Ez~J7N+d+H0DaB?vtRC(oHi|eqg}`=mQZSI+U2o69z-3*1^jyIMk&`G zI75FN@!&X&;}!tw)HMmp`Ki4jvUBgF4VKVzV|%VDuD%sHJD@9%L_1bFvaLS~Uk`~1 zKA)PU=GaoGC&N;nq)6DmJ-S_oBs*oo{laRp9UdtOA}%gEJ#Ts%_h?0PxMB?*9jlx_ zG~F|!u5a>evir#C0(;$GYxoXq-@QZmHE-8*uOz`oKX?lT+-1RHghfg|m~_rkcR}n; zb=umKxEB)DMfK-B-_!%G2o%(X-EXLf{i$Sn78woSZ=UyZvJFw)TfPocDusgDZlxy%wkIrQLUOK70MQFE>AH@HY|j4qXsCo{c3Z z$~_FIxUcQ!gf_|b@WNC}KfIEM(RoJ%nji~K;QR)8UQeU= I+@)Lp1JH<>2><{9 literal 23712 zcmdSAc|4Tu+dtl}vb8J1U6L%N$ZiNl_ML2_vXwPt8(UG_5<&VWGF8{-=X(M4}e!R%nTjCKl|PFR226WbzGbUzZ|kt&{WvBuQ-Zv>(OEG z`>|*DP2BhGW2uLJ_BXkptoQ9R7gN2fVBkG4H%yJ?=t*2%*rs_GyHp4WF9s2e?Dd(- zy(L^vlldyJ%~94#Hb8B5HY&jrW0b&QT-zw8xR?&d4Z}^$HkK?c zH`Z(Gno6iW`rKRfgG~XJ!w;%_S8rf$DvA`6;%qZ(sx3)n-{NWlfFGGnh4m73+aYWh zE?qFB1&X`O$yYHH>IuyXw+7zJ+H9k|eb<)9XLW1#!_9n6{KWg2Ma1NnV1^pP(dKvr zCAVP2Z)<#%)MaGTT69KPMR{>MYU3yadgR9Z)>b&Xu$ZDq7HOri;&l$bC&g>0&cghr zzrz@LJ#=)dUi@O0B7W4-II7OvvESKhu*jq(z%e_iLC=Aq7D?dBpMc%G5O`G^XApY_pchsb(MIN14>P5obe$HZ+F5fv@C^1VwlT~z0Pt`H!6}kFNH*Y z-xQJ5VvxZqJb-z`*Bf1jlL+jmOjdr>;&{LiV#e5Cvw5UD1$^ue3O_}t@1XU{2$ zq$9Un@J9XtyV^(egex|CVQlC2yK2>a#AZH7L6ARI>K$!QoCBu)sNW0FImp?gV#&*l zOqr)~X3>e06XfO~ixRy{7;$hkq;iLLSktb1U--`wlYUu6snFl-PI;G~j5!NfPZ+|= zMLthI1LRE435KgwK6|J_T|PnwGLm}ZssP*j;=3)^&L!s?L_PBtxs<5i>6viGfAtRs z$vEdYqm=;n*w*Ev%~^<;rG$=_F~Ne8gkI^zE`MiuT}$}ecXRo6IJ8!30apU==tDtO zJYt5}>Tp&rNclbsA$F)P(9-D3d$j$C>|#m5owzSWBawBo3&MfxxlEq()?<%Xi{(=a zkdmu5sX*+p<_JXUH-=+H7PzS)CTw+59!DqgLB)%}2ud);qvUkxj!x8xAOuR~r~-_@ z^XelP`J`e=I;lRCb#kZB4a+c{S?M6?$AZ=V3v~^h{rz1^9$)xtKcCsJYCzUdrKz(! zPixWEVm-IDy+>?dz%*OQoLUacY(Hz@wK|lsns#7KnVECw3NWd@n8pl;znZv%PaX;2 zVXVg+1t81s#R^FQjnTUgOf1KaRKBvdfSKIg`9)S)%(+)I!OJ-@-uq}Bb5vMFQ6wK( zkRjCClxbLvJsxv!!bCUmolw5lbVn*r@8!$^-M60FMVxl2x{4yXqz!(D7n`GznB$th zt?~BnTbey>3@hf;9%aaf552l;G%=m6d_RQXP@Y6H-f?*Ey)JhC&g5gkDz8LcZ8FFP zSeKD0kW!2Yv5f5#`Qf^G#1!Jmi!Vyg&w=|(6-f5utjHj=gsq=Q=!9d`$ci2K&^C85gAWZ5g(kIM4|dNNn%hsWvm7aNt@YfCzf3I}X z(G4$COW`7u&`(ABYHWH=Be#kVnhymK#Ce2nJi2s6kZgfRco0X~_&&nDTfS1=<9Nso z;*@3JGEcwGW+nAYfZuBsv&FP?>#R(|l8Uw%%rxcnTcuz!`Lt1IpO7;Cdzh>yY&@Vb zi_0ITXuDhkzj=o0>Z69KMOq%)MEp3p`Xqb_@yhxh-nCLT1LEAl5$ zJ>v+NVo5e>MlM-lp`S^y1cgk+caCc5FG!h#U$`8KK206JRGN*PAeXmt-#F_kFbn|J zaYpCP@m|R!tJYTg6_=GHl)vvbRX3^bY^NCeM4ybY0IrM-4ZYvAtpUyNQ(RW~>U3T0 zmDTolOGj$H9&N5hRQN`fxm)&X8)?`0jsdR^%7{p|F8qN^qpr1@_ePS}x8luXE0bG~&J`kLC~*s@2wUF(CH{r;xDAN4!{?4OA`7=B3?M=PgL6 zLx7$U?Q3>vLuQ@Q1!wGC9T(8Q-dmbV`naGLwl>E%kaUW{bLC0Vxq; z4z<0*MPBy`)jrh+JjgX$Two>@TYL5-`%>me5$&%$ys2A7^}#TBV76;xRlyHd-}`zs z;w{%`>YZGs>z_@{M!B9I0vgldd~UB_`8g^%pX5(yFm)I@4{{-GVpTNo;}=ZO-+dhD@j&YXy&d@^=;=WB2YNZs_5J(Hpz+D^`OZ?p zDdhrboLsvqaoTCybD(Hv<(8Ysjzm~rB$p3T0sZ)bu*D{&PFUS8U%_e79h;|cxZmP< z_OPIXdVy*%!Wxt!U(u62+a+Cm8yYp%`)~Jh--U@N0@kv;4tJ;4vVFTnOl$tzM@4+j-Z5pPKfPRb`y>k z8oB#4oz!Q~#&*?*X-N#!)v;T=-=yRchkiChAy5g5)))M%0>Az7RPZ+Sx{Tfp&kk(T zQtU)IsKO)ke7;H;$0YZ64=ce4>W@xYWg|q?Iq_9`gU&tE2h8`rmFKQdwORBnpNWVcX$8$Ky^P{}cOLRzlsMIuq2oDTo$^ETW~ z%q@fv9?6?}JuYZz_sa(?4sRj!yUG{krlvxj(nu3hqh7a1`$)1G@;N&uM8)Qz2+`DX z6o^8UqDh^kbvIh0?bi)-`3>0bOnGda>e6Pi4QEc{1lCi<*hD%DJ`$(IySc{7PmX8Q zPAXw-Ur@Ei}Hk0k7w(&aJ7OK#H#2vbovMhj-#gdfX{T4oDAU zAL7*PUm4q+N6QP4$0yX}P_0nQ+cbmS>B2aU=1qi3uNGbpAuXYQVZUL=%E#U8s0YDC ziQRJh)L}59gMd3?-dQl`o>za(DKZA3R57dA@Jo&8LH$*S1f(reEkp*J7Wn zx(6|y{`N+w=8109m6k#??74)I))fQgPrNgc9yyX5aP8dX0cqkvMAto;xZ{}OsHA7A zn3{kcCSg+o54hI&A|vAxH$2i+p#J&d4QV;%9P`x0!_POphHqhdVao%)X3M&Tfz8j+ zav0`pKGVe!zIDtQsI98|eCq}}G@#wiLKN;Neh|2CAKf4ukB$=xWJ$=#3`Ja-G{<}T zjC65)i|LQK_t~2NCLD!Q>C)K#IxEk)Bfl2Y{`#J=gq9lzGl7R+MeBU?m>>=5&1_TB z+j@HO!Cfxk8_F%aU(y5?{rYw8wJK@tj>+cF@o+A3^bh6gvt6^NH$AyG>%YF_T=WsU zD%~jcAlku#4B9Cs?b`?= z*q*lqQHZeiD6XkaYYAw!RNH}rJqYU-0C9HmTbIJWOk_+5^9Blo9fPD13cZMx{w_Lu zfbXWi{tWm{0e{RW{i#d8Ct5Do>1jtMNG^nATL4s;`=JJ;0u)gwen7#C-kd~0OVoAe zuMNX2@KXDKP?_?#zpN)Y5rw9A@zj7)<-CIVk+o-F-!a7(VS?nIv^Cn&5(E1&iUcii zW0}4Y9%m>6#HUkbPubWE7G>|Sk(npWz~Np|?=SUKg3CYc zi5$jEDd1Ix=8@g{;T)p^jvgC`oTV3PX|8rveO=W7izprK6W~CtpT64c`qB#YdL471 z6_Z7|Ws_Kenxe#<4?GF-cgsVKwS5Y@c<+KMokDC4LJZHtTe;(_9oMyZ=P9?6UxEu% zl7p0Af2h+53zT?|*znm~p$i6`9P#=3Cn_YQ%rH!O@Fy%1l$?)OAKs6YA+W zeg9w6U!zDz9OOs{ne-9!7ASU;>^qvAOi&UPj)NE@{|=WaKeUDU9q363C-Qn(T=@0F zAZddm>MnwJy3iZbCm(~q2=i5k%gd1D1hKH(u567hYFy-m~1}f||u$(0lim{=bj%zjg{))zT2}($TO1DJ1e)>iM^0~d0o%)kbMj&M6E(kg6%TkDy_?iIE8vlTu zJ3NoJ2Yu7zfSuDOvmKJ&QXAgmL%(!x-~9G;){7}syyd&(00|)UhP2u5YEdW+^A|vP zY24uMsf{LTo0eOxq7&Jhqzu;YzYfJaV+sp=vnp<3y$Fn&QGevKVeKH(SU5Sa&LB)Q z8{sX$H|3kuxHY7>%Oa9Oo&cXI<$9IdI zXdeoY1Zq|`kf6LcO3s%5B$i@M@pzQ_q{rUKbl{kb)#iRe_vZ7C_-}c4=%D4P49b!b zGTe07xQ!OjwOiqFG%xe#27+9R8=a?a*g=-&ciHK(w+ zrudHrl=v@z6mDtJx8@kp^5uE_|B%fvzm zGf$_Hm_36(W0dqbn;+~Rg!R9N6aL9rFmj<9x^s=|M7`rTa;eQx=R2@cc?>%~u2J$k z2=|=3FqL9Y*GH%oI`O!Ha{mX~#C0T9uzWk(CHtd)-T<5Zl(P_1qqsVb2-~*D%x(a}s-cx{Ec^ug^SH#-+S@evtbL9nID} zL*K878NocRPz>7N%u<-s;XfVEgK9a@!agj^>Z|D)cOg+aGj-aQD*BU{e_`pJ(9n^y#8;(Q|2s#DYqwEoIvy|`(e17dmoxSAg zs~}<)a*MX&DYDSI4Cb*2R=|EbYUuYMuM+hUsen&lOYVoJRXgg ziV6Jb=~ZlR{cn8;9dpqdC@&fbFW#)ZM}MbmsHZ9aH&60S2xa_40GsL5p$(64E1u-k zZm0X21lxAv^Vz$fZ;hxA-ZIYYmAXPZKS3f5CkLq{F;_~^E%Xx4K*Q^>11CLO=uGD1 z76SPyjJArf?NRcDI?`7>(zK{n>+KN&QRZP2UZRJstvOrJ+y@>fdp*9cM4DTETHOj>x)zMM;j=@k=piyPqx3@{ z#EA$e$Vqq@4fqRa}s&$kF`&1waWXtd5Ige}!J$*9VtA2$oX| zr?ysBb#7GD1Y=C-_I5-UV_|-NT&C{3L83Z}ohj95&ZtgthP_E3f95)Jfq+sr%H-&@Ip>0R?7+)wQywulQ%muzV0mb z!$l&~&V&gO+1F38KWtr_<^pHMw0?0PBk+_a2iw)g5w!(?2cvDVG+11(4{XSe{2kL8fg~b4|03P%T@xXP{tHMFiqj-r`Xd+soLyR?}JWbvI%?I0oTTRQ?bfex~ zDsizAy$)mrY;@E`J$yw$ia1D&jcj#&-tKzwwSvItfeDhc?Sy}@_1axRkUM2ih=G13 zi01Iqfb{!AG*6of0}2QGd3G#fXVfE7yZ}D)E!3!!LoKw4h*J4>J8xP|*Fk`9ZR`l* z!VG0y+g=B=6#PJS1L0~X3%-6mP~Yi8wmq)bpjfd^Weu`_U(S?IW}ZXRLlfru3U5@Ul*O$=uYv!$@8fH(!J47 z^=XAXb%P#j_XIY110g4xu$Em}|map>X{tnGkI;V zpRljwg9UOg5Y|%!t89LwB&ctC-1X0boGp(o!Vg{`p9GcUk>8#c5h5MB$IU`=pY1$C z8}h$3i+#x=x$@F83nWS^?KE(-IT(T19PQC($3aQQlb&aJqBIpyx^vL2_Xt(yH~JV{ z!|aU+P5cm3pDrkx&lB7?grEc>XYFD9O-zJbi|Cyk@uSKZ7-7)lMnw?c8@ZuhZ(+#$ zgCrq#ZjKF~anHwFus`y09bLIV=jKU~53f$E%vFXdI&S_ zS(4FRIlUPR2FY40PL4U*NP_mr`f7kbjAmxk5c=>YP$p8+qYf+VCiWLqX37Z^*?9YE zr@v3rYQhp}kABu7^RnyG*3!-ZM-#stm3WEh*p#|mC-v*7#B!gGFn<9u&*oJw6WVS^ z6~v@@-gIr^b|`Bfk+IP~2bpA&SQ+m_1>--3`zt;A9ZF!mreq7JUt ztvV=)oh?-=Pj=Fk3rG)*t3geOFF>&|eZTxpYFj3dR0_X^wqrlgWPWVUBvalB6Ysm- ztlvKNLCQSa^=^-DK5=|aH|m63XzRa4VKXv_*;6xS`lxCbzZoIxp?o-9Ki$s7d;F*QEe%Rg4+#h`XHqX^JI@CGC@2> zI@F`@GMkzrPMv!9CE`L83K@vIFN5oVLX3-OHvG$ir{gF>xNNk0>i`%d`s#JV0zvde8) z`6Jvy|8VZ_vL0C`%lsMb&+}5#ETlgC!W;krj71D^)T;O09KM!`sCDS@!gcn!-c(Fp zeK6Ul5o+z{*~#OQ!U5x2Dndwf6T;UGKXP5t7x@aXqjK9~BAy*oNb$Gl8M%4Q+3wRt z-!@k(z1){$PovV&8{@3`@HYAzN)as@D3Ra8S#(v>;oj#e2R}c*kMH=SiYgNQMZ>(NQJLKt2MxER29A(LXFWXNSiG?VMz;H{1AH}(( zwi>~D($*u#?4N$Ew-fM%4(Ym4H@{B0SNdIMrl$|+9vYi z&-GhVFe`GdAp<6b0kYx2pjql;;NI<8C%Vg+=sVTBd_Tw8x(&L ze}t!BcYe86Ir(#ZFqBB7_z5~|`jjHl%k|##=@C;|ufOl2@PjSCY2*_fRI@7&kB#@* z)5<^kc}0xd;C1@#NBqhecyfS43+s2H zX!)E6H`7uH06ObeC+GK(6Nz9)L-0xr(Mogub`J$O1KzO?u@h}uIs)5pZY&@0&9kev zP{tsMM>h~{wop`8uAOyays%I1cLdp#dW%}9Hkax%ZueAQ$7PNU2buUqi|mWO`cC6V zC2R{<6b8`s8cRuwvw1}N(7p+wCBC{f>sN;1u3y;GM%|h4nGid=e#m)%zr_lrz3nd+1I^F$p>$jjV!`@3ZL)7#&i=H1r+a(WU>_|q z1Pc8WU>-ll-{wt|K3spUFM-=-Zlwp*K&7CSuJch9ftK|_>zPcGum`U*$ zHqCCzLb3U7s?b6rc3^cjxWFc+z?y!a%8{$LSqy2P(&sC5ONNqHq^aeDit_|#{M4K# z$9m*~EtEME-X-&U{opc((OQcfQsdQB3dT*@WVQpI4rt=yWYBpy=HX!3DRc0=7KAPK zI#tsl7&E_VrKAL)~F9_{@qBRS0-3Sc-2=epNOQkSj4Lw+3$d|zkKV$iE@lS~0 z6e1-Zjx|P=J-54g<`!fYAKWK|s zwPs8DL{D#CbZ*O_^5{qHCBw=P8zMSCJV=1yK|=XDla;j%uI_Q^&V!{4;eh}|(OsI5 z=ZVsr`ym3re?h=^zVf+JYF62^1=`D~i|-zWt$+VuYT0XW!GXi5psPCLboKQsdKxuB&c zasfe?thd&R?JQ~0q`__@VL#k``nU&c-FR0@PWdAxicGeAU^WAnYVPAfIVdIHXNg}x zj)UbJiv{o~pue3`BbaGgf3b+O%Bd(I!Fl_yCwmLd_VfY#jlIC*FED>5as(hrFXAjh zEwlD=tBNsGy@h7RssWdw#P=)6xc;#u1mcx{T{$wYL))a)xnKwVez$Au9~!CwtIu52 zgAi7R+Mm#=q)++K0hphyZ(BKLvGEvMDDBklV%O_XR_?`}D<}z5V8Ur-olWeE^XO+5 zqp8HXj60aPG)oh+>MqA$=Xg;P0)X|y@{Q(Zu*~dG>RSR-<%Z*f%lNP8OAUVJi2Dd{ zArDu%PkWcQ9gn_HV9dI^L71l0=pG|y=RsNCc%t?lxGkkUbJumW%Y=jm&$RWygNj?9 z+PyhV*MF{12Wu?AXHWPDH_Op1|ZPTSMy8Pn|GXvMC=~?_VJ#*#o%9lD&E)i9eq78f< z{#<09?xLB1c>4@IPLD7@c8RDoQHPn1Q%7p|y$67adeM?|jC-RuE-En4-tik5nRXIa zlEJWLB4rdF8EDJ6CvX50OmpCItasBXf;zj2ns72jjaf95LxU&{>OJuacvwCg)5~(H zp^K=d&@RyTWg>-c^0q!$R3N@h@C#6uyH`I5?x%Eg55vyLm)vOHQr_I(BF#cgOpqVp z_T=WWhaOgw#@w(s!u>)fX7BICf%{gIk1{`8Q3H>D4g2k?1F%v&LKIG!iU7+Gw$Dx+ zt|jN4t+G%O&wXyUG=D)P*mag7?2~Ycz|k`tWQ`KUPDz6W5p1eZ+0xIBEU4JSXY~(? zn+I2H#UVf$jU1VcrF<>r^?*?~j?<+0L%`KcxR$<)KVMzi`auoE zssF0Gq8~Fs6wGN5$1Ti6^od_D+OI-zNe_^=kLc=P#YWhV~85OXvg95sTR) zZM*T^lHSVbF{+9GjkNU2gHW~<)$9A_rrE)Hr(b)oa=#NLJ;-6sEW%k*z4yU3Se$xJsdi(veY_-I$ zPmc@pN)|M6Y@r{iW+~IcQg&rZ>cYg;g51@VfDQaeqz-JDC)*h1!73(F7CKXXIEwuN z{#S98MU9)|F5z`gq{Qv6zH!G-d&AttVe+f*Cxj!sralo0h}m!*};ypQkJADIofxK&L5K zX$8n|uOvGQ9%kUlR+(kJ$=sbcaOTYbQU6A9FYf6EspfQ`b18!N(Bry4+v>TTIV%li zTmKm=aIK!b;}$4sMF%A~k%QSQ>y5W4I?$0>IG7ty!e>;1e(hRIcwowNUcdT(G0%o4s?}}v%rR6Q$0|@emp(ix&z*vRr zj`&i*x}gaY@2|&TEk(y8@Ri`b*Cf)7po7oiA2T=&lFP#xm+3|%oQ@d2?ynFn;d6Wj zvL_M~dbO=qeKG2l$3q{UD#XT2kL#t|ZwN;khMU-vd~(`|bKfr9ndYyF0MuqKMQ?xO zV&_FKy_?s1Ob8EbycDIgTYjEA;>3kjXowC{PAYYu7KtwCXcj?1T7 zl9dZGR>Aoz0?|2ZS-Y!ePkx;%G$dy%l>v7Y_1~I_+OI?%uVC0*I6E)%HNvN{?}zJ? zR~)jszZ}A3@++YX9V_7G1sC>~XW*&4j}a(97Mr|Pxb)j?;O(ZW68?KfsD9^j1J}LP zob(pYY?|c9Zy>gr*vl|>pPwX?tK8NHtu_&ArE9hDwsIM0cM|l0WkKUIebWW^O0aqf z0grrKxRKHoE0RLwNJPv_Np>eTDRfX?N46~MLrV-_=@Dhxeyg9>!Xe`~`KGx4xAAth zFY8!W7NSwyZIm7B!do?8uUavkPOwtv84Ho?=iX{Ep;f@jK?t!Be!&kUg1`@W8U?W- zgxbAZ-+m{c{cBy@qz&N1+LIa3UE!yD$C1s$I4?Q|PeQExpYiiw@tyn*VVuNl^5R8{ zdQWE>RNO+R>W%UAY3u&80&ETBgW!_zqngz83vSbayocQX4r-gaWtl(~nk&~(8_qIs zl^;CL1c%PpqlhoI84M^VyB}NqWZ?>pn-yrxf#WK_ua}rR^8aFf5>dgh0i`~KwaK%! zd;H%XiHKDA^06G3tt-$;tmc>;!S_(E**>8K8grjqwa1{?{2zW-r^O9_Ng4n;@@5 zCPRBIu|X)>(hLC05wyMPU}61C%;6|R%TdCY>?NDdTKKMR?&`0;Z3dOGj|D6Hvm-Wb zp2+ZkTZVT9tKNKNpAHttPtIle ze$m9r|Gww^etPh+Xv6E8xpfg^=cgZ773s~3eKq77)2j09ad|mSU!Xa1lRFyv_uyu1o>Kv zbgHiPnu7$ct^nIR{QNg|Av}K8cd(hBPGv0?M3>kYABQ$F6aj0AZh-Rnv0{-bupzM8 zVWL>gN&6z*rtrn++{d?45Y({){$R+AN)QE-?zuM6=9!(D>B|B-kz`}MPT`Ls*8%Tf z6E@s=K>AHPu{weyyJV&C+cU`ud=YY?IBE_&D&09q*?Z%`{9Gp6cCu6@D&Rr~#b>*m zMSHlhgR5G^-oN^nnj#Ci>Z1uEc-IPT-Mj62f#axl{$GPDqLbKOLW zD4D4_`|Yz-KC<5hm!dM)IwmK(SK-iP1={=0fnO|=DJOmv5Yx|r| zKW3p@QvpeI^G37$soq7t-d6;Q=c*}H5->2oxE7+{8P__(HAvJ?0=O(WDj=sp>eIt5 zO00uadQ`%0iH7$94 zqkcW$$#f_&{N53y#$%@2rPUU{y2xljNEJV_JL9%>^uM;RkqNS zIZPqx*G!r851S9(-lyc=%|5&jgE~+RIZ$_8(g@*t3s`9??Vq*A3_QYlP6UT0JinO; ze^Us(&(jn?RCyIHcn>$jB*C`gwt-oEnZn7r+y`|*yMazvRiQegW@1{{Jl`7s3W};? zn)Fx3;WU`7Mcl}>7PfpzSBdbB+^%(^?jqmItO=1mDIKZ-->x_odFUcs=K zzcY?{r}U|>Wb4;NRlWoKfl*5KxcK8@_XbPYeb@az^4uxYBJuf+0qtJuTl(bnS@uK( zA=ao-yS4?H=G3E(sq>j7XEX4#q-5O^pjEbql5bI&2{V<*IP&!@Msaa%i!$$eqv^gr zCqgEXauI6$93$bgP~KUhIv)ZMcee)Xd?*YFa`l=c)A`e0oS2nrhPi6Za|J6?<>q)B z(V_L9VyTQu9Jvn)gqkwNiaucw&Cz)(u&Sv|MDy$LXXCbbuoV6FG0Pr5Ue+jIY!4oe zFu7WrDj}~s9%8jPP(h-Yw14CRoZlb{H=UQfiiAv)@5Ii;8;xutzPylvi)n;&IOWyz z0B@Fx^e~-f&q}W6@-^koa(Jqn{`|=-v2@jWa>+f~;~BKm#u=osNz+c=+}!rV?e>>M z0^9j~(GOqUjeT%J=hNAm@JiP~bXADi@FqH5(>OoD`?tcwuiUQle!aHNLhbeQxn&iB ze8t<@d6=}R32l1|f%4$ahv65ot@TRi*x;=^1I-(zk}BCFKh+HrwH};3hM4CWCJJvG%Au<-s+~j zY=_*7J5)8;#&UXEAX(QX(^@#on7by%f9}md*kYm}A(M2Du%xOl_w>!50|L9a2lg0+ zfG%(WT^`;dGV=YbyU%>>pZm$l$YpT>C@)-3>q64u^5Z3Ci2BTK`&SDyZYT@$iRU+= zyDE51f?2MOdLC9D*{;Rs+mN<;#BT6454UX1*Wl*m7{_e-LjmN;2$Bt8xo*-C$%1g) zYsrXC02~xV&zgPjp=8grH9gf#362PV)GB&z{H}YSpL#}Nt1$maZu7{PUaVcSax#nZ zq;-vS!((STPK}Iu8RW}}Z_ucFb!jp#ey+64T#jCOxi#aq+E=o=C!zM^Klbzl(`LlM3*m zc?GupX(Uza_R51faPncVp(&Zw4=YFPpQpHHBN%6cBHH!Yu9I%|NQtjpEF=TcDmmb6 zvC5d$CxUnq>&VW;ru;go9032D?y!=@>bIaCQcXM>>lh-#U6bSf=*jpQ#&)wzu^S}` zduBl%F5E=4Te$-l}@@%ahkXNP~9 zwZW2Cfy=;~XyZHy7fg_#P|n0jSbuzX?09!$kdoqr=k)oSXd1 z!arc$>oD1WXHCCus9I_L*_H!jB_!pAL_sV(yb-UXmz!TnRD=TqbG9TU;h}&af{|_@}zA zaMR;ft0^|_NS~XDM?6>SVhqRMMk)=khq4_l`o8iwDis_Bi5JD@bt{4N-pLT}_qjAP zn2RI9vYG5E0t9gmuv$;5($~HKj@b@+3(x*?M)Je<BOyb>I8>7Cp583 zRdzlZU&mead<9BRJ3a`1UkBe~c1uehAlv11TG9OOg0yDd;E(_0#ven@ zhNo~A{88A=yNnQwKbl|V83@Ejm3G)GcQ%oH4~Id^z0%WanFyeZs{^_5YU6Bv!QTwY zXCH@Pw#qn1@im^)J=@|*B~QuTr&XKQ@_32a;{^sT#qJ|bq}2!o2n{!~iHyD1#wEr= zu!EiAxfC(jSwvcG5bF?O5}W4$iP4@i5?Z}%n0 zUWQ;o+~9cH&?@Pz=~-ZUtu9#sw5`iP5}t`JP=?_EqN4!U zH_x$566@AKcgh1OK9KtVJHP)wjDzk7XvYc3emmcUvGZND(SVuNXL&04_Ayaozp3NU zX#UFcf7MUnb$V{H)%A`}TM@I+q7>=l$2RNOEZ_P{_v4g--ntKr`ThYV+K|g*L3?>V z*V*y#eqKG0#xl0EETc3pbz{JLMaf-CJ6>-If;a8RYK7 zYBSWc#n0C{rZo6fNX~AsiMkw{=2((X*geyIQO1xt8TJZFC?&CRR z3h7RHoIHu|e4N2vmxV*%&nVwx?Mabj;9#qdw-ah?c6cI<%SJ^3Rqj=!)z_fTZAGeyRZIA90HF(|CSIG?3WXJ-Xjo@?8$zUOU) zCY}&(#PufCSHqX%_bZ*}F}Al&3!iOeXmV6k2#1i-@G|z&l|3v)!-bKnlbn`phrZam z!2Jn~gXl_{Oj`Lj=M*nSa-qjLXaT&&YT-+L=6Guio2IVsDx&#H6=l zc>Hg18>Ai5A!&@lF6h*<5?3Kz;idM!!QnA_KzR~eS_I4F>a%Swkbb;!2}}P^Z9tD7 zu@CT|O!X6IBtNzk!bwObr>4zW{ye~bb%LgC}BM(0S#PfzKyPM&2KO0Q7L_uo;EzCgJ<$Yu3Q0C(Sj^)Roa(<#L zyPIpTHQ@hnIIujYD?-&-7O%+_6Cuy}wndO%D_Y5fYQ%i@ZLAzE9}TUV7sEWoaH%CG z>`s{!uYzU#687O`17VMc?kyLdaxkCOa>23ir{-_H!DM;3-(SV@Q(K0Oeg{L|yMishX@Qzp6a@4SUF(bZMWwFvLQV5L_5O zXJV-=-tiUFp)}CS8D=5?F{p#l-{rONNFZ&X$06Ax9WGq7UKhgrGe)VJ%_sQmBWT9N z_=Q+Z$+Vpy&?_A1kxI4+oT*$YH^rZI;pM+tWfu`XE1hMA-`7HpIi6R)iC8F9hFT?b zQT!*s-jGZgbrjH5dVd>(3 z`5>F~4-QI=B}8>3^6azI3ZRo~zOL`Ge#Q{&*lqJK0(B2$;B-M<>h&_+kGqHlL3957 z|0d2lO;1}~2HgYD3eo3euf+xoq)!;Q;Vz{h<)u~812pjEAj?9i{%607Pc?S&es1a? zM)f}9S4wT((Y!kT%lcfv?Aqh;oCJT5JtbL=`ZJ#DVXWOE&#U`Px&&u^RBoCsoqgEn zCveg0|FkXgx_-HemxYixX)&xEs3W} zU*W3B>?|x2h2UA4U(}=p;tiwn*91gyzmb;GZ(kKr@z2wR_$y57uOd)q$@f;LlElw$ zn?8fNN7pmX$Y$O0c8I(Pw_7?XW@xcaADqVuVr1ioCjuY1*0AOhxRbzE*KN>dt$rA> zf|xZ9pexO<>mHT8H9BG(ext_Im#CAGe+b1vV4>Dxh~~9m)zwtaQk>=Q-9}G+@o+b> ztB(5;E_UI+aTFW{GcW{PJ9$!|=Ty1n`efs>CRz>>m*i|V?yrMRP9Ngy;$> z6E6*u59=7Qohw}WgALM2E(yN)F**MxA>r!D1aCg~#W-$ASVoRFgd&(F<}OFEE(MbH zFy)6Xp4LYedHCM&xi9No`9em$=<^|eXLUo!DzFbj2FqJc)?|56VXh<$WT!6vK#+KD z*hdIgUabT(Ih+B60_U`U_Oir}Bs43$`KP{&F7$|aJ8k!uWUw|>&1S@M?*9~o;jRKZ zThsDs&GQo!Ox?;7I8UedBRiC})E~j4o2xxq1cthm*@NKP+AjPL8HPP2aM;6JFTfbg zAPhO8a2xGo&=`wU@W(M?bqk)LxUBMGGZe0y`iX010mtM z`>dkj2=#!{Wa#Z1Zh^AN5h}uaA{0UP@X$NvWi;;|COQNWGD%B2mL7GT0mk|re(d}a zJMu(NR$jc=tjblk<+VL&f19?hQ_4jNmZuT15jR05R+X<{C%`c}1@|CM~wY#x2Ck1?iz1NKy8h5qOcFE_8C z#rUhuD^FQ+v3Lg6;iLj&#FKZ5>mjXA{h;v_cKFt9TK$(U%_lxjf07V#9gy}C9L(sw zQdS&DTxpPO_Vrxc#=mdh@%?^D3aeCXzC z9lrg-{9~?a)H-8r9^4Jf@*BI}T{3TzD#n1|Z@zNkoOhwbefJDCXd#_3wn9F>EhTV_ zE92Z(JSiXOU*Az+K)h5KyGQ48FD?99s^BnfVx|^@HN`)(mvU)8wF)3!7;3n6<}9R^ zdoY9*fRoB#V4_hPSmPn9ibS(@FeI-|)n~W;%n4XZ6>J`^e)*tH3B)|1CTF@>7A$G)MGn$^ReFVH;r9jmAKcy9#dGl7u!NwwM1TA{_q`3s; zy?*NB^rGbaXa29yM#={UT*bxObt2c-b3uD);bWB#uv>n(w&P!ZT5RKUE-Q$yupK{1qpO0ud--Qh?iJYy>p&+UL?yQ;titZ`_y$^9M*4w&Dg>(e zBm}S0OU6*X3m3Y-{1PF6v65|WEZ#m;uBOO%y+OrzFK`q5&=-G(A8>nQjHm`etwPkn zT@-e%9T05~ZZ1ojZuE|bq^!Hlso!i$abaQ+8feaFXw^>8%k%fPBAI%#ZK(LdBi+(#%5i3W&hksOo z@2iu3rT~X2va~#IU969t&M%T0L5|c=&~T3h_sy1tafOWVW+18wTsssN{#SbEA*i$J zU6gEYrp)jP1|u|l5Bf`EaxF0l1J^HR`P}N)9ZZY?xz-C2vbks$RVwfJK;Cz?z7DtB z74c!TVkT@ljMJU~d${rINjcW^9iAOXa`<9q;s8qeAtLV5DiFiSHrm*Z!0R4+a;nxZ z)EqxCT8~n#sfBmi9|37{kl--vm0ag;qoBI)uD3(Msz3hW=ZlzcNnHtq(P%`24@McU z?wd;w6*)5D&%ElA)U~uTCtDv5i#A;Yb?)1DPfjta9j`dPe^7K}WfZ{IJ??B?FwFBR zUUh_g#NaJJ`rHZIfNTwjqlYj2i?a#3#-(ckvQxpo;pM;OZ2#9m7%hq5yR)^PIH!e# z`A+R6+|p#X{!Ys?2h-&4fMk6x?e=7B4us3Uo}2tNcL%3Ixw5pm&_IywkaIBzDR}8e zBZYV)NUucP`PJp;Hfr5aFhzb(Kl7N8(fm$0Rp~_}hqJmh3Ac6>nt!xTHNHv7W z@}QtdEdsJe1Rf$GKmY@TNFf4qUsA?7ZRgB6^UwVI^78II_xHWO?Q_qa8px;oU6~bo z<}%LZn(3->y^s4V^(x)D=ZR%u{r(`(TPBs#Jt6Ype6On&zX=22;~J#QdmD|ox3ec= zPp4a%`sHyv>?IJg)!e%Vig4ar6$6$8IevOkwa1v3sm; zLl>+Yo1b%q4ioOz+N)B>6CBc&qO1^x&2bvK^>D>mkYb=Ib6};bu~@82aVU91rStW} zuoA5BqCn8)2-41sO0IA>j)>_V)0*!vpiorJ+FbJRZmc^DwU> zUPF@3}!tK~G{cCLaz@%?*WN_d!_`ys8D@#XNTojP6*iEi!qR2oB9J*;) zaC}=mav0%^2sIxUPtw5YQFkGHNz&&fcZp~skV{oAlQD2W>TPh@qf4E3-3R%anFAC^ zIlKK9f%|qNcTaR`qgVXy{*5|rrAe2J=SE#J%QWauEB#`AJrVo;$rE@s>Z^)hyjJU= zdQwHf)+O~=-(fa@5vS_)=h|H+2x^@^2_>t5IS=LkQK+3JZGUp2ixwI$it;ZTwIqLp z-f>sdP%6*ME9WPaFsX=uqPHLED^?lfAiV|wmPol%(s8HDSSZ{LcF#^<^T3-vY& zfsHC=ClUqCBzBI~G>E?Z?2e4F#vp|3>+>dKDM;Ph+)Gw>bv^w#ErE1aG+EVzF23eD zwFgK7f@`YZb`6eeXm_>13jvBt%&wpx2(#xsXInR~ZHtuDua!hXTChw)2teU*tE1qaF{>sEaMea;pxjrJdtPU3M<6n8-RpEul zg9Qw&8%;(gRb0W!enc*&wh%!tFcN3wZ|Y7MyEa#3vFw_yCG|~@?tY_~oLBd}H!KR> zvi`~Shp}oa9ZSQ8YH+lcpem*%0psy=#)@Y~S?QPVB3}b7&iED4-4k=k_g^{whb-;UEg?uTB6M) zRX{E9N*C!npg=S>64*m4KHD3nb!4T=zmqQJ{d_o12cP#ps*21}ZPP>8qQLY7%t3+&{RymdKcu-Nefz`_se)4rwF!{I6bWLHGAjNVG z?`veGQgW8}Il8~BfG9ogp zY)FNI$ho3VxC1!iGR#9?IM^qQ?LZ$O-z7Kva?iT)HCxL$^T=RC1su`FA;0%co_{EX z{{3oXct7!znx+2Y!JaBuF%tDDT<$XK+;Dl$FVc>?p;za0?@qsx0Yb>gRV$+gbQlzW z-REp&4>V0735M&2gfC{?pn&&7ZhBn!8_H8vZweDCC&M1BpkCN!ws_$V9$u5PPT$=A+;=Q=SkVY||EZPs* zp*wmGLQ6Y;E5UDlk<6HlS~_HfG*kM4^2s5K3V$Kw}x*urVzKoFDX$hUIqH8S-gF{`MHVI><(}T1*Bl) z4z9V6z-7XTkWd#`iVh0PhTSHdUCbLy`$62=gUp8(3aY|b^^%5Cvwmg?DeuII5z{`M zyi8|l{9PgjNh4A`kS1=&+V1b=hMU6Egy2@s#pY@XW)`hXBSf7Qqw@X1B&dB!wp6x{ zOt4w353>aOnFzUEk8<@+so-uXBo=!*;~%MoZ20!U+`O G{%zIZ5nOpx>nH90Qou zGLq7w_`{K#0)zqNAQa##V;|I0kV%i3X-e1!S?0mr-M6@1aCZ3IP)dKejJ1K|jNc#4 z_~HvdZL?LU68?kvN^GI=6pID6P6glI8QCR;msgXax_Y zf_-R*GDLpqx&M2$%IDhpW38iJYXFlvDPyi?^QrJ=HTbzd zJjUN~)pTd-2djw5*KnvU7=DZV#$|zK%gS^R-#3lzNFq8}Wy2;%=~GmjRL8W^rVup8 z{k)4zQyrDHm0c<}$kNp{e)ME-p}3so6SXa%W8;Aow$w&1fHgMi%-u_xO+JP%5FUd# z9oLvs@RmZsPe1B=EeaohUFs8~o%2j0tP3taRTwjM;eE4MA5z;TG-_Mfyl0Dx{NlG> za^$~)FO~)xvR>ygJ|)!E;78^VIUq-9-D+9$Z;g z`w!}5qI&YEM80~R#FhaVz;Ta5w$M5=-P7PA!Pr>_VOKPx@;3Roi|et*nWp>T2ygB% zJO9SE=+(*YlkCV{ha;~te4OwBStY%h{*L|jW4UnR*mn[BitLocker CSP](bitlocker-csp.md)

Updated the description for AllowWarningForOtherDiskEncryption to describe changes added in Windows 10, next major update.

+ +[Defender CSP](defender-csp.md) +

Added new node (OfflineScan) in Windows 10, next major update.

+ From 87019adff190139268d466f9129f8e063b7c80c7 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 31 Jan 2018 14:54:33 -0800 Subject: [PATCH 03/13] Fixed XML. --- ...bleshoot-exploit-protection-mitigations.md | 217 ++++++++++++++++++ 1 file changed, 217 insertions(+) create mode 100644 windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md diff --git a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md new file mode 100644 index 0000000000..0435dc738a --- /dev/null +++ b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md @@ -0,0 +1,217 @@ +--- +title: Deploy Exploit protection mitigations across your organization +keywords: Exploit protection, mitigations, troubleshoot, import, export, configure, emet, convert, conversion, deploy, install +description: Remove unwanted Exploit protection mitigations. +search.product: eADQiWindows 10XVcnh +ms.pagetype: security +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: security +localizationpriority: medium +author: andreabichsel +ms.author: v-anbic +ms.date: 01/31/18 +--- + + + +# Troubleshoot Exploit protection mitigations + + +**Applies to:** + +- Windows 10, version 1709 + + + +**Audience** + +- Enterprise security administrators + + +**Manageability available with** + +- Windows Defender Security Center app +- PowerShell + + +When you create a set of Exploit protection mitigations (known as a configuration), you might find that the configuration export and import process does not remove all unwanted mitigations. + +You can manually remove unwanted mitigations in Windows Defender Security Center, or you can use the following process to remove all mitigations and then import a baseline configuration file instead. + +1. Remove all process mitigations with this PowerShell script: + + ```PowerShell + # Check if Admin-Privileges are available + function Test-IsAdmin { + ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator") + } + + # Delete ExploitGuard ProcessMitigations for a given key in the registry. If no other settings exist under the specified key, + # the key is deleted as well + function Remove-ProcessMitigations([Object] $Key, [string] $Name) { + Try { + if ($Key.GetValue("MitigationOptions")) { + Write-Host "Removing MitigationOptions for: " $Name + Remove-ItemProperty -Path $Key.PSPath -Name "MitigationOptions" -ErrorAction Stop; + } + if ($Key.GetValue("MitigationAuditOptions")) { + Write-Host "Removing MitigationAuditOptions for: " $Name + Remove-ItemProperty -Path $Key.PSPath -Name "MitigationAuditOptions" -ErrorAction Stop; + } + + # Remove the FilterFullPath value if there is nothing else + if (($Key.SubKeyCount -eq 0) -and ($Key.ValueCount -eq 1) -and ($Key.GetValue("FilterFullPath"))) { + Remove-ItemProperty -Path $Key.PSPath -Name "FilterFullPath" -ErrorAction Stop; + } + + # If the key is empty now, delete it + if (($Key.SubKeyCount -eq 0) -and ($Key.ValueCount -eq 0)) { + Write-Host "Removing empty Entry: " $Name + Remove-Item -Path $Key.PSPath -ErrorAction Stop + } + } + Catch { + Write-Host "ERROR:" $_.Exception.Message "- at ($MitigationItemName)" + } + } + + # Delete all ExploitGuard ProcessMitigations + function Remove-All-ProcessMitigations { + if (!(Test-IsAdmin)) { + throw "ERROR: No Administrator-Privileges detected!"; return + } + + Get-ChildItem -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" | ForEach-Object { + $MitigationItem = $_; + $MitigationItemName = $MitigationItem.PSChildName + + Try { + Remove-ProcessMitigations $MitigationItem $MitigationItemName + + # "UseFilter" indicate full path filters may be present + if ($MitigationItem.GetValue("UseFilter")) { + Get-ChildItem -Path $MitigationItem.PSPath | ForEach-Object { + $FullPathItem = $_ + if ($FullPathItem.GetValue("FilterFullPath")) { + $Name = $MitigationItemName + "-" + $FullPathItem.GetValue("FilterFullPath") + Write-Host "Removing FullPathEntry: " $Name + Remove-ProcessMitigations $FullPathItem $Name + } + + # If there are no subkeys now, we can delete the "UseFilter" value + if ($MitigationItem.SubKeyCount -eq 0) { + Remove-ItemProperty -Path $MitigationItem.PSPath -Name "UseFilter" -ErrorAction Stop + } + } + } + if (($MitigationItem.SubKeyCount -eq 0) -and ($MitigationItem.ValueCount -eq 0)) { + Write-Host "Removing empty Entry: " $MitigationItemName + Remove-Item -Path $MitigationItem.PSPath -ErrorAction Stop + } + } + Catch { + Write-Host "ERROR:" $_.Exception.Message "- at ($MitigationItemName)" + } + } + } + + # Delete all ExploitGuard System-wide Mitigations + function Remove-All-SystemMitigations { + + if (!(Test-IsAdmin)) { + throw "ERROR: No Administrator-Privileges detected!"; return + } + + $Kernel = Get-Item -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" + + Try { + if ($Kernel.GetValue("MitigationOptions")) + { Write-Host "Removing System MitigationOptions" + Remove-ItemProperty -Path $Kernel.PSPath -Name "MitigationOptions" -ErrorAction Stop; + } + if ($Kernel.GetValue("MitigationAuditOptions")) + { Write-Host "Removing System MitigationAuditOptions" + Remove-ItemProperty -Path $Kernel.PSPath -Name "MitigationAuditOptions" -ErrorAction Stop; + } + } Catch { + Write-Host "ERROR:" $_.Exception.Message "- System" + } + } + + Remove-All-ProcessMitigations + Remove-All-SystemMitigations + ``` + +2. Create and import an XML configuration file with the following default mitigations, as described in Import, export, and deploy Exploit Protection configurations: + + ```XML + + - + + - + + + - + + + - + + + - + + + - + + + - + + + - + + + - + + + - + + + - + + + - + + + - + + + + + + - + + + + - + + + + + + - + + + + ``` + +If you haven’t already, it is a good idea to download and use the [Windows Security Baselines](windows-security-baselines.md) to complete your Exploit protection customization. + +## Related topics + +- [Protect devices from exploits with Windows Defender Exploit Guard](exploit-protection-exploit-guard.md) +- [Comparison with Enhanced Mitigation Experience Toolkit](emet-exploit-protection-exploit-guard.md) +- [Evaluate Exploit protection](evaluate-exploit-protection.md) +- [Enable Exploit protection](enable-exploit-protection.md) +- [Configure and audit Exploit protection mitigations](customize-exploit-protection.md) +- [Import, export, and deploy Exploit protection configurations](import-export-exploit-protection-emet-xml.md) From 81b365fea65764568c4b0b473fcb994f49fca36e Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 31 Jan 2018 14:55:46 -0800 Subject: [PATCH 04/13] Fixed bad link. --- .../troubleshoot-exploit-protection-mitigations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md index 0435dc738a..549d76f11a 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md +++ b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md @@ -205,7 +205,7 @@ You can manually remove unwanted mitigations in Windows Defender Security Center ``` -If you haven’t already, it is a good idea to download and use the [Windows Security Baselines](windows-security-baselines.md) to complete your Exploit protection customization. +If you haven’t already, it is a good idea to download and use the [Windows Security Baselines](https://docs.microsoft.com/en-us/windows/device-security/windows-security-baselines) to complete your Exploit protection customization. ## Related topics From 6d85dc32df72789ae8555df426744b70b3682925 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 31 Jan 2018 23:34:59 +0000 Subject: [PATCH 05/13] Merged PR 5631: adding redirect adding redirect --- .openpublishing.redirection.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 395247be86..aaf6b0a337 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -51,6 +51,11 @@ "redirect_document_id": true }, { +"source_path": "windows/configuration/configure-windows-telemetry-in-your-organization.md", +"redirect_url": "/windows/configuration/configure-windows-diagnostic-data-in-your-organization", +"redirect_document_id": true +}, +{ "source_path": "windows/configuration/EventName.md", "redirect_url": "/windows/configuration/enhanced-telemetry-windows-analytics-events-and-fields", "redirect_document_id": true From 242bc46edd996e0f43366ee6d78b32a6967f47ea Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 31 Jan 2018 15:37:35 -0800 Subject: [PATCH 06/13] Tried reformatting xml. --- .../troubleshoot-exploit-protection-mitigations.md | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md index 549d76f11a..e95d263b12 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md +++ b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md @@ -146,8 +146,7 @@ You can manually remove unwanted mitigations in Windows Defender Security Center 2. Create and import an XML configuration file with the following default mitigations, as described in Import, export, and deploy Exploit Protection configurations: - ```XML - + - - @@ -203,9 +202,8 @@ You can manually remove unwanted mitigations in Windows Defender Security Center - ``` - -If you haven’t already, it is a good idea to download and use the [Windows Security Baselines](https://docs.microsoft.com/en-us/windows/device-security/windows-security-baselines) to complete your Exploit protection customization. + +If you haven’t already, it's a good idea to download and use the [Windows Security Baselines](https://docs.microsoft.com/en-us/windows/device-security/windows-security-baselines) to complete your Exploit protection customization. ## Related topics From 203ec9597bddf5558d77a3e826e3b4b0861632c0 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 31 Jan 2018 15:49:47 -0800 Subject: [PATCH 07/13] Tried reformatting xml again. --- .../troubleshoot-exploit-protection-mitigations.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md index e95d263b12..ee23324d0b 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md +++ b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md @@ -146,6 +146,7 @@ You can manually remove unwanted mitigations in Windows Defender Security Center 2. Create and import an XML configuration file with the following default mitigations, as described in Import, export, and deploy Exploit Protection configurations: + ```xml - @@ -202,7 +203,8 @@ You can manually remove unwanted mitigations in Windows Defender Security Center - + ``` + If you haven’t already, it's a good idea to download and use the [Windows Security Baselines](https://docs.microsoft.com/en-us/windows/device-security/windows-security-baselines) to complete your Exploit protection customization. ## Related topics From f21342fbee7cd23363d02e058c1abee05147082b Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 31 Jan 2018 15:58:38 -0800 Subject: [PATCH 08/13] Removed dashes from xml. --- ...bleshoot-exploit-protection-mitigations.md | 32 +++++++++---------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md index ee23324d0b..eb71a22518 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md +++ b/windows/threat-protection/windows-defender-exploit-guard/troubleshoot-exploit-protection-mitigations.md @@ -148,58 +148,58 @@ You can manually remove unwanted mitigations in Windows Defender Security Center ```xml - - + - - + - - + - - + - - + - - + - - + - - + - - + - - + - - + - - + - - + - - + - - + - - + From 8b2d3858d8031c7d311d4de28d29ab5ae73a7f65 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 31 Jan 2018 16:12:43 -0800 Subject: [PATCH 09/13] Added new topic to TOC (Troubleshoot Exploit protection mitigations) --- windows/threat-protection/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/threat-protection/TOC.md b/windows/threat-protection/TOC.md index 42ede7cb70..58317c1029 100644 --- a/windows/threat-protection/TOC.md +++ b/windows/threat-protection/TOC.md @@ -254,6 +254,7 @@ #### [Enable Exploit protection](windows-defender-exploit-guard\enable-exploit-protection.md) #### [Customize Exploit protection](windows-defender-exploit-guard\customize-exploit-protection.md) ##### [Import, export, and deploy Exploit protection configurations](windows-defender-exploit-guard\import-export-exploit-protection-emet-xml.md) +#### [Troubleshoot Exploit protection mitigations](windows-defender-exploit-guard\troubleshoot-exploit-protection-mitigations.md) ### [Attack surface reduction](windows-defender-exploit-guard\attack-surface-reduction-exploit-guard.md) #### [Evaluate Attack surface reduction](windows-defender-exploit-guard\evaluate-attack-surface-reduction.md) #### [Enable Attack surface reduction](windows-defender-exploit-guard\enable-attack-surface-reduction.md) From af7480eaa7fa6791b1689519d831464855cf939e Mon Sep 17 00:00:00 2001 From: Maira Wenzel Date: Wed, 31 Jan 2018 16:53:36 -0800 Subject: [PATCH 10/13] fix typo --- .../whats-new-microsoft-store-business-education.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/store-for-business/whats-new-microsoft-store-business-education.md b/store-for-business/whats-new-microsoft-store-business-education.md index 38af4a8e01..80d4cc6d6c 100644 --- a/store-for-business/whats-new-microsoft-store-business-education.md +++ b/store-for-business/whats-new-microsoft-store-business-education.md @@ -11,7 +11,7 @@ ms.date: 1/8/2018 # What's new in Microsoft Store for Business and Education -Microsoft Store for Business and Education regularly releases new and improved feaures. +Microsoft Store for Business and Education regularly releases new and improved features. ## Latest updates for Store for Business and Education From 651904ea5f776b9cf522882e81694ea9c857c921 Mon Sep 17 00:00:00 2001 From: chintanpatel Date: Wed, 31 Jan 2018 18:34:45 -0800 Subject: [PATCH 11/13] Update windowsdefenderapplicationguard-csp.md --- .../mdm/windowsdefenderapplicationguard-csp.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md index 47b499d041..6b6afaec07 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -83,6 +83,9 @@ The following diagram shows the WindowsDefenderApplicationGuard configuration se **InstallWindowsDefenderApplicationGuard**

Initiates remote installation of Application Guard feature. Supported operations are Get and Execute.

+- Install - Will initiate feature install +- Uninstall - Will initiate feature uninstall + **Audit**

Interior node. Supported operation is Get

From 7ea9974dc1c210b1b5686f782c5af1e663430aa9 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 1 Feb 2018 14:30:33 +0000 Subject: [PATCH 12/13] Merged PR 5640: Add instructions to disable auto sign-in for kiosk --- .../change-history-for-configure-windows-10.md | 4 +++- windows/configuration/images/auto-signin.png | Bin 0 -> 13645 bytes .../lock-down-windows-10-to-specific-apps.md | 3 ++- ...kiosk-for-windows-10-for-desktop-editions.md | 10 ++++++++-- 4 files changed, 13 insertions(+), 4 deletions(-) create mode 100644 windows/configuration/images/auto-signin.png diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index ce324c8cf1..a12a531608 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: jdeckerms -ms.date: 01/26/2018 +ms.date: 01/31/2018 --- # Change history for Configure Windows 10 @@ -26,6 +26,8 @@ New or changed topic | Description [Configure Windows 10 taskbar](configure-windows-10-taskbar.md) | Added section for removing default apps from the taskbar. [Manage Windows 10 connection endpoints](manage-windows-endpoints-version-1709.md) | New topic for Windows 10, version 1709 that explains the purpose for connections to Microsoft services and how to manage them. [Configure Windows Spotlight on the lock screen](windows-spotlight.md) | Added section for resolution of custom lock screen images. +[Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) | Added section for automatic sign-in after restart on unmanaged devices. + ## November 2017 diff --git a/windows/configuration/images/auto-signin.png b/windows/configuration/images/auto-signin.png new file mode 100644 index 0000000000000000000000000000000000000000..260376199ecadc7ad234a071a4648483969e4a36 GIT binary patch literal 13645 zcmbuGWmJ?=`|gK^A%&3~V#panQo2KGXe6W?5hWE6RJuC{K~e`$K#&lW?ik9Xq*Fjr zKtj&;eZTzII$zFN{|_Rtobh>{z4v|J*YCO}&QM>I63PsPKp>RbTI$9S2%Z!8zJwGX zd}VQxqXU28`59}fLaImMo8SjRHx)e<2&6WJ{KA0<{7mMpW$6cjP<8+NgV*m>?hJuQ zENQE&m97c4C^(8v@pz8hHJF1?}81|-;niam|*)iza5(5R((@)HcFW-?s3{o-9#Y}}vI<&-+-!2@u)mUp96 z_l2Wo&=bXKBm&py{Pq?)%L<>$B9TZz!Akdu5&^SH_s>|$Fya_qz2{#V@6T*(Y@kfA z5_dnX3}p%ULK$WK-OKb}&{W&CD?0X&3Jbr*<%*{;iLV{+%osz|)zy!7W~6LB_=`+5 z`7E1N-MRfzE3G?*+A7A$@zKuo@9nxVViFQ7a208p-g&4G{+o_Gj*cNAAv)QDah)-d zk;*i$bh4)F?`FUcj*oAcVA0ObD`{Ms(nrI>?OKXFe(R&H?h~9VXTP_=V*CY<<@8`! z7)5YXEBA$509G$A`+jnJ`_;vtLq0UdduRG4G?7i=4iwUaH7dPjWMuU333KzzI>pNe z9hg>H`0OwB`mNzMKbINA!%#JT2L}1lVLafAQG6IeEqdW_wK|>u_Uogq?*<3$m&aE8 zWR#Q|lJ)qL108}4!nW$wcN$(lN#Wwy2z69%d;I&S_?W!f?Q~NlOq=oqQ=%M(Z=m>x z+j)Q1Z>+&1wp}p|_rBlZ`2`UR$4GikhPL=`egf-|uk_583I&UQ86AvXTwVS8;o&{PbD?r& zOxJ_CN7%`a0bby#Ha_?fk85-sd44mQQxt5Go&|^eFanYTn_^X>A-iT@o}hyjk=V@I zQm`nQ>PYkI{1*>kPz~emoh_KJ=qIu+STug<3zTx6n56Sq~zoo zD{h5P%-%U`56w6EM7(w#D-ingDCFw$B$Dm?c&D^uFoUnk8Z7V;Sm5pUCyY(b&_Kk! zZ_%{2|N&R1kTUTHPzK4BO|w`8xn-b z{&*@+o_?vadan{eoGc52_7a2#qtn2WfZb_9#zMueNMT}sVJ6FqH7Hahg2F^{XdleA z#3V9_zuPPl`4|V5JYOL=TP-AD>zj~WTS#yGb%8te8(VMNAN*vJ z^kmGM6pls0;z=MU7{`-eKlcBQ#WyXypMP3s*J2+~^X%&H#)i89D_wWB!&rfWSyxyB zgD|b0=X8CXf|j$hv%UQSxXcwARYOCXm`1Pp8%mj^;Gzm-{9J<@z?sDBP{5uB`&^#= zetrARba161l8xdo6WV8Iy1}VGd89x=F8Fx+tQ{S-)VW;P2?M8hFcqQpYqnYG>cUSz zx7bi#`9d7S$@PU7=|NI(g~#>Q&Aw7zbM>E|34m2R`lKt25VZMl^dev`4R_vI zVNy2tc&my_GudKOZezav>er8tRqEk1^z?lf;Dx<9d~9HI-)Z(;Rg0mryeri?bi6UK z{3Bq#;nUTvrV&^c|Lx~D@6k_(Y<;WxZX2AGPe#Yva`y9$?@=LXw77i-MBo~`q}QBv zqo-xivV(QY=~BXc$YD}eEJ5kF!E~O4#6;Mi2U;1tdM(1XXI3=Vuk(D7eE8F}IPtuv z)~TOa>OsrB?>7XVkgN{p*tI`x&C)`)o&S^#l>3%=^j{frAVs{f44I`r#t@+`MSNmYGLhy0E;uGeuKR-a-b7sD{ zI2;?!7OHDE7Lk|Fhrbr{LM#jVx*OrBz3Lo$p->EOGP}})g4HL-+m=SwA9}{6bLgny z(#rbo?(U!i*aa>U`R0cxx*07RC|w?b?QK?JtdVTn`uH~qNqHf+ZMk|JZJ;hwFSx8% zENid0pZ)z))^aB)h|cDv&Gf*m}5SCA5$qL@LqE3l0b2zn#Ah5y4OQD=$L7{fX3;_|8h9O86B zxqx5Xai5H@4|BgAJ-`f)qbH!YS3=gBo8N9de&ou5#)vf!DDfDw2 zuZ>8}Z-dh4nItN@oj#z+DDBM=t!Iw1u6H*w4Xeq}fim2ft+J9jJT{@Zc1`7KKgq(Y z^j6YFy5M!nn_hGIBU+%#jlGbINf^e6IyHEF?Mq~eVEc?*zW??0?H?Z=y1XL4&d)8` zF=?b(U!{>i|3da*$s`yGm}fq*jt8OQ@RJxt@tvFoZr=N*e)nZ)Xcc=_``@!ISnTjL zu~*Cft=~Vt=5n5qp^7dEBhVb5Z5upp%P#EfP-S$nT(ZIN0d8hRcOVVcc`3+$U=ggI?{I+55(rDVjNF-~6Qz`V#F7-ppb|G%9cD zZTny5n_FMsFo>JIHbtFpHQ?R;T5c54`|1s&0*FV%^?m;C&|) z#3rr+)doOUtUV(|((;eg+f$M12lE_7R+PF%Ctj(!G4ewDJ`_owBF-Wj#p!uz0#pq! z@!3LFU|G{Y8$I+j^b~vpUcS;H9CWzmvbe$W{9-YNU3OYK1Qe%jC8MUYg2zy34jdD1 zNuRq4V^ewWyx5tEGFhSARR4}ZAXHRTD&5bHHV2uMp0<2uvxsF{P#c#g#45WJiDXTR zZ1H(%#HdVw@hygmSwaiC@X7LS<>RHExHZB0DsaY0(eDk3?MsY!BW3*7dVV}PJv%FL z<}7_~A&4(2?(qdV_|k}x1dlaJn8rP`Y0yXHkwKe%CqAL73miXu1HPYA@$GIpqNp|a zg!AV|>HQkD^4L_iQC7Ck9Y8GPhzw-|7~~%jnZGsXF+Rx>p$@ zBu!pwU5jk?TQ4~x-4}}@i{&?~9H3n|Dbn?E?}3eHG<~CB64OFcc`05VeWvXizhA60 z)cukaKU2rkcIjHa&^#HUff|g0xhBSWKJyK)C)u+)|KP%c)rzUM2x)PAH-YN{ea+fJ9rHTM}ANlaV{>Rg6-;qfWz3F*j6 zt%2)$p?q$OqI}Nvg|E^>kd)oLxChhq6}3T2)E|_i@Ldr=$zZm^^DOl@s30B z;!x=fZVDY|WDJCvgIUl%x7bgWK>L&58iU*KzvsJowoKTLMm=Q-=K-3<&AXqmO!}hA zEa;ZfEEw*EgiTMtnn5m-_0*3LRY**el?b4_J=t9n$ zo2dJt#~z_R*b}yRd~MGgPDBf1!75)RIrTdf#c-0Vzekv9uMOuIG}hvO2&aVgAyQtwXTVuU(TCkC>rR8m;J64KC)MI-bxr(SRb{(BuC^2oTuy~YELaiq z_NjZduI`dEx(A5BXc8%>dO|1K119Iebd9r~=>$J6`Udgd5{-l!3xP$5wqHdehRC&e z6igVZ2I<;ONc7_JviRd8_dyA?%3u>Z>^|m&corRki-w(9N6g-dQ)0|^bC9nvvsL1! z*poAVLOB!6Jy*v;ObIuUMUDtjE#~x3Q|Kmc41EgEy=vl+mKx%>cZxEhRdc!St}Cet zbK(kBo<+DuY-M}wcESkFkhKF~Y;kPPRa-Ohopfm3>msjIxB7h-O#~Py}5rEm+%6m?%L--ILLiOb3$e5Jn}qibl zE`2W0GtZwrF{BeTa+ncv*3=@hUl|zugmm5XMC9$)rmBRGupH4Z58rup)lc#u7>h1F zr>}wez#J%}ZOYuP675Pl1Y@v(gMl)on0cU=q#^AH)LX~%S0u(Aw%a2pBN`)g49S^YmJAVl-o+}J4;SGTPw-3oS=FXdCpwIB*c&5?%Zn;qzcqp(Ihqn764Q+q9Wrvz_Ux}Df_HA%$Hb(eAi7r7 z)-t9{KWI7mZiuw~N$n+T6shXaxne+s3*Ua7iNPDn0g^-v2x%dnTBQGTs_psq!n?)% z`Y&0QE-K8n3p)>zwCMu8>%AAdJ{b`FRH;>Wy@Qc8&4#YNyHS?lQxba=AItD9PlJm_{IBsRaxAHkX2_-YPP45B%776($jN{{+b%icTxYA>&RKB`WTHN8P z(+a$9zwVn19U=IldLuw4Z0Igg7=C)hlh7RI&)c@sXl~<|T2Pi)84NRJorDw|3==|!;-aaM+j`wJcPdnRUWXzXicV@xjG7yqW=C;zMitk;0PT9LSfN{}V5 zeWBV}M>7q{k;*5M=9uVl7#kFON|2rgHQeGKyJ z*w~ot-hf)}QXyfN`6Gkv(8;C2`CG6!@-EKfYun7H+2m+w*#Ea=)kI&retmU!SLyzA zJs6VCPERQw(d92~ZOPsHCP>Zxw%ibz&P?VO52ji9lUcvs1ctFfrDvo0GOe_cV8~_w z!#z0VHXk3|9IFF_j+%wG3kJqAFylwEf^M|BzP|2n@baUy|He4r83Lx|sls-O&7Jx{ zje7#%0q8^Am9PmG_oc$5srdd#P*j;HF~yI7cnN&Rv$LBAdK%miTrs2x z2#te$B0yQ}oBCm828E+9n;GXG52uI&Qokd<-p?$ZtT0=6e>m-|x!e$6r&%bi~p=DamT z&PD~JMS~8U%T)^O8r{YUJg46M({kYilOAFCM7NURo1X@DlYrdJe7&St{V5r!G&S^r zAPNtb0sa}NH5%&bG%6IVvPT_Z1OQsTwyawNOyI$@pNXo)T98>MXiIBQd`pWQK{CfF zgEHq$k1uaGPXT^1 zLx9J@0UpOlp43~Dvg83))?K`JT3vXKc-F0-30Qw&!@!~~Z7`3$x#SS#XWq*y~=8RcXzB>#g{g5Z*LDs7od(dpFaH(nGTezVXdRa zv0TXed*4TongNYGup3KFO$FN`FNc^P7EjoH9}8(~YqPbrT_e(q!`~pz8_Psx1ifk1 z17S{obD}V z@EH_%)16)@{XKP>YY76!3K`%F#QR?Xu>Z;MeWb9`40L|7yt1ZBXA@&w7c#7V=jr2JHW*F`US3X1oW|vb zrc%oBy2riZsE^{ktIoB~KB&>$vx$_aY*EyWV|?#o#=8`9!+pQ^_o%ZcH#cbh=Y5Xi z6tB~zjj&>4&y2;cLwif3Vyz#DYHZ&-2fK9qb2KN@oK3J+;cWvaaY`AOHf^wmV9J% zH1G(HCu^O|&e+2b*T=+-%(|`vT0Pzp?H6Qp0qLi0yQ$D09T-J9>rjriVKE}gjp450m3}HV`GTB z0HtyH#UHQ-^a>S!fdBPv%K=m`Au%_Ouj%RKW3W+_eu?fIS^)!~GEzWf25`eV+LMme zd^S-HfQX-+ZSn~$2I|s0uyjUKSvPsBq)QV9RcQMA*RL?<%LOFwmTIO%M@1ok_u;+t zO1HLsw&VqkvnPV&hHcBhk|h}lBVW{N52%QCA0O!*ylNJA8|4_#nQsZo@Y|$b-FY~z z;s;YJVr-bO;*Xng_^ER5+5*0_JasR3OxMG$Z|+#di52ciLyh5UFgkEPzTb4 zWU&EGF)|6hONZ*0+})XL8}h6Rsix#i*NntuuYT6H9jj*ruMIGa-AE!eNwf|j6ma%d9agdd~W67k({1Aq*LAvvlR!ixQf#Xwy( zd(st229VGz>JYh|d&HE?M_)_~RtM4uo@vqAmPwxVc>~*q)59b5ZtXGXP1qLnDX_e7 zF9#i)M<`(*8$W&|UZ5w%!u6eCJ%wiXX;((@>l^y0G6m_x=Y>yl2mz zK__#=7s9LXVzi*C5#iyL>S&73y{6;t0H}W|GXSjniCB)HC9uQz>sOoC3rbroh_>WF zJtsVhJn(M==!qN9fp2fjg^!Z5c>3=ik7ocfY(%Z2L3{h|e47HR>uX?e#I4q>Y6EJt zZY>mR9F>b8p{_P8#$SKeKM&^hvRF!SLV6eA zuJ~q$))uj4y4Cuw;ZV64ZUvZC2Sx5HP!)!YciXSpJifj*6~H4klkr{AlD*|1+hM^W znC`yoH0bxYfzJ~6mD?WL$14*S78U|*&OX8zy*$Z>AF@05#vlGeUA`qvO_KMgL-smJ zNNYMk5lgJ`UDYun$IIxICOb$I<<3s>cm=VJh?mppwWlrtPU71#UnBoMrhqi%6gCAB zHo|hKrI?KF1qLrN9FJpM3T-L|DnyIh7#m@|Ch@=;(~pPn#2*au$CFN+EWljNL9*h} z_TX^ncl!UXegMBa1$eeJYfG~}%YE9s&ri;_-f{tY%A%2m{-S|nvF8UxObr9hLbY`> z&A7ek)mL*nja!QtZNgdDb|Pe>8@R;bp;gZVzKLH)-~5?8I7mdUpT=l7cXNz5wL;B1 z9z|m>ASq002+87NEJ}+sr)3qiYNR;O*gHHdmDw-Zc<)Y{>;^gqQj}b%AQf>qvPlES z7olY8P;~4LKKZqJ4o=tgulRdi=5|k_AbNQMtRmaMpw-A$ERrNWIJ?Jdaxo94}%uUZ%wHi2T1P7HgmCG!&vOIl^r7^Ey@{0jBGC2n)GQJH;Y4Hr_nd4g*U;HeQah)9Ewxk9vXND zXVLM;T|^bkN*JPA_`r1yZiyl_8pLu;Gi$Fx1N2L>H!{svKyFQ!XpqYcr5BwfN7Qz>I5?Sg;Z5qybyF3JWu%jBh#%htl~23$4S<4C z2inuQ`0HF~l|oCK!Iv|t389mWH@jebdd~@ybg;EZI2I!nN@{@*XGRblYEzjIwhtJ& zvhb9SdA0q)t}tHgbyNRyo{d;sw5D@aZPmssaV+?6AoB=DxU_d@s!1m8kLy?t&ot6& zz$>{Q${0iD3qF4~VaDs?u^s*is*u;=MAvG9X60@q za9C2wgrQQ)Y2A3xo&LL%wcS1<#3?GYVL{xGj3=l$+Tm+cRCFejx%g9?l$+5gLn=RQ zTFa0q2k7&<&qx-$-~meec(4ix5t&EWRCb^3JX_D`1=27S=b3U*Xs!pL1N00fk8kg> ze+a?ayN;WxUhh_kM#WN1HgYIq%cBU%BUwtMNTa86Jvd{5+DmxIMAN!#bj>|njMOI= zzeBM{a2vMG;zT2CqWn(G7*aQI(E+=a$0X=br*4t&_|&18f2w#=Wg{%lB_Ja4a`L1G z|ICa24HyQnlF?jf2f=)e$fIlH2FrX)Vt_C;yIxDng*RDY??A{|s;|`ysp28|j)baR zfN_URSq}76P#4HYPSoRx+t+^)A*!c6(UgT#R5 zNs%b}&Aq!>dM_b7fLBxzL;Yr9_Q*R3(qS0TSJrxcsxC6Ge+Kb@-{l z>(O<(uiEw8e^7n*lw`18oQN0C1f%e>^9QDDAUx0s>ij3ELxhMp@!S`l*l;V*#F?Ov zC!*`+qIGE-p^8Q6fU>{7^EZnNrE3*U?j5}D3msvkdrlK28a#CXFV<8Ipp$!;^KalW zceo5TZRAO7GiQzb0siaYwWaQAUV{Qq#E5-R@m8g`C~F`6K@qMeIwI`*K79?$4KHV; zjJwwt-~?Uk@sXEoqu~ulIoH`&lWO^y-YW@hLOYN?@50;|{oLQL=}VgCJZ#wd_@VWC zXVnlNCurTF6uPtEPCkvY&D6Y%4Ju{;sLX&!Fh)l_HZ=Fdpc_k!A;+DD8uVZ*^@^j7 z$_)|y`;!*5Z)r|64KtI9teo@lp5iY8@05O(}*6-U5K6PU z{kWU^GWgYBFJ61);JyADsMqj>==bY_SG z!U^J;#YFz2Px{3`X0lIa*g|S=GpoYm%tdSd*6K<52D?MPrx%?r^weLe$8z`5h8BtV32-id27QN~Ef$Rt(vW3>&9+L59B4 zme%gTMRJ6KOA)Rac(s=W@J}TBxH7(i>Ro7Nq?_wW4y@Imd&t*^;7!YZU8q zvW8L-1Pu-De;!ZT8T451hoT^dq)Y_CvB`AZF?FJ%6Aas0O!zHLGc=N^jvXSg*3%F^ z{rnC_byr&vvNXz)(o!;1MQU`9(4G*3A)bfk0u3CVh(B0f!|7-0{8@@X7B%VtqB#c< z2^oS#zCOj1m_=bOt^uP^H~ZX8?kufj)+U#wXJ;tw#N2eu8xz0Kboib2rwYejUHXr8 zd4~r(M%r62w(>P!IxLVK{ETHon%CVuy5)87m7;nDshE;rM;i&fya*^(8Th=(;=1Ls zVFU@Wm%}vM$}+k1iH6uHo`}B|L_gh%dAb@Rw8e)aMzx}jMmDJHVjPB3mh_9nO$EM( z;vUL+*jrP4Yg=^u;QX-T>l<^PJv`Io!=jd2Sazac&f8fZA;CILbBPRQM)8DrUH|FP zA1swT_qwGT%}dndn)K28p<%TSJA_%sHeZ!kQ+W{z+0pmuaI!YHk{C`Irx>^)3 zHpW$|kCfa417C1fgo)z-mogFAqy@^?&1&>kw6xjNDdUUQjxoButE8)WJ?O$KCRlZ> zSB?}OX)G_P!V+=a34yBkqq76Q&3Op*)d)!Qv61~xn(*Ji4i^gJ`01tgkBz|O5R{v<8XJfR~_jye+PM-w_7Bz?}thEWp;~mc2 zZhv}tcCwqoA#;?9UA}xv&LO{8-g>=nczj@GX2|#Ac=QB>8_){+Pf9~8_~hkV092#N z&DV(X9XK*Ps0iByLTa$RV8kejbAJ(GQiKJpjNkaBR)Ktw*3vxqX8-830T5-YAP<2C zzl^3}T1j?&_Uy{BH-2@jupMCAft3Za!Nra7Vl}6&4-w!VOu&5O?@PTgQL2d|IEM+_ z%7Y-<+TUwjh$JAYYU;8|uB#fj9IS+8Wgh#A9eGmnPMp_1{G*5tuo! zsvx;x&A0~=Lou6Reb#n%^w#gT0v`v!Ft{-?osdl|s@Y`cRgP_X-bL)p>J6^YAT=J+ z7%EoP;nlHGfJW2%=_ptvakFNgG0nmMX!z+B=oqRueC7H;8VfvYJ--C*)R|L_zLWSC zFsC1FeijA^Kc=&e> zqnu~6`Vt1F2o=tyxxxNzgBP+<&7VjP-7F%2gExF%qhpqlm~pfZSVUBC|^AD|E+x>K;jaJL4Y?f@X+8Cq*AXvp@9xAKPnRW)9nf3M>el!AaZ5ChlL@^(t8t{ z?3QHxKc)a?mI*l(;c9s2>HeiWZFV4Jxi1N1U`_4=8l{_wRC$q#I_DttyW-q717R}1 zeuOq@ly>yrm2bC8$i&GG*G9PPuUQsr@dF07@qU&_9;7csgXK(UG{{ZtRi%xsC8+3H zb69_Slfa3tNI0oV0-CF6W;!sU`i?ZB6oGhCPv2*~K!py75Mf=8cYx}=T+OiqQH2D> z0JbH36B@$7UlArNK4WiNkDtr$<2_GJ2Ang#7GNl?_dDNNl>t9<*~VYO$6*$t+SDUuwcWueU&;Tf7rBmLS4baPy6`FTZIK^JBR?X%QF#)pMi zF`@07k~+Hp)%d{t%Hytt3D6 z$i_GhWukn8Zin{Q(^>xF*6h)`u2fNzb+5*Pn!=W0UG!`{cNG+b6h_55Gi!L07E1)5uFSq&F zXl>HrpZ0=HfwZ|Mz+QM9)Bp#lJ5lM+>4rDJ;-Ru;8|PNcJ;h(A&RHGF3jk4AZ?og= zski|5Khoylu}w+p!VV!pPq zt-enea55?~C`l!JHb1>8FGq%x9&!_L&Fq699Nixipa-UrSX zC=2x5H0u(5#J^%4mxU2^jfNj`ke!ArOn@w0nuCN6?O%9+yj>yuU?)R4;Rvs<_zklO zD0KyP6CtEwQ!{Vf`C(9l{kP6gYYDk)bUGkL|DT_L?KAM-IQ{=q+LfEr1g^mT+sVGC zK53n=n*7S<{I4lkJQ zFB2`s0X=@`mwaD=?dtOeK=JdCvD_v9o{lvHR*PrG-E=jln4g?rRx)IS)k zzV1EYx^TAu79rtYD(Z$^%8lQPX_FQZa(1@VkU=bm*bI zY7pvN$5Vsi!8z~o$c)vGzxU&Q`1sq>9Gp>?$&FBJ%g9RdNwU9VY}`G`IBB3Hqo!t8 zdU^q}r6kmBm0m(-NLr=>5sk?#tJ*Ngv8PmUfRbWZ6ff(Uc+cZ{rPJTzSs`>0PJ{UP z%y0{@(b~L;8#lZQq^iu%o0vbuhhvNq-bYJHcqmWCM7xtW09gHA;5uG&=tx&p;Xh z-zN3sagBCuJEhitZ)<7e4@>RU%e}q#)Vr-&W$Xb<8 zHhLZ|s+mV)&kYO(^-_0Fcb3;9_FLv>$$;z#Jf3m`Q-H#Q*(N*!Vld=r79>9d_7eD1 z!~NN&Ycky2gfbi)9X`<@LQcXa_HSne@e*1E(@3|!@;pGDdXTaHCWRrJ>)`+j%DIgbzDfvhZm6<%O~ zF9j)l@L`?%Gm>_8c8etTqP?J@0eVabZWBrrDu_=&5XBza3!?n0KIT0=7wpa!4Xj&2 Tjw|3JP!Memef4Tp`|$q*;6tR= literal 0 HcmV?d00001 diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 7e5d71562c..ea121c6820 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: edu, security author: jdeckerms ms.localizationpriority: high -ms.date: 11/26/2018 +ms.date: 01/31/2018 ms.author: jdecker --- @@ -52,6 +52,7 @@ If you don't want to use a provisioning package, you can deploy the configuratio - The kiosk device must be running Windows 10 (S, Pro, Enterprise, or Education), version 1709 + ## Create XML file Let's start by looking at the basic structure of the XML file. diff --git a/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md b/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md index fcbf41202b..0fe1c5b458 100644 --- a/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md +++ b/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md @@ -8,7 +8,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: high -ms.date: 10/16/2017 +ms.date: 01/31/2018 --- # Set up a kiosk on Windows 10 Pro, Enterprise, or Education @@ -37,9 +37,15 @@ To return the device to the regular shell, see [Sign out of assigned access](#si >[!NOTE] >A Universal Windows app is built on the Universal Windows Platform (UWP), which was first introduced in Windows 8 as the Windows Runtime. A Classic Windows application uses the Classic Windows Platform (CWP) (e.g., COM, Win32, WPF, WinForms, etc.) and is typically launched using an .EXE or .DLL file. -  +## Using a local device as a kiosk +When your kiosk is a local device that is not managed by Active Directory or Azure Active Directory, there is a default setting that enables automatic sign-in after a restart. That means that when the device restarts, the last signed-in user will be signed in automatically. If the last signed-in user is the kiosk account, the kiosk app will be launched automatically after the device restarts. +If you want the kiosk account signed in automatically and the kiosk app launched when the device restarts, there is nothing you need to do. + +If you do not want the kiosk account signed in automatically when the device restarts, you must change the default setting before you configure the device as a kiosk. Sign in with the account that you will assign as the kiosk account, go to **Settings** > **Accounts** > **Sign-in options**, and toggle the **Use my sign-in info to automatically finish setting up my device after an update or restart** setting to **Off**. After you change the setting, you can apply the kiosk configuration to the device. + +![Screenshot of automatic sign-in setting](images/auto-signin.png) ## Set up a kiosk using Windows Configuration Designer From 7b9645c83a347b7690e46c82389c34e208ec7541 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 1 Feb 2018 16:44:48 +0000 Subject: [PATCH 13/13] Merged PR 5641: fix link --- windows/deployment/update/waas-configure-wufb.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-configure-wufb.md b/windows/deployment/update/waas-configure-wufb.md index f705f7b85f..b6260dbd6d 100644 --- a/windows/deployment/update/waas-configure-wufb.md +++ b/windows/deployment/update/waas-configure-wufb.md @@ -28,7 +28,7 @@ ms.date: 10/13/2017 You can use Group Policy or your mobile device management (MDM) service to configure Windows Update for Business settings for your devices. The sections in this topic provide the Group Policy and MDM policies for Windows 10, version 1511 and above. The MDM policies use the OMA-URI setting from the [Policy CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn904962.aspx). >[!IMPORTANT] ->For Windows Update for Business policies to be honored, the Diagnostic Data level of the device must be set to **1 (Basic)** or higher. If it is set to **0 (Security)**, Windows Update for Business policies will have no effect. For instructions, see [Configure the operating system diagnostic data level](https://technet.microsoft.com/en-us/itpro/windows/manage/configure-windows-diagnostic-data-in-your-organization#configure-the-operating-system-diagnostic-data-level). +>For Windows Update for Business policies to be honored, the Diagnostic Data level of the device must be set to **1 (Basic)** or higher. If it is set to **0 (Security)**, Windows Update for Business policies will have no effect. For instructions, see [Configure the operating system diagnostic data level](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#diagnostic-data-levels). Some Windows Update for Business policies are not applicable or behave differently for devices running Windows 10 Mobile Enterprise. Specifically, policies pertaining to Feature Updates will not be applied to Windows 10 Mobile Enterprise. All Windows 10 Mobile updates are recognized as Quality Updates, and can only be deferred or paused using the Quality Update policy settings. Additional information is provided in this topic and in [Deploy updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile](waas-mobile-updates.md).