From c2cf6f93fcd60598c5573965eeb6e834b0307f68 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 12:20:14 -0800 Subject: [PATCH 01/32] initial import of unified steps to WA topic --- .../update/windows-analytics-get-started.md | 209 ++++++++++++++++++ 1 file changed, 209 insertions(+) create mode 100644 windows/deployment/update/windows-analytics-get-started.md diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md new file mode 100644 index 0000000000..c1a00cf528 --- /dev/null +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -0,0 +1,209 @@ +--- +title: Get started with Windows Analytics (Windows 10) +description: Configure Windows Analytics in OMS to enable use of Update Compliance, Upgrade Readiness, and Device Health. +keywords: windows analytics, oms, operations management suite, prerequisites, requirements, updates, upgrades, log analytics, health +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: jaimeo +ms.author: jaimeo +ms.date: 03/06/2018 +--- + +# Get started with Windows Analytics + +The three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) have common prerequisites and configuration steps. + +>[!NOTE] The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. + +## Prerequisites +[DO WE HAVE WA PREREQUISITES TO LIST HERE?] + +## Deploy your Commercial ID to your Windows 10 devices and enable data sharing + +In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. You can use either Group Policy or Mobile Device Management (MDM) to deploy your Commercial ID. + +### Copy your commercial ID key + +Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. + + + +1. On the **Settings** dashboard, navigate to the **Windows telemetry** panel. + + ![Operations Management Suite dialog showing settings icon (a gear) in the title bar indicated by a red box.](../images/upgrade-analytics-settings.png) + +2. On the **Connected Sources** tab, navigate to the Windows telemetry panel. + + >**Important**
Regenerate a commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. + + + +### Enable data sharing + +To enable data sharing, configure your proxy sever to whitelist the following endpoints. You might need to get approval from your security group to do this. + +| **Endpoint** | **Function** | +|---------------------------------------------------------|-----------| +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. +| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 +| `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. +| `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | +| `https://v10.events.data.microsoft.com` | New telemetry endpoint for Windows 10, version 1803| +| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | +| `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | + +>[!IMPORTANT] +> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Excluding endpoints** section for options. + +>[!NOTE] The compatibility update runs under the device's system account. + +#### Excluding endpoints +[ADD FROM MATT'S MAIL] + +### Test data sharing +Devices must be able to reach the endpoints specified in the "Enable data sharing" section of this topic, so it's worth taking some time now to verify that they are reachable. + +Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. + +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). + +To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: + +```powershell + +$endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' + ) + +$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded + +``` + +If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. + +To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: + +```powershell + +[scriptblock]$accessTest = { + $endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' + ) + + $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded +} + +$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" +$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" +$accessTest.ToString() > $scriptFullPath +$null > $outputFileFullPath +$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" +$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) +$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force +Start-Sleep -Seconds 120 +Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false +Get-Content $outputFileFullPath + +``` + +As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. + + +## Deploy the compatibility update and related updates + +The compatibility update scans your devices and enables application usage tracking. If you don’t already have these updates installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. + +| **Operating System** | **Updates** | +|----------------------|-----------------------------------------------------------------------------| +| Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](upgrade-readiness-requirements.md) for more information. | +| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 must be installed before you can download and install KB3150513. | +| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | + +>[!IMPORTANT] Restart computers after you install the compatibility updates for the first time. + +If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. + +| **Site discovery** | **Update** | +|----------------------|-----------------------------------------------------------------------------| +| [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | + +## Enroll a few pilot devices + +You can use the Upgrade Readiness deployment script to automate and verify your deployment. We always recommend manually running this script on a few representative devices to verify things are properly configured and the device can connect to the diagnostic data endpoints. Make sure to run the pilot version of the script, which will provide extra diagnostics. + +See the [Upgrade Readiness deployment script](./upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. + +After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. + +## Deploy additional optional settings + +Certain of the Windows Analytics features have additional settings you can use. + +- **Update Compliance** is only compatible with Windows 10 desktop devices (workstations and laptops). To use the Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a partner antivirus application), and must have enabled cloud-delivered protection, as described in [Utilize Microsoft cloud-delivered protection in Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troubleshoot Windows Defender Antivirus reporting in Update Compliance](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/troubleshoot-reporting) topic for help with ensuring that the configuration is correct. + +- For endpoints running Windows 10, version 1607 or earlier, Windows diagnostic data must also be set to Enhanced (see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level)) in order to be compatible with Windows Defender Antivirus. See the [Windows Defender Antivirus in Windows 10 and Windows Server 2016](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) for more information about enabling, configuring, and validating Windows Defender AV. + +- **Device Health** is only compatible with Windows 10 desktop devices (workstations and laptops) and Windows Server 2016. The solution requires that at least the Enhanced level of diagnostic data is enabled on all devices that are intended to be displayed in the solution. In Windows 10, version 1709, a new policy was added to "limit enhanced telemetry to the minimum required by Windows Analytics". To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). + +- **IE site discovery** is an optional feature of Upgrade Readiness that provides an inventory of websites that are accessed by client devices using Internet Explorer on Windows 7, Windows 8.1, and Windows 10. To enable IE site discovery, make sure the required updates are installed (per previous section) and enable IE site discovery in the deployment script batch file. + +## Deploying Windows Analytics at scale + +When you have completed a pilot deployment, you are ready to automate data collection and distribute the deployment script to the remaining devices in your organization. + +### Automate data collection + +To ensure that user computers are receiving the most up-to-date data from Microsoft, we recommend that you establish the following data sharing and analysis processes: + +- Enable automatic updates for the compatibility update and related updates. These updates include the latest application and driver issue information as we discover it during testing. +- Schedule the Upgrade Readiness deployment script to automatically run monthly so that you don’t have to manually initiate an inventory scan each time the compatibility updates are refreshed. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below. + +When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the changes is created when the update package is installed. For Windows 10 devices, this task is already included in the operating system. A full scan averages about 2 MB, but the scans for changes are very small. The scheduled task is named "Windows Compatibility Appraiser" and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Changes are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. + +### Distribute the deployment script at scale + +Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see [New version of the Upgrade Analytics Deployment Script available](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/) on the Upgrade Readiness blog. For information on how to deploy PowerShell scripts by using Windows Intune, see [Manage PowerShell scripts in Intune for Windows 10 devices](https://docs.microsoft.com/intune/intune-management-extension). + +### Distributing policies at scale +There are a number of policies that can be centrally managed to control Windows Analytics device configuration. These policies are under Microsoft\Windows\DataCollection: + +| Policy | Value | +|-----------------------|------------------| +| CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | +| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level. For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | +| LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| +| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8 | + + +You can set these values by using Group Policy (in Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds) or by using Mobile Device Management (in Provider/ProviderID/CommercialID). For more information about deployment using MDM, see the [DMClient CSP](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp) topic in MDM documentation. + +There are corresponding registry values that available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection**; these by the deployment script. If a given setting is configured by both registry settings and policy, the policy values will override. The **IEDataOptIn** setting is an exception--you can only set this in the registry: + +- IEOptInLevel = 0 Internet Explorer data collection is disabled +- IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones +- IEOptInLevel = 2 Data collection is enabled for sites in the Internet + Restricted sites zones +- IEOptInLevel = 3 Data collection is enabled for all sites + +For more information about Internet Explorer Security Zones, see [About URL Security Zones](https://docs.microsoft.com/previous-versions/windows/internet-explorer/ie-developer/platform-apis/ms537183(v=vs.85)). + +### Distribution at scale without using the deployment script + +We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. To accelerate this, you can force devices to send the initial data by using the following commands. For more information about how to check for error conditions, refer to the code in the deployment script in this topic. Note: these commands need to be run from a system context (an elevated user context won't work): + +- `CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun ent` +- (On Windows 10 devices) `windir\system32\devicecensus.exe` +- (On devices running systems older then Windows 10) `CompatTelRunner.exe -m:generaltel.dll -f:DoCensusRun` \ No newline at end of file From cf06fb7e83633b850041e52a17878eb25aac9764 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 13:29:08 -0800 Subject: [PATCH 02/32] added proxy stuff from Matt; fixed Notes --- windows/deployment/TOC.md | 2 +- .../update/windows-analytics-get-started.md | 19 +++++++++++++------ 2 files changed, 14 insertions(+), 7 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index df889e6bbf..b6e6fdd229 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -229,7 +229,7 @@ #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) -## Windows Analytics +## [Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index c1a00cf528..9b01fe0cf8 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -15,7 +15,8 @@ ms.date: 03/06/2018 The three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) have common prerequisites and configuration steps. ->[!NOTE] The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. +>[!NOTE] +>The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. ## Prerequisites [DO WE HAVE WA PREREQUISITES TO LIST HERE?] @@ -55,12 +56,17 @@ To enable data sharing, configure your proxy sever to whitelist the following en | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | >[!IMPORTANT] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Excluding endpoints** section for options. +> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Configuring endpoint access with proxy servers** section for options. ->[!NOTE] The compatibility update runs under the device's system account. +>[!NOTE] +>The compatibility update runs under the device's system account. -#### Excluding endpoints -[ADD FROM MATT'S MAIL] +#### Configuring endpoint access with proxy servers +If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: + +- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. This is the most comprehensive solution and it works for all versions of Windows 10. +- **User proxy authentication:** Alternatively, you can configure devices on the user side. First, update the devices to Windows 10, version 1703 or later. Then, ensure that users of the devices have proxy permission to reach the diagnostic data endpoints. This requires that the devices have console users with proxy permissions, so you couldn't use this method with headless devices. +- **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. ### Test data sharing Devices must be able to reach the endpoints specified in the "Enable data sharing" section of this topic, so it's worth taking some time now to verify that they are reachable. @@ -133,7 +139,8 @@ The compatibility update scans your devices and enables application usage tracki | Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 must be installed before you can download and install KB3150513. | | Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | ->[!IMPORTANT] Restart computers after you install the compatibility updates for the first time. +>[!IMPORTANT] +>Restart computers after you install the compatibility updates for the first time. If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. From 224ce57eff2c4764d0f1ca5f509e7d681b991fc5 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 13:46:15 -0800 Subject: [PATCH 03/32] fixing cross-topic links --- windows/deployment/update/windows-analytics-get-started.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 9b01fe0cf8..8d8825e432 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -135,7 +135,7 @@ The compatibility update scans your devices and enables application usage tracki | **Operating System** | **Updates** | |----------------------|-----------------------------------------------------------------------------| -| Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](upgrade-readiness-requirements.md) for more information. | +| Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](../upgrade/upgrade-readiness-requirements.md) for more information. | | Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 must be installed before you can download and install KB3150513. | | Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | @@ -146,13 +146,13 @@ If you are planning to enable IE Site Discovery in Upgrade Readiness, you will n | **Site discovery** | **Update** | |----------------------|-----------------------------------------------------------------------------| -| [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | +| [Review site discovery](../upgrade/upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | ## Enroll a few pilot devices You can use the Upgrade Readiness deployment script to automate and verify your deployment. We always recommend manually running this script on a few representative devices to verify things are properly configured and the device can connect to the diagnostic data endpoints. Make sure to run the pilot version of the script, which will provide extra diagnostics. -See the [Upgrade Readiness deployment script](./upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. +See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. From ddca18cd69aac8ec1843960862f559a67ef1d8a7 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 14:21:54 -0800 Subject: [PATCH 04/32] initial outline of FAQ; comment test --- .../windows-analytics-FAQ-troubleshooting.md | 94 +++++++++++++++++++ 1 file changed, 94 insertions(+) create mode 100644 windows/deployment/update/windows-analytics-FAQ-troubleshooting.md diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md new file mode 100644 index 0000000000..e5ef5b216b --- /dev/null +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -0,0 +1,94 @@ +--- +title: Frequently asked questions and troubleshooting Windows Analytics +description: Frequently asked questions about Windows Analytics and steps to take when things go wrong +keywords: windows analytics, oms, operations management suite, prerequisites, requirements, updates, upgrades, log analytics, health, FAQ, problems, troubleshooting, error +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: jaimeo +ms.author: jaimeo +ms.date: 03/07/2018 +--- + +# Frequently asked questions and troubleshooting Windows Analytics + +## Troubleshooting common problems + +### Devices Not Showing Up + +In Log Analytics, go to the settings/connected sources/windows telemetry and verify that you are subscribed to the Windows Analytics solutions you intend to use. + +Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. + +If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). Some additional notes to fold in: + • In the collected logs, the file name with a GUID has clear text that can be read to uncover common issues, so it's worth looking through this for "self-help" before opening a support ticket. + • Troubleshooting network proxy issues is one of the trickiest things to pin down since it's a common trap that can't be determined purely from the device. See https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/. + + + +### Upgrade Readiness reports outdated updates +Currently, updates are not auto-updated by Microsoft Update; so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, they might not be running the latest version. + + +### Upgrade Readiness reports incomplete inventory +Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, make sure to schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. + + +### Device Health Data Not Showing Up +Check for disabled Windows Error Reporting (WER) +If WER is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. +Check these Registry settings in HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting: + • Verify that the value "Disabled" (REG_DWORD), if set, is 0. + • Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. + • Verify that the value "CorporateWERServer" (REG_SZ) is not configured. +If you need further information on Windows Error Reporting (WER) settings, see WER Settings. +Endpoint connectivity +Devices must be able to reach the endpoints specified in the device configuration topic. +Note +If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must exclude authentication for the endpoints listed in Step 3 of the "Device Health prerequisites" section of this topic. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. (for more information, see Configure Windows diagnostic data in your organization. +If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). +To test access as a given user, you can run this Windows PowerShell cmdlet while logged on as that user: +PowerShell Copy + +$endPoints = @( + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + ) +$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded +If this is successful, TcpTestSucceeded should return True for each of the endpoints. +To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: +PowerShell Copy + +[scriptblock]$accessTest = { + $endPoints = @( + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + ) +$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded +} +$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" +$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" +$accessTest.ToString() > $scriptFullPath +$null > $outputFileFullPath +$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" +$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) +$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force +Start-Sleep -Seconds 120 +Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false +Get-Content $outputFileFullPath +As in the other example, if this is successful, TcpTestSucceeded should return True for each of the endpoints + + +### Upgrade Readiness doesn't show app inventory data on some devices +Note: Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). + + +### Upgrade Readiness doesn't show IE site discovery data from some devices +Please double check that IE site discovery opt-in has been configured in the deployment script. +Also, on Windows 10 devices remember that IE site discovery requires enhanced telemetry. +Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). + +[comment]: # (Device names are not showing up properly? Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in by setting HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowDeviceNameInTelemetry:DWORD == 1. This is done by default if you run the latest version of the deployment script, or can be set via policy. If the policy is not set, then the device name will show up as "Unknown (aka.ms/analyticsDeviceName)") + From bb6bc29cc270b3a481b09ec53d6fda4d80dbb3ac Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 14:55:49 -0800 Subject: [PATCH 05/32] most bits added into new FAQ topic --- .../windows-analytics-FAQ-troubleshooting.md | 102 +++++++++++++----- 1 file changed, 75 insertions(+), 27 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index e5ef5b216b..c9fca691c7 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -19,7 +19,7 @@ ms.date: 03/07/2018 In Log Analytics, go to the settings/connected sources/windows telemetry and verify that you are subscribed to the Windows Analytics solutions you intend to use. -Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. +Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). Some additional notes to fold in: • In the collected logs, the file name with a GUID has clear text that can be read to uncover common issues, so it's worth looking through this for "self-help" before opening a support ticket. @@ -28,46 +28,72 @@ If devices are not showing up as expected, find a representative device and reru ### Upgrade Readiness reports outdated updates -Currently, updates are not auto-updated by Microsoft Update; so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, they might not be running the latest version. +Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. ### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, make sure to schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. +Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. -### Device Health Data Not Showing Up -Check for disabled Windows Error Reporting (WER) -If WER is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. -Check these Registry settings in HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting: - • Verify that the value "Disabled" (REG_DWORD), if set, is 0. - • Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. - • Verify that the value "CorporateWERServer" (REG_SZ) is not configured. +### Device Health data not appearing + +#### Is WER disabled? +If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. + +Check these r settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: + +- Verify that the value "Disabled" (REG_DWORD), if set, is 0. +- Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. +- Verify that the value "CorporateWERServer" (REG_SZ) is not configured. + If you need further information on Windows Error Reporting (WER) settings, see WER Settings. -Endpoint connectivity -Devices must be able to reach the endpoints specified in the device configuration topic. -Note -If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must exclude authentication for the endpoints listed in Step 3 of the "Device Health prerequisites" section of this topic. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. (for more information, see Configure Windows diagnostic data in your organization. -If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). -To test access as a given user, you can run this Windows PowerShell cmdlet while logged on as that user: -PowerShell Copy + +#### Endpoint connectivity + +Devices must be able to reach the endpoints specified in (windows-analytics-get-started.md). + +If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. + +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). For suggested methods, see (windows-analytics-get-started.md#Configuring endpoint access with proxy servers) + +To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: + +```powershell $endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' ) + $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded -If this is successful, TcpTestSucceeded should return True for each of the endpoints. -To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: -PowerShell Copy + +``` + +If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. + +To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: + +```powershell [scriptblock]$accessTest = { $endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' ) -$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded + + $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded } + $scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" $outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" $accessTest.ToString() > $scriptFullPath @@ -78,17 +104,39 @@ $task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftT Start-Sleep -Seconds 120 Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false Get-Content $outputFileFullPath -As in the other example, if this is successful, TcpTestSucceeded should return True for each of the endpoints + +``` + +As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. ### Upgrade Readiness doesn't show app inventory data on some devices -Note: Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). +Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). ### Upgrade Readiness doesn't show IE site discovery data from some devices -Please double check that IE site discovery opt-in has been configured in the deployment script. -Also, on Windows 10 devices remember that IE site discovery requires enhanced telemetry. -Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). +Double-check that IE site discovery opt-in has been configured in the deployment script. +Also, on Windows 10 devices remember that IE site discovery requires data diagnostics set to the Enhanced level. +Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). [comment]: # (Device names are not showing up properly? Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in by setting HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowDeviceNameInTelemetry:DWORD == 1. This is done by default if you run the latest version of the deployment script, or can be set via policy. If the policy is not set, then the device name will show up as "Unknown (aka.ms/analyticsDeviceName)") +## Other common questions + +### What are the requirements and costs for Windows Analytics solutions? +[TBA] + +### How does Windows Analytics support privacy? + +Windows Analytics is fully committed to privacy, centering on these tenets: + +- **Transparency:** We fully document the Windows Analytics diagnostic events [LINK?] so you can review them with your company’s security and compliance teams. The Diagnostic Data Viewer lets you see diagnostic data sent from a given device (see [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) for details). +- **Control:** You ultimately control the level of diagnostic data you wish to share. In Windows 10 1709 we added a new policy to Limit enhanced diagnostic data to the minimum required by Windows Analytics +- **Security:** Your data is protected with strong security and encryption +- **Trust:** Windows Analytics supports the Microsoft Online Service Terms + +### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? +No + +### Can I chose the data center location? +Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). \ No newline at end of file From 440d21726e03527c511c23c354f0fb81e800d855 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 8 Mar 2018 10:01:39 -0800 Subject: [PATCH 06/32] filled in more; added questions to reviewers in square brackets; addred requirements table; shifted solution order --- .../windows-analytics-FAQ-troubleshooting.md | 48 ++++++++++++------- .../upgrade/upgrade-readiness-get-started.md | 2 +- 2 files changed, 33 insertions(+), 17 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index c9fca691c7..a6c6ab8647 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -13,34 +13,31 @@ ms.date: 03/07/2018 # Frequently asked questions and troubleshooting Windows Analytics +This topic compiles the most common issues encountered with configuring and using Windows Analytics, as well as general questions. + ## Troubleshooting common problems -### Devices Not Showing Up +If you've followed the steps in the [Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -In Log Analytics, go to the settings/connected sources/windows telemetry and verify that you are subscribed to the Windows Analytics solutions you intend to use. +Devices not showing up(#Devices not showing up) -Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. +### Devices not showing up -If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). Some additional notes to fold in: - • In the collected logs, the file name with a GUID has clear text that can be read to uncover common issues, so it's worth looking through this for "self-help" before opening a support ticket. - • Troubleshooting network proxy issues is one of the trickiest things to pin down since it's a common trap that can't be determined purely from the device. See https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/. +In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and verify that you are subscribed to the Windows Analytics solutions you intend to use. +Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. + +If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). [MERGE WHAT EXACTLY FROM WHERE?] - -### Upgrade Readiness reports outdated updates -Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. - - -### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. - +- In the collected logs, the filename with a GUID has clear text that can be read to uncover common issues, so it's worth checking these logs prior to opening a support ticket. +- If you think the issue might be related a network proxy, check the endpoint connectivity[INTERNAL LINK]. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] ### Device Health data not appearing #### Is WER disabled? If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. -Check these r settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: +Check these registry settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: - Verify that the value "Disabled" (REG_DWORD), if set, is 0. - Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. @@ -109,6 +106,16 @@ Get-Content $outputFileFullPath As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. +### Upgrade Readiness reports outdated updates +Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. + + +### Upgrade Readiness reports incomplete inventory +Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. + + + + ### Upgrade Readiness doesn't show app inventory data on some devices Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). @@ -124,7 +131,16 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that ## Other common questions ### What are the requirements and costs for Windows Analytics solutions? -[TBA] +| Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements | +|----------------------|-----------------------------------|------------------------------|------------------------------| +| Upgrade Readiness | [??? EDITION?] | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | +| Update Compliance | [??? EDITION?] | Windows 10 | Basic level in most cases; Enhanced level to support Windows Defender AV data if using [1607 pre-Oct-EXACTLY WHAT RELEASE IS THIS?]. | +| Device Health | [??? EDITION?] | E3 or [EXACTLY WHICH E LICENSES?] | Windows 10 | Enhanced level | + +>[!NOTE] +> Regarding licensing requirements for Device Health, you do not need per-seat licensing, but only enough licenses to cover your total device usage. For example, if you have 100 E3 licenses, you can monitor 100 devices with Device Health. + +Beyond the cost of Windows operating system licenses, there is no additional cost for using Windows Analytics. In Azure Log Analytics, Windows Analytics is "zero-rated;" this means it is excluded from data limits and costs regardless of the Azure Log Analytics pricing tier you have chosen. ### How does Windows Analytics support privacy? diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 8691c8f111..f36c4018aa 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -112,7 +112,7 @@ IMPORTANT: Restart user computers after you install the compatibility update KBs If you are planning to enable IE Site Discovery, you will need to install a few additional KBs. -| **Site discovery** | **KB** | +| **Site discovery** | **Update** | |----------------------|-----------------------------------------------------------------------------| | [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this KB, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | From 0001b9b26badd37b8405c4514c305060718a922a Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 8 Mar 2018 13:07:00 -0800 Subject: [PATCH 07/32] changed title; fixed screenshot; removed scripts; new intro with links; adjusted TOC; removed proxy whitelist warning text --- windows/deployment/TOC.md | 3 +- .../update/images/WA-device-enrollment.png | Bin 0 -> 43657 bytes .../update/windows-analytics-get-started.md | 116 ++++++------------ 3 files changed, 38 insertions(+), 81 deletions(-) create mode 100644 windows/deployment/update/images/WA-device-enrollment.png diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index b6e6fdd229..de56d4d613 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -229,7 +229,8 @@ #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) -## [Windows Analytics](update/windows-analytics-get-started.md) +## [Windows Analytics] +### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) diff --git a/windows/deployment/update/images/WA-device-enrollment.png b/windows/deployment/update/images/WA-device-enrollment.png new file mode 100644 index 0000000000000000000000000000000000000000..06408def682033d1de1d299c1092b62673d27a16 GIT binary patch literal 43657 zcmZU4byQnH6K|0g+9FNSqQ%|aTim6%OL2FX0>RxKTHM_&xVt;WJ-7$*((gO(`{TVm zCntON&fPn^BRlh(Bur6W0`&vlhc|EDph`)K{&@2SUgOOhIC*4v*vS0Pn^@QvoYM~p z;Ww2N1V^w7M6>U5-`~8ciTMaId<(mNZ!f9o^yUp(@4pY+pk1*sZ19V-n1-{movE{% zp`*zgdqWFbXGU8S=dbLH%#5romtQTC-n=P!loI`};;wg^_0}6-J-6!I>%PMcCw(S4 zBmdqOX9b+xrfn*}QZKjqt#^uf(9r%f8?3Fe)-eQHk7C2RGQMWy{Vuvis_~q*3D+;L za%K~mU!uf!9-SwCz3#+GK+zEXHK);c;h)~Y+J5qcHz{Pb4!z^{XlC%0rOp0m_MHFb zsm;J(7?jN5`?|cG;G0bEEVqTKg(cDx2QtDk@~-b=&{G)B9rFLr zHJH-g?0s1`3H=SRylN^U_I2uy_v3%;=<(}(oys8gt=et+WNZbhyYjzR6TBHYaia97 zy=g%w^1a-2`e0~aVBi~(rU0C*deuceSD;h(R=-Lq0t;>4`>{oIUx=JUfOTIs+!A~X z`Kyc06i!kYUIy!A1l#N<(`}pz89mGfZKML-2o;*`)*pr5x^7@6cJAhEUf(qAzj#gd zF+L)>2SUB=-TFJ|s?L1`Iv_Cx?R-tv*{TmQNa%BroPdP_znA6l7pJ}95U!%N`{8@l zmpOGea+LKtp^MJ5_ii~T4;%TTnh>#LfmL;X|Byyw{)amuGlc+ufB#1t6JNkV%BtUP#^pwwMy1uv2Fz@W8c$AAgCo&1T8q(Kqzt@=0Eq)T~mU9E{2|~uMBT@*VB4`KqN-a&q z(b|c;x6mJaU~YGZqs^R)_NN&WDyTinQygeatG7svVdNWw@A1*I0_vIz?{?+iQn9%8 zre_Jp$Ag_1$lm5XVR^eixucTkW)_mX{|I_TdB=&)#F=5#y>I)~AD3Y_QBKAW799+< zPQyY_-*f+TsJcw&nfJ&`RXen+yU`2ec^U_LIeFE6+ccPqty|tAQ24r)lI^=Yt^SG` z)^eh=Md(lAC!5oJA7KJ}-zAdk?go)w2X*`2E0gI>WT?H8^khd7-??7XjPlh*Ykb>X z;aawTsQnR$YZGg}?ojxMcy*ZJ`5s5F&aU{TTzf4U@=re{J->LpT>i5XbS$tUlEF z)rNYr6z_)iLc;1djPY!%FroFt}y+mvQ5QNB0 z5u@j1>cZ1s6#*OjC&@_L&z4FgUZ0l8{5+ms>vY}x8hkHP{xlIUg_O_#gm&_Mxc)o( z4H)HzjB;N-IYX801_C?XzeU@)el)Ao0zz*>?JuvU#10t0CPA;3;_qS1ka`{I>pv>9 zUxFLTz75ZCalJ4$dLM0O>m-J2UQPN1+)C(~n^ycnPSC~{YO+%LarvWK8tM*>26l$% ztsMhM9yqISYWzq~s<-FPnFbhrZqC|%gx;4w%)JP=`Qc=@VQO|9@MrA3Mj+g`Lx*Q# z5bQoih{%Tqpf)r(13qnSZnW}MUT>LYi>U4I{1U_IA@(qt_uE4igg|D0PY9%3G!cK_ zc%H$T*d)Sv8QR=v=WD#)I?(?ny&>eJ{cVhF($`U25bWQyiAWJ4)b=n~*L~fH+%3)c zdb3TeJP6+KbsrY;kEtT>VTzU7z~0(HKdWf>S{JY0l^}v%RQ6SdKyP213YcLHw4kE| zlzDyaS>GbN2i^CGSY4g3b@&|3KEnh&9A3|dK5?9hNGc0P3USQu`Li$Nw-;tdw~x<^C~Nm&O${|SK{385Yj589iUMUiZ=k)IY^pIn4iZ|| z+eHAt#≫;(R=ZhnvmPZP#5kR9fPNq!h4wKa6nihb*cAEt0eIJf`<`I_WU8JP);g z)O~*fRz2~h?m@b5+PuHh&K`+@n9LLM6jLa4Tor|GA?Z7PJnv_U%T}g16l-ZEWXgHZ2S;+iqJ&-+*p| zaB{6?-Zs7G@ul5HDebk#ofxWa;`J|`i7xjcIRfo;&lBUD?%16-N3m_ckf9y7Zdi$% z5@hFK^y#yR2|e%Kc~wvhqwaC#bys2Ivl@Shim&%-?p(UWYs1k!*4${)Ds~pS-qRXY zM0^HLo3^iv(ArDe)L6lF#FXw9F_SM*3*E#4{2rx;TM6at4x_Mw%A{L9?&K)digBDukW}AbYIU^ z{bWn^ueiP@Q6;xSme;pL?mO%N5!YI_R?F`DuRVW|^j%Wi#X{*ljy@7^cr`y(uInka zoOp>o+!ve^wJ|h5fSX}7z9!*s?zmCqE**eh2>(J`^KYndyqM{mgyTnY4 z(gf~@9MzsoLiU}+fUUboF)wtOKz0-ASN)N5blkkO#^b3>C%6UghDOVLiB-1&TY>mm z;OCoK}bD>fZ_ZDMG@j39iZ==A@#)uQNi6I7$Gm8srSkayLA9t-6B9T+dM;~?yh6*M-Vw~Oe^a?^aDIqMK$Nov$ zDeaJ31U_YG>Kf$22^@G{;=kEHF93O3jSv!W({?-;nG|ZeX;}9gI`ld0h)M3Of67Jx z{M8-9-Xhc#h|u@g*s{<0T>v)&zMR zMbMqU7uL50`04|p-bal$TOk|nZkI(=c60`B0D@ONjjOfqh`imF=K{?) zo5T~DK|b!w%U+ES3?6&4A)KNwf)zyckS$djKa?n~tJ4#7Tc+14)){NS2B-{V@w)>xHJ+b8=Lm$Bcs}O#q+WvE5--oxmxk&{I-ma5P zA+hmX(LxWLM&%OOTE6GqyJAJN=gakeM;Hq0b!P-W4ku>RIXBNzS`VF9I`nOX(W?Bk zT_;K0#_c*?^y4m<;+xzyTv%W35{A*~^}%U-f2t6Oz1Mv%xAgTo@4t;?Jx?;eJl|K= z>s(E2v_%&%@FqCiZ$!ut-OD<07T9>fG7=Qtf4n?lY9VUeo}cnuuRdPXp~pk9D7p8{1xHx<)qd zZ{IcHXL}hacWs-+Efae@RkXQfX+AAdfuWpW*J?^Wn54bc77sD1)}PP5O!~w|Y_8o; zjb>AxdfkJ012YS}O#9a*lBzm<~OHwGZ`s>tjB2L8CPwL(e`(yi{ial?``OE6C7UvLJ2Jfgx396A zl#0Ml$cXSQ1+WLdef>1VfQm_i2)ku#@f(>0cE?fX`X{OP`Ru%%4`eU1hZvR;{(BIl zTS?txqF*V|;JU!c3Fz?iL#&H?&j?)cNCfv-rX8%{+5xk=Ni?*fdus2EKqw zjfRqz3a8m<1Z_9sN*il9xn3SD(}Pmcp#w!))}M{GYqgf^g|}_dNlj5#h#OLiD2Bza zM$TWZTT^=X9D{mtW=dj(fV4c#PJ^Yl8S3TB{^_|MqaY+dBa~hockF&V!mMw>h-10M zu~)vCZU5yHdmpe>q>u2?wPLe#lI`hC5R~pYhm=#1R>DlBP9h9P$9LG3{hOZNU$$tr z`tWXDyQ!$bpj{aUj~+WhJnzxF)6H8D7g%YxKzNKxHGSm#Ic#iyvP}Of%*TsHmXVeE zbiHW@VnQPfTjZ|#pbo(IVR?n+bndQ0!VHH<2xn=Y?_%Pr$_!_s&kgW{WxR|l6W7e! zEPc50wCZj!+BI2Ex_GP2-A41q*Oz$Zx$>9IpHke9iLe-a9i^<}p(jz@>)E^y+f^IfMeo zl+!*(ryGA|gZ{d_ysWLQ?e6|g6m!7v1UEO_nshQLTLYq!dBWs zrYaMAH$zrCLNG?3118VB?_ZMI?s6=<6ibzR(j~gRNc!|bkL@bC9d4H5B50JYMGL&K z8>m@~HsL^_r&rA~aOS+)LuPp&exMTyIEd?FP;2w4;rXJA5ndkLqPvyUE9!jv zWHVsh-(1J<>}huS8{t`+ z|LP>=Z462hrS22w?@$p-Jb=+kvRG#B@7@rR+UF2)D@UWv zS94wbFdijh(CfFkzlV}Pe>KSx@A!Oyh_956pz5{5uB!g~-#CHOx+k`MvZ z)YOb>mU7xH#i{>dzYDxOToP5?O@I00a+|$qbDHty-OGCb5yVuezYgFTA-GA{Gl*Kb z;cgwj2n50wanD0qlAdmMDL;fVNQ z13o<7^kMMby)%j0kz&VlsYh?HdY*_E+!dB4@wz%(sPNTx?!KA)UoV z;WbYR_$&%cGdHIB&1!c1(8vHInnP3SE|vh&3-Uegg4r|~RCojB^F9^RGl#J%-p(Jt zcx|6Nc+0P`fXD@#$lNeD%grvMuXP;jKT|S7dY&Hg^a-VnoB8115@@+5LR(Q+IepviRaE|bqb8t@ zX-{O^tql7mEqM9ZsnP0X+GFsd2Ic28cZy?4i9Uy#?%dgU#pKVSkAx(_OG`(HEnXdkc1bQ;P=E`t;SC}~4{LLkxvh)TOzsYu~^}5<` zjC-b+##-_oDTA@n5q>PrW9x6J+%uhoq~^hW@*Vt%!h?;V@NH-{$auaRx$_(Q{ARV= zVAH1cx(^M>_1`DdZ@{I2$Xom-o3+*xSy_^(k6se619msXhzOu(Qz;FM&H2Sv<8-!Q zNIS**pA#5S5eWJ~`ECVCe1LL5-0|n6Eq_{HfO;6rE{3Au!!OjoE4UPH#^tr$5r33o z$a7%4#}@hLXj72>dqy|0|G#JZ_~h4~VTbrwvVVvT46|X_H~X~p@Fq**$A4m!E(kWv z|NIB~m4VIipO7IL4U+^G-JpyyWD#R*HO0kPqds24;(+}XQAzw{!;H88MP*?zh`p~0 zP)VjK=oLbm|GR)8%osFi*$r}{{1-QOb*=qfQv^6(lvY|lE&Fl7y$xnM&yN{7P-!Nh z@QocH34p`0NfqxO&#sUC6H`mW-JjWG_0a@4LSDR&>5G$V1V4TdYuxNh={7;0liPz{ zo9gt@k3P}??Y&oj(*VJNY?Rai<`dq9Uh75RnKBu|X-k4Hdmo_Hi}>L?a(E5PvT6t4 zzu<{@7!}J)a46jNWiFZo!bnF1+bHRLInNV(#t7Mh|;L zvNUCP8!29h?Lk)(P7sN2HD|Eob`$2UJ>{3JkP&Jp+OhZFvGMgJzm|Rx!5B>N@(?xg zvLL<;&v48B)EfL$*)HgTvrx66>JSA^`&#bl>ZBsO5XW)CcFf~c)Y^M`E+>VXs(c87 zvd!c>%99}D%e}Z=d^?Hpj{5a4h)W;C+G?#+7~8df%?fcm&(>uvs-+TQ5YA0sqJqO- zd$xaD{dK5+G2_dQ&_X?F6PNY6{(y#REU(Ns9adgt zztV!+HA84@qAO9b{lIxo%k|}w15afQDO1t@4FEc#wy~EEIS!3)W+OR}PmYgO`o4cD zLxmo~USD@H?$V$uj2)br%F;zjJ94!`Z5wx!v=?b)Z1DR}wS9AA5jw-}=jM_Fh=Sf& zZVXET+q7(aDMK5cKp{M%h1E5uCncVe8TvDlXaj=B98QB;et#A}23PQRJXNePB`O69 z-L>n1NaVCUU<4J@Q%>dAz-cM*{LTKZgt)2-cv8%H6ZP9&3W0ke;%r&)orCGBtTAgnzOFIixwb%9vQjztZD{I zX^8-oMB(SGVkrYQO?shwXW0fs)lE6eV7+Zm4R23=6``B^(%N719Rpmp7 znPdAl`rwFd#($NHQJ7ae`$2BAvp>m;=o==o<{3gUV^sn{9?R%(lX7dO|@~cwaIT>-*jX??<{x z*gYBP6O}Z%^_NlEBTgDgSwWv12HzCjEVVjmD!)C50b*htl07ugMgQbI;XJD(q8@#` zn2&jyF0Xr?&K4Z@UrVhHyZjTnZ z70S+21aZ1L3Y4*H#E|~<_@m#hyhtY0b`()et7YeU)AYT#bIAuOS0YU$VRXZ5uNK*) zn{UAx?SrRdAQ>xVF4~#hA;2(WB*$wtM>02Oqdtm-w_&THOR8P{y-RnuMT4<8pY4a) zj;&FrdMWu`t~M_u55C51!v0~JtTVeuth&qESPnD3OC1mwRCQ(GSbhog?Cs?w8|x>S z%p0kHJC+e8qKve$tT13d9cVOZ^js%`@Zs>5;SvHGc1-Mcm>Tw>(=)N&Xc#m#GG zVkiO1gN_Ebhsj#Y+y_sYwa$yrtTBBZ)prq>wqsVr*2DutgCjo{a;%C_6e?En6kI0J zL?3SJ@O#N-73|j3)+xf)t~@-bGI&{=O-9A!6$aVP&$IDT5|j#%(A8?gN-NtvN4R~i z@x8nXy#aqp%bjn6c1r;4*PBX*jfPu~jw6`qPqOxYQd|dVp`A-;ENvN(gQ<-N&WY%U z&hfnsg`#}-hh^aOOlcS>>KkRVwY@aFOXkEXb6umkp z8n>L_Gm#`dzs6u^p{*s%9qW7fE>|jHtEJU?d`e}q=>0VqfTL%XZHWU5a_t66>t1p_ zyS|x~>)Z1<`W(4?xPCkBLKoxKNwjDEIm5<3Ki7EoqOb{B94*>@=Z`#z#o|srP_pRS zk|FvvKhKVcWM{59_fVup#0-KaOHzSov9K^{<;hdj1g4Jq$RLLz6{FDp>FliJXY^m! zoNxH7DL~G4Qv- zhW6_Wn;)I+UXFmhDPj@1YrPH1n1XgkXE~0F;sDs=pcc901PWPn+l2cFc~H?fsR_hC zbjNbTgl-&5#vrHRLI$`3-h-3i45PO1{a*KML6LFs&HW1Puib5d>j8NrwpQqy#T&xNI5tci_l z^Z?@L^5yxLl9|^hos_z^Z*-TgrnT)Dyr30L(A&E&1bT9%Wh>sDVPY!dfUVV#neThS zUqLu}uZMwdDLxkq@;A+1?=gU=RoQ2RzcB_x`9Gh{h45V%47(3U3&1^q@0vgiZ=+1L ztopZlIr!U~FM0}0&V6rgdhLD(!<6at$8i^ETYTXl(l3rPd2wPnnZKRVY`5g^1`6gu z+M$24(wC}?D;Xe=AJ6P>|H9lK}f1lHK z6?M)_Xu-8hoyGFq->5EgwqDBWDAmjiewF+|HZ-sufz*=j{#9v~2h^zlaCPm0Che2? zRak_QkCiwTL@w@TM@zI0rP^?eE+F1CDUcH^sjQ4u@OyD{qibh;x{4X6$xbit?A+6T zXlO7R4WCkym{e(y$3}X}y7>;A|5Fq*=#0khTD6MFE~aRPNVL{KWmoFuyi~UjyC!{ABv2R%p=j*zl(HS&Q z&YiQnsN{L^Dv0lAY287>e2q^CGqe@?t50UWRq=iNtF9y3y5&1GIv+s!k%F;BDRk2?+`v_%dcz zjCP&HUx^VIs);D9zZx@m+nzyfm9<6f{3Ny2rTIqQvKzWWq7f_#3iyZSBM-Nle8_|R#hI)`l2~bA5hOzP~7Ujq%J5*KH^EI=-i&pCT~%ecVQ37 zUCNwW8tbSc24`a?N|;cPt9+{7_~l?kgDmdffNw~a;q4!>b-6G`e= zwf{prHHYQl4je%RA5F|(|EP1BDfO?k+2rUe3#{^M-o8aw8>4|3dSh-$qTY|(%XC4u zw>~G0(R{(6%7E_k|4SgWIfN*MiFfi~KIdQa4f-G6`u}H66O&(s<1~&P<$Ajwh>B)Q z7EcZ^d%7UZv`HgD%uNLE_RYp%6tG+x)n5nIwJodLz+K{NEFBvs=RRS;H(wSQ0Q>O` zCP|+Jti$z&T6hTljTrJJ0M9bZT#p#W%-S0mFv}$f z@xK3qfz=ST-VwO`mZFRkoT+RGgL-4j-iCkLCWCeGyC9_AFM*SjNaF0AO@4JQlSTS= zYi>6;%%(;!jXqAL9`ItwEn2Ww3;yfCjWG#-1%W%eV?Y{6!M#TDU7)T|IR-*DEK^vf z=-BW-UQ+deCr#(0G}N~!ZqE15SuHnUDt!gnZ8O?2SSGn^31jgA8P<8n3_||?T-9C( zhmxqa00+3slh}B6b}>_cp7OH6h;$hKx1fETExu6@5y6108opM5yUyjc<4B&vB*Qd)_KSj6;V+IkGmGRAv)GEs{= z*1(YLyHdJq7wk5--9e?lq!H6X^(?#ULplJpIrdC$9PXlvL6{c)S7_TJi^UxvZiio0 zm1C2`3i76`gWaUcR>h3iY#qyCKd5Lgbwl#vM%4tWX`LVH6e*{V_ zQbt}@6leDNwpje8bgM6eNPcq{Urki^;Z&w36;9D)q8TJj?%)k;de~LF$&ABoXs^v-?kQU-q!h09Y0+TepZImUB{2K5ptTS zNe9pD)`gL9g}0D;LucomqkWbAQx33Rl|cn&`qJjSs~2vxpx)|H18(MKzM zJ|53%p*efWdP{~^B$7pxNk!gdjOwU68$EHg3vd?U@%&9IAlTwV&R6xbwvD+oH>7IH zOU^|Tcyl?!V8(cg-uy|KOHDIQAXjp#Yr`_bgBMOO*$0%}uK8?lzYShF0vKxkXk9Ztp_4trCu&t>A;n^g&XNaQOp|CbSY|PEaRyQ)?3#(O zV6UB#Ik_i+MCGvOnKjH?(I>I%Mgy#$3T7!9rARkNrLDxmuKnJA#Kd5**5yVo_c8el*cY<41m2NteE~ zMPtw1->T35^L06*4`qWTID0sz&eMq-4ntKa|Mym0h6r$$F=QE@Pt335f9qN!Cj~-U zA5}xA_R<@dvcxlbt=(F^c1gH+7HNd*e&S_YwTQvI<=Pu;J)l|$8!?@Ra* z`eSzGuyJUJY4Lg>{LK~{hT_ppCqq?j5or#1Uh~!trSLGfD*Vw&ox?4blJCITO50f3 zK81y|ec5E;t3Qy7H-FR2>FBp*9^Qr{i$GLvPrdK*Dk*v?GqcB zJh~>Rz73BHXPjBH#1pp!c;3ANt*ZKHy!pjtKI|wC&}qmDi!aI_c92~g#@Fneurv?k z6Fp6Cpqd_yNmJ1sJX-#BUO9`VE5D>q>;uOe`nwqmdRj$bdg`N>ab~#OX)?Y2sJ%2^ z_f(CyxmAswxTtj|-!|^4YBu%FC!|+NNzcUTuvFP`uP*yE56dASpy%TAEPO;YA{9Kg zH-nF)RgDB%wIBno48gv4Dj(j==*>cNWPIM%3;2FKUzXA?Q`(p7Bj6T-A0 z9opI!9W@TKla;?G$6Y}X+{(C_gh_$>bJnq#m*uhjQqd&}mtBX`76QK2zwijziZB@Q zCtAB2bmt2$^SDWT_QU?D5{aYt4l35^IKH@*o*qL+an=k0_k)7 zW;hm|n(Z>hR9E3K)^x0uz89FdNJipJ@c!|EvL~^Trcl$ABhbXM!eT3olbC&HH?IM9!b0n;GvY$lPoqyT|iuG;AFwfb8cL@7#|C6TnJw zo*Y~^0M3INp#VfMzP+Vg7LqS*xk)a9W(rVx=XJzem#w-Pwj+C&{V|$ajLl>%&b&G^ z6FVrBC_x=lo#hv9kA+x@S=Psxhz?x2WW4FyejLVruFurN6cyM-A7?k%S*LkO)o4Nm z{Nds>Z!x@iIqCUH`9X43W_?c~{lw}eeKO_RFwiq`Pmz9)<%oMPb zu#ogWlz-XcGI?t)grSf>!xsN@0+zJInl~S=)aTD(Lkt|8!9iUQSKW6*7ZgUe;(LoUtR%y364gKyW7LY$nI8Fu^;mU9 z>srZDtEUy2(RaKjpmitiBAa4zURF-tS7FP%;SMBAv77wu_!)T!e5j(TgC49VdJyLj9Re&N<-m9x)K|;P8}_yq73PW_r7x_Q{1mjmjy%l#?<&U5Ni*P z7nxZWn-PSsmu3E&f z5vxX5=z75EJSAJ|wP_!Vit};jGnA?!Vt+?JO@VYwj{c*Y;9 z+aDH*XdntpVNb+#HsJ~d3FV^fl1*?pko-ym+8Bt#_%@h8y7-)4zBhb#eot=BL4_+2 zD@W-F%*|n{%kRm^{dBmMaG3pC7sjEL_pBJk|K_)VU+g5VRo6`7-!4r>#dlgi|6-hu zg;f&#^xxXJLW!RmI;KA@2pv8Qj=*8eX8bacSF45md0J(#GJ)hZB>+K2f}hw~SMPHK zXQm#XX@k9E9iG@tSUlX3sLw02x{ytrae?Y~dPFPo_K}6SuxOIf2!F;x@jRVVxRP2% zJ2~g{`R*4K-Ar8-IK8Ge+Ca&(3jD8uHfyS?%u?Bs^u%0RNgi)+!60TYGd)_1ax!vq zVv!tbT!TL|Y?`#%QVw6t0m%cDHL6c{V`EYjSKr?N_Ww{i)zTh>S69~`OZ+RIsM85M zJUH&JKrhG}DzVsK(~D=+XQs7F9r&X>OfI=U844X-^%64X89H}B#|6u~RwsXN=YrN7 z`PkWSF2FY9n71Z?cqW@jI3#*PyVI;X8pu}by&iNitXP&a<)S-T^6ciu-sEsX`%@8WpgYlSptMBkGkbjj zS?~E=$*-M^$xlpBMt=i#!#zj8%RP}c19Ira^3ESKg;Vqr=3}g~4NYHWUQP;5BO7C? zhn|9hlv9DE$((XNFJ|V8nSMeXRusmD&1Z$6kau~^H%lL%Cxe3Zkh#k`HQTOqlaGJh zqSO2Sfup-hhER7lAkWtP*sc4Uu)>@AqbNZmR!A}ROU1&_b#HvCrO^)*Zc#kTc(&qG zxUW6?J+h@nYE|*tKt~dmR->+2BLoIv`iL)|^$T2M*ap*|`ta5@e9pKPLQhKZaBzaC z9O|hb3w!G5+{L(mXmcT^E0+fB!spHNoG~W@^FQBCT%Ed; zc!>jh%KJ$3#-)zOPDsP?EwAy9r+;z`|Iu7Gz2^;;e0hsNK|E^VII^z)0nT+rQdvt=-wkz!gH}Y{ z4K44pG9P;;4Rq$au+_vTWd;gos$BCrFRyh{f)YFf9^IMkQ!M~0U`yqv9-Y+wjN{G> zKJuA~1{(Jj>(viF8|jIH8Q%+34iE~5j_wi_Yt&qRq+$>oDY??~RXVc)A3L^LEVU$4 z*}5qMZAoLB{ttN@nFyw@@xe?3m^IEL%cRb3QCdh5wF7;6fc>UflU^(*F%6~JivgsZ zNqI8`klF9f5*K+Bg-T_hgSot@(8nQk#KVgu_M0@<`lmTi@45_He0%omI0lVe!_Y<&1C3SZ{z~- zK_AU_fBx>g3dd-qu*!E6StBhbO}hm)iDBWCc>J71q8weyc@IPb zM9Wi>5=t$)T#Omo)?ppe;HoC%qSh{RSC^_#9|;W?4kl|`^UHs8wSY zTvGATd@c%IAWn%*-e83j^Z}UI2Uw{`6p0V%70G9)7Nqewc(|K-hy$%r z%7RaigfgGJsK1cCw)tVHufE4Mvq`EL$Cv_ZcJ68g0y*r9e9veu{iYmOMbp{n30FcS z4R=QSl=lf&s#rX!5QY&Yqp~1A_y&(5AK%Uyi%}T6Bq{qo!?7&pq)2a~V}J z=$z!@uZ`p1=(jZ-lBx;fypoB{I_WK>^i{U0$}`jJ=UE1%{+QcKj4V%41xN0 zGH8oFR143>=!Wg4Qu8~Nrs-lg8tH^)jyK8#H`y>?>tJs^x^#Cr-CqgZ_nHDq+T5Q=P_eLADB$uKGYp$H#R^1lI-zB) zkUCvNaM(pxYA6C;M6WGJbW+aaeTH`0CQj$5AsyQKwDfPA4d-a`#W(f59kaz6*BeT~ z&#Uv2Vxp?hivbxL0~|SSD34h2H(Cp4w3HRUYqJkzOD8(md4Kr3?e;8%vhK~DXSZr& zF!i+@p*cT~DSaL%jslVW1X3y6v}gFjxQ?jY*sf<;007fWUL6Tz^L)%EWI_*|&M=!k0OeCt6;FR7_d#fN9eIRkR`@c=QX0ahqwOuT zRgZttyRhc9sUOZFtRD^E*@Vodd8d)yp}Spk>4z1KG><*d>Qy$(@^r9OV{o7 z9VgrO$LcjVWy!Zo|Pv^%$M7w99v)AmIY}cc-gBoHDI|#vEBo z_#NGOIn!A;Qg&p@M&gZ>O>wy1j^!fsq6Wp1zL{f^MH7J5?aF?m_y?CUKPYFxQ6YqL zKi`#7z!4f~77@}8y0}n=6pETBgd3|Z72M$O7Kw4QgbDd_zA?sSV=;@TS|saPb~yGs zoy%0}x3Kz#n{C|Y#?Ds(!jD9gtL-XQWlA#&`(6?+XKroYHPtMF$%s22Q6g8-A>Co> z9v^liovK<~SolsQL^1FtSn80R=89vDh7$Fo3+D`TYJ(xlQBklCR^@aph77SD!Q%Fb zo8hL|61{6|z5LWCM7eMEJtftxso?#uVh8z0RqoUUhAWSFZdEB_%kv=+WHj8wI&lwL zwj~PcANeQZRHQR~p4E(ff+`|TNEu=z)p0R;{bad#cTcfbMwB~2k;Rx-UM~+2|N2=;1G{>$}I5c+lNA6t3`;5cW7ukQI|y;0YNPO z`pZvOvet%zKYuL3X%LVUkI4tZb%uTt9epWKX~&<40Ric4!ID2 z^q1Gt(Mr?Sn^gA%ok4W$hZ3|Ja(yy6Cm)R}@?#>s&n05(g42dxur>#|mnE2WPtr^y zzHMYQTf zch9i4tES@XeH`dWSVu|hk0tN4J>xmCQ;A7x*!BjaUCgM&{$~DqvP%ekn@ZPXIOcxd zHFX*pY1n}vq`X)>TkeLZB7|~vYBN;fe+~l#w;$+*O$=pKj3s4-HO;(bosA9Kf+dh; zX;4tZ9;omw76dhJ)kTNT%axToA3T)`4T?I4SH=pQah${s4xPM5LwN9Dl5& zbpgYZS)sAjhNUVLeU!if-~iUgzMkSS$U|{;YW#-($gW&SKwBy}XB7(&SUPy7_1*nD z($8vIa+)SQIl9T{7TnKSE9};sq47P!!aW!-Gx)oGw$SENNaOTO{ai!}qsu4frR1yf z)7`qbFJc~PzTHxe2##t?N6cKzLH}85bq`ZIa!cskyJYN5Zd+dFjd!21PIvI)lzZSFe1{Imw6v? z88Z@F2D}7lD%I3<^Vkqkm2iuYbZ?c+_a;dlxMj+HDTq>W0X%`IgmGFxTh@{)9KoB~ zm;^W(aB3Q+Q%(Ct4KW7&YK)e zwAW}3e7+aQY*Hszu^(S)%pHs9-uj}d%!?q%#(MkXn}J%&U(4|)k^S%sJjVvuUmX4w zw6^Pz_dFb0w4%r<8)Xe$FtM?yH4|7kb~r;yNGlBj<}zl)+34I`qR2C>(!*@6aZM=A znjC^pkj(2Zb|fa=2Iq8QD)iPLG;Jl#b@!RpW(w(Sh?R!E=flQz*ml<7%EH#1vTj_Z z`{0DB<0w4q#?Vs{!lV-#+FLsp**R0{kOd6>KK=H$*u0wJ8t>fPHx*u#+FxT@G?fe; z30u|LZDli)`rJ5b{Ol_l0RSs1yqTxN58m1y#ON*gqs4{ExAM(}gcSwL-kc1buAytH z@fy=ivv|Op?u*!JIp6oJ;N60m?;-0NDcSu5XNaWqk^G*=Kl+C2aFmjQICiu`bkhMk zU;s&H9U6m#ysox$IOOJmOk$!DL!;(WRl2T)ze#1g^Q|uDGJ)#YC2ei^bDEjM6qhV1h!;37mc#0B!!uvn(p6oTld@)zw5Z~ zZFc=%u@vTfq@+tUsbr*Wr?|8FDa5`3aU8wsJym5LSyJXQ)+e3JMF9@CpUZ5TOED|{ z4`1&XU1{^Jdw04!Mt5wj*tTukwrwXJ+qP|WY}@MCw%^syv-f|WcZ_|`w`7cU->It9 zs+u*g-!+R?YQgvy;nH#C!Ct>$$B2G2hvWQY8Q-ro?u3;wWhmOj4nsxbw=ZM*^=nk- za-K@rb4*%VJ1Ba6fsbT%7bv-hv@n7pfK}wP(v(5`@Rfx4Odh61ImX__QBm*OLf$~P z08cjP%vD~-S&sa$X@U}{u*nFEkwII={z>s@2q_F}dA0I^vdNH8$8g)_ZQJ3e<%YYn z24BJ|L1g$;vK{FxX)_j6BSU%hnHP_GAQ3^Uv zTC+O3LP!d%$`Pw{L!yGbJ2(w1@6>K8{^Yq__-Xw*^5>_{I=w_;_WN(}{zYX1fv2HV zf-bG?!matR`xA(Vw;p?OwJlh9y(ipNN`og-X5Ffm%)utRnkah03n>aTqM{b@twN&w zDoW9}jr7)d?VD!jgspJ`ezZsB(CSEG?X+ zc|(Z>0z+wU?arv&VFMvcUX%bDVL0P3g*F9H?E?jh**gT>T9gcI#LQ@RXumhivCs?E zHL0<1ink@fj8u>l7o{QRiP>EI!?8$-_Hy6ipyt1zW0l;Ck3zt=YH9Ukl2ewJnD?0P zNg~LYDc=mSna3-O?v)h5=AF!rzNIlYsxwLM`Hm8DE*dX7&*#=;>C{e-xr=Rz?2)p$ zV%UpB!Y&1j(v)HpN%Vx@DJ~$PE@ezvErz4VbDlS-t;wn+Z!HF8?m(IfwhmC|%0Mij zpob6JZSBB*u$BmDJrCS-86c`R>ZgqFZ-d>0QwXb>FABQosW}M@1!@yi0W*!%RefTO zb5M(<3f79DqZH)ft3fxTd0^qPe*svp1?r7&Qozmbq&+p=;$4da+h=Mm$bBP=Oc`A4py9>>8m*3kd;J zqvn{2yzrbTr5`EQ(@Vc6T`tYdAHQ5Fjum=JU;c|^*_^wxprH(Yp>K{&sKxID=WMS# zVf9#FzpdvcxCA3u%bx(M8)Xnqb`J|MwG>=1^#cjt5Co{RJ%#)LWZ+`EkhezeIQ4wh zV<7c-1(z%7{RJ|GSdQN%|DP{ym0BQmao_K0p6he_)qD32X`4IF7wDV6w8Fof!(JND z81n=q2>yNVKLi1ghEV(RA3)(h8X)io>n~j`5RuFxBuUeBj8F~~B8As)DXGbBLJ)9n zXv3AT>5*@=!m63(SAJ z2^4+*ADzL0&+7bHcav_#kWVrN?$zxE)UI?)mh ze=_DJ#9k7}f3+KEa8QUg7ie^Lr)U3#jfFEoO`54-MGTDb)8PHKFk{<44)1bN{TXJb z9g2F_8C#{{;ePzES+3E0yx5RGjy|`HN&oTBkp5$X5DA2Jbz8tIPf3zvr}f+`oF>lG zmj+EqCs-ojpZ>YtXtDJ9vGw_y8;ry5`Bc-4WN!iNXe$V11cb(ZlLXpzlJej&J|7*` zT-Uh|QFJxOGvE5kBci|}YQkcykJ3g#=2yJ~JP&F7aix8C!6QfZ@bGZNuU*>h#tR0~ zT+YbY1=Qe11u7+vQGDLv|4bxkyk6=;0$oWgPHM9_)%2EM?f@3pSF8Q`=^2&2a`0!; zI&x19v-23;NliR0D2Hv^vC&5!ulrpY9#zbRJBJZ@GpZq4^*tWau8hUdmqZVTw%_?p zC$U-8oth6PLu1L=)~4A?=O|HJM7O}Q6|aXQD1$$U-5fHh_zzTnxn1S%gcN7H9f*}L zoMhU9_EKY^E@KVH^ksN?TA&V@*l7($XbLd?q@mFEOwmuB_ygl1W zcTF6h2LGJ|Ae6ok97qr6RxnpIXjNysSUw!9K30pNkNWYw9BoLWbrsuM9TXKkne#;d~>F02f{QI_Tn$qR! zyG~iZ<~&Gi`oET`I?)FpQV!)Qh!G+*F2WS4OR0Bg6Udc0nODAQwceRmZm?M~ne$<{ zPHGM1EF9lM6)x&E5A&4@KEK1-j_qWWKzd$%5XnWd2HRl%Lu;v`!CPAy`8wyCG#IPK zDA2-1uqx!1z$9a=GBKP)Ds~zTl)+%=!^yA*hMi+FTZT)l*}V)GwQRzLp6t48=^SS} zPj6jjZWvL?PmthxUIqEA=0Xo`ZYr(j(FO+xSwf4ixh>i#a2F}$ZPa`1F19pO^68m1 zf_}Q6B~IiHC;gmd$**$&7X;{;n8>G*3*kg?NUV>`Yr% zX53(O9@?D`e~nuSU8X$p!*bn~mfY+-w}NZjR6w4tee)V za(})#7fUz)o&tb3gp{gG-5R^ie42pVhcGye7nqbCD=&psb4`RV5IxJ=!dj zB+*4tYCW=?LF)@65qPR%Sz!nQUnO%GAQmT8?W4*M4$#aV6cA?V`ryOKy8loagZnjv z``h;Ak_I&4?w}gh?3P*_pz}UiWZ9Ho)wO3+9_7#O5p}8QT!Tlv^A-do&92_7$0D%xbvsDbJ0J0l#iHv#ypqdDhtr1nl#rCyM8QA5b$Da)q={`sD( zqiAi{H+i1VvFPMXYZEurkMt+fq-U48w$t+q!*a7L|>HAME~9BGNS751boo;1V+7EyAZ&K=#KCA**JOMVOSyn%Gz zMvu)Dda`7si|>f2Ggt}h(X5K3)*Ivtp7U&nK$7;ltBVfTnpD<0=`nJL;1<2#dB`?odoq=OwdbHG#LOAVkL;{xQ*& z8=x*y953>5m#Gy*P?;WZx=xf7f5@`;QxKEqZcM@3%4m)JyXX+j zaBa8;y_mhBl;AJv!hC@;PM^DUk){6TN%apK>P-28P%Yez#=FMvZ!Xz0lE9(Q_IglL zP>Ao_K0e7{#)!=JZrhm=!3CALN_dNT7Idvp%XyX#ggkr|VxMLlS!;p`nbt$V)_L7r zo!jSOrECurSfMcRc!i2W`B5ureKvVq6`{puij!iw=U5GGNy*lMK|sF^1sCiRx~??t z9Q-Y$Mt2nKgcVy^++mr*rYaxpx6QWlkP+rE*ZbAGkCZk3i+$eDzdOBZNVt(=RF2)q zik=?)+SSt4h$XJdf!@*ax?nf#Q7Y)%L#2w(f**|pz zc0FIV&1o@G5gP$@9SUy-0Lr}6Chyl{KLkm4i^CvgXK0e7n25=OxCa3)}?!HE>47n=gbd=)c)GiY-=N zG6nJx1FRZhO0Vl68lNGRc6SZzf}?*(=q-_UhuVaBK6M5Ml#z6HiD>>q1?z$cLd*i{ zL8B!)s|u-Mvq*~`wM{>#_O9>usqUtwg!D8dM$<|hPNoVn`@%%-eGPYFIp8!*328It zIf69Z^BYidj;TbM9FDsc%jeZy-5OvbMzJ^eLp?UP+39A5R(f;%W)iq*Y0!%NZ-h(p zLq|ndoe$|r%ZP;tMJJ@hSX$>&B>g+V5 zdWbL94)}bu>kv3ex4RK90SVMOx{s}@*w6CgcOD8Juc>24e`h_7O*p&TPY0NHYxS(t z%7<^PhLT;FZK{0)a*a)9pwWeOUw^b3GWxGGa#;b_g!~zScugp|Dux{rNaf%$y#yJ# zmMo&>i4!`;xRtcd3I^Y%32bh5Wk8op%N8f9_8&!!m|n()nbG;_5cvJNl-|l3gu$ zt^cM)SbQnMuFj2guz4`Q+zbZmjHfaJGw}Q|&aE9n<`#)=G=zSwWDXOkW4zXO|MhX( zfs+ZbVAS5b4)s50kmyiaLV9juI_$8Y2QPn_R1@SR6(2|34W$5%zlD4Fj3;KtN#Y!T%hrsvwemTD^Ch!If=RA%!4r8Gr>x?5+L@ z#T|suk~8e??gsS6za!y~PyK~4|2>?I6ZAGG;~xY70-w?UZ><5k9?3rcWO+LZN%aj; zEP;Ib{l33WraIrqnZ6t^WJ~0Fwu4U_KY$-c8>hmlR6g9mUmvIFy}q`yoex+aty!_W z+_XiPJ^F{t|C>#`*#%}3y&)|BcL*OikpBz2ADfMo+qW&deq-9GetF=liTI!N2M-y4 z_`r=A&1W=rnFd=tW08vkZxtl4ga0!BI)YE$)qi+anVRi$AgcdD?Emcr(D^Flnh6}9 zf4N>>_!k7y-cw+l`R}nA$Rm5tlawN)eA)ybST}HI=6-JRT=i$X8TH%h46XNOkDqfD zd4^r{Z1hQhO9d(R{m>SDd?@+&94A-%)qHU=^HHrvq!RToLHF+S3}hUO1#Wq(A3n4z zO_0K_*n#umU*EyCTp&}jPzs3Pa;_Vgfvbn4k4*AIDE`LfDw7P{Hx6@LfzuC~Y2jpQ zRsAi7BAxk4FQf4*X5p@*I;{_#u8VWJzPWF!9PW-&FvnY144ljP9qlTQiz(Y%0&N`b zl0lNU?FPSmU`+iW!hIpy8>%DGwQ&~Tc^=Qg!6o1APocl9f=|2GWPD!CQIn`X-kE;V z`bK=@>v*VCU##H2pQ62Q#X`M+vom&`&UUgJyIKjl=w#=L82MNTf-B!6M{E!1Vb`4L zH+(!$U$*&i`YlGAVI#5+<*a@@7uZQ2=A>tQ9y^mDZ9CP`0vJ;z)iWn`X<0L+ZDKuw z53XG$i4_2`uHkqrWI(p4raWW-A@jmx$}C_V>WQ=$KA@h@+Cq5+lkJ7ZG)cDXx{*wQ zdnk^qmTSu*gO*hrn>pc1O4OlJ!9(0shohjKu%R-8maPoUd+I6 z{DFAUKS_0yMD=EPaLvPMthNZF^?ZO2QQN}9epr>P{==eQQIO^Aa0N~pT_*JW^GrnD z*yS;8m1r?}5Qa#9ELmZYy!M&F-|4f4TSWg|e^iyau`{~<0b+uJwFxKJ?pq%M-@MMx zRp*}(=m@XI5xGKo9`1rV<#v|cCzGL;k4}E~weKB|9Pl3&f#Ytnzpr|yr(>F# z_l)<-1V!^_qOf^tAJUz`e_$8Mk}|VUFFj`Mz_zNj{zA#coq7-pKJaNg_4DX7T%8oP zD%Esg8}iieUz2D}wD72uNG7fMU@2MDtJq27i@%5h@hb0av!89z@4dPSBr=9#1c_wA znzL`ZXPs27Xz1dBQuh;GI)bcypP+Mq@B2yC?89ZG>BmHQ-LwXy%anyh*AOa|GtgwI z`AOE}?ma$@-|W4ueYU2M^at{sKq2W?^?l3kz%{K_Rc|Ylr7DGyd$qhgM)mSy4q3cX zf`f5tcU+E76-2!5ss!rvM61#otJjtKEROOJMX zdf9bnZ^URU2^I#%6-q;0{o#D=5dGJB!V@+BGzzEl8*5Dt$ySBNkFQ`SC#NPZB)rzj zReXUmGAZRoO{9MJfK6MOY&}r}j~Wr4yvD7qU8Ygqde{uO04@Zpas!x^} z12QjftI5fkIm3Py!jye?S3NY>H-`A`F5quxqPZUAPfH4L#(eY^jt{^8Y^^|x95{ii zDOPtXTejBEwX4cxVJ_w~MUj_IAZBcW%pawG2d<;QEQuQB11Z=yFhRgf`(>xb);#5+ zhA51(g9OELu@?2xNIVH&{JsO^XS1EM?>XvWF;MYf>OF zZV>%3r8C=hyy>6aiwgf0`eM1&BI?c9#Hre1o!hzg#87#edF@<0-cW6 z^K;m~#SOUG+#E4j)=3~&-ICug`PW_@+||rky?Zx~7t&sIjrH%(I_GVswdeJ?nm~cq z&7|3x*u~L;FZ931*O3+L9yan1EjXp>im!Oe&z=22vQ$6b!sf=tfZbh8o8NSE>=`|j zJsr(la?vpCqEw~jG6|_#bH<5*BZg3d;>mN;=rrqf1Q9fHzIyP%6Na@5!s#B$!!%KI zMb%JmH(9|r)fq8Q_JOxTf$#6{4&#q~SRCHH8m}I#3i1_inunT(=5p6U49b98E-5tL z@s=?@UZLBci;HX1y*`DA-xduK+vCw9cU4wF4OkS%Nq?+}E;O%{@+p4m(HTa{JZ10q z&1{^1V6_Zkcl9L;%rszX`F7IF=M{p4$t}Dpf(AhNGX#^_I?bSy4VYKISJB&NUk-pBuC8gE+wBSF>p2TZw_E~sW zR(9mzQ6DV0396PzveXsJ++81V5I*LIN%nE~{CKkZ+GwA(wMtd0q!hY6G*xh)&iMPs zrW@1mny-BeaL9y-N{O#F8ksEA%5?55mmEsU+RonZH%`SE8N_l|7x6(x`^j)t?%r2pZDTru3X=0M1xUI>>*}T=(bw~eU4`f z?@yQNSFmh4)PQv@=T3%|#$4HLWBS0sz^pZDf7|lsA~#~QXPu{V28Ffn`5cV6JmOJ( z9fs}e*6e)Z(Rm?Wc~j7N@ZuC%UR_N~OUg>f;Ix5)4xcw~Y(Am1HQLVIcryz(yad-E zW8c%Yn450)>P#%6mr(%5U2D-zYG>4BwJ&4UO@3a->pf1FuM0j)@w&0a8C*BdN%gGw z%WG)C$u=x&#psoxcJ~+5YT;MoX;uJ8n-vm~po@SuwE?jRsJped$&c~cwB_3kO~c?u zse>w>jbZF@Pm@0HD+G|&E_H{Bi=@uUp(6I@#aW@~s>3vIbzsJ)^ZUO$-O2q6s*a~z z@tl*hGyF)x*F45=BE{Wv8&0o2vzTkF}pC@%=V7 zQ(dcElOQm6A8<%98jlRinQ;REzx7xv%jP#Oxv!2m^7FEbg^qfhjD9m6=yNw-C)zC9 ze5rW*vrtd8`=><%-mxZN=OU&cp{ipZgs>k+lIs{{dwc3Z6?;zKQ;S!)7`7s5gs6F zpL#&^lBp>v8ZboG(%MjP^`A6^gM?n|@MvC%$mmMV$jFl~y=dD45qug{@va1}8C3hH zO;3>X#vLs_TYfPgA5{jp9jdgswB?~14=++NXjUVryQgVu7Iip2*BYd~m;rrdBRtPD z9THh)H%|w}yl~o`p;zW~v*gZaGA=DYYK76A`?7quU;eNxf;!&c=LXvnQ#c$RVzPU* zd?y7;8Ala>&eCQ z>UcO!1OBOBv)rpx9v$TddF)qyuSvqW5Lr`4B+p{-{CG=KUqftn2P6CX`m*$Fc`Iy8 zRU6G0I=xC{dB#wC0`0w^p4buAQI{-(o? z)!gsPwO<=14w>ox3Q#p)0P9Uw8ct4)WBc~3SfHSwG@VcS{QUe@TG+vT*LN}-1h172QG3e!r~iY!=ysymg<=Kc0`jBzLRA?+jg&yg1NC;pcP zP%GxW*+8~rPS#9nlBdhCB|ctj1Zz+rPlfW&hl1eo_fUXt=70UsKSsyOdW_=YlpP?L|!;b4B^HkjQO*B@C561`TasUu(<%~wt_ zHU$|fE=hG><7PAKY)1@cR@Ulb`6+)?u+Z1wHs!AO+D5c^ss&ptK*t*Lc^w`*vLS`m z`ABWTFM}ypglldlj}hzkpJU~}Hau(!Cw0Z%{sPZbw-1k^7Yk_Q7mcG%Wc2o8yRgG+ zegW;@@@4aAb&9H`WKdy{17Z?HHdGq@}K2mCaTEWX| zbVK^J(OdrfUJCZ_-xamx?d^|(YK-H`s+(lXWSNjnz6%lwo3KQ>EH>9Rf*lK5Pmr1x zL0p|969DS9W7Jn8E-l*75`W^v$|O=SjGkaqtB5F}q)$YMN{UyW2*B-&TkEdmj2VxR zSJgp>2KUkT_U_KM+0~UM?dV;YYDkNk>gy}&Li1^B#hBGeJthyx5sgOO_)pg?*MVfU zpYO&+IA%pkkMl>$)lkL4*B<809U%xPECvN0?R7tet&b~yhG1n%x>B<-oPS%3%pfJOmB*uZsbg@R=#u+vE5yEQzns@+b6W=w^ht_z&Iy-)S~t zl5=>|_(CAsMJx6KVf;h1Gvl!_5ENE6Q4_aJm@Mdb#t3uj#Ijts&yGtZzs4e7R~BK#$YJj*!xQkRi)RM3XM%34N9%wQ2{@g>m-!O~UM zR8w+2v=;=@ft-nqj+WX1X+xfyk`Yr-$mv_8QlWYyIS&CbC3R%?9!oMx;4eZH8M;C8 z+qZm#v>MMVf9HI9F0kL?kW)ETQ_|28Au^;#ORXL3n<J7;nn%82>vT5nGOc zUsdcG=F9GV=kFuyYA8(6RQhvBL1xVj)U6~djUOdbInvnIJ+SJelMEvU0Y!;%ROn*f z9=#xyZ6cy44KA;sGjDXqmW;J;Kl5pRM;)*CAf-#C zmi|CWX^q&GoH`C{dVcw9TLEn(6(iG-5q$Nt4kl20kVARuQF9lhgT0jVy7g)DMc$RH zc)t&jT*!OG5`WUBS$g>-9ztPtW_e{6s3GKNmu%RmD-Kj4BBv=D{@_C9YE=tR1z(8U zAK!;Y9Z`-2&-H4SyQc%`9UaWT0+^NOq;AGft>H((pvFdw)5q{9!^)Pvm9}K;7Xm?{ z{zU|UMoenLEYswHtjI$q3_C6wyyA4I87Z!i_Xeo02x_uSY6TqGy}p`@!YmQb=Wso$ zKRfZV8G2;HM;b_4S!rDg`;7MG@siP<4cp!iW<^ckCD7t8;~A0S(Qwdpq`(ony$q$5+mbW zz!>$oh;qX=eszaY#lIq}I83W5Ql>y~+eVcvqcPJCjkt4)#H`|`jKK#OYF281XGJe{ zV{FA^ApROc3m){i$Rw%{5J%VF9(Z!Z>&-c_OXhP^3k=LFU`&!-k3sV99if1VYXwMq zoBoXDN=#9uNG$JG$Ct2WFH@kWlMhm_HXoP9B8DFBE7{>zcHoN;wXhDO%3;rVcM9SS z1PQ|alcS?9tLrd)D^T7N_>f@VpqWdrigg||!^vbCpSb6|n_!-qva&!c9VtEnKb$hc zN5_Mtr>h((S%p19g8_)ItV&lsO~Pl>8>Dl#8@8I!r0i4mU{4Kr)IQi<%bWYhH^Ipq_S z?;k)DiXton+HT3*GgpAph*Umfki3BtTS;Xr2$_^{I&?^k07huVSrUa33O+M^tuiGz zbZuG#274)2yY6rlBOkVTVM{A(zDeNExY_Y!22*lVz>&nrY0!W2e0+h@kl0I` z3rkUh>ang^EHR{O{qXuf0aCCiKBO6^q=oP}->)2k_gb__Q zd~j$?WrCR-UhnyiV~nP#ajWgqst9V;OLX72-sd5+BaV-bMG%*%^D%~$q}Qlee|1+N z(HaRy#w@NdEh{BLsRx?Vq2cuIkTe(<`_hAIWAxo|e=g^t0IQ6^!h;&uyXLf4d!hYE zv*0HlF?4_smAr()gjJA)uc1jFacmoxEt;nfk zl|aiM?opZCg`48E!*^G*YKn$?W^;+Dpwl@!h<6xpKlF!`yb_1u`ywv*VzvO9+2u*L zAsLcq)lK`Y)9OstM~~hatAug0nK1ZEH^%6>biFpOae2=e1W?558|{vAyn_j2L;(SP zj;OJOw6Mp5xmp;uKSSBQ($#q-h4iHQ>HA=y!s8b_9KM>emHHoM7faWP$t7_c#Ee8lto@g*@x? z`G9`V(B3&p^Rh#ep9~eLdB6>?%Bb+LAe1 zz}n5R?UKvVK^tCLQqt8zz*>nlqqR%OoeSWIA6Cp*+b2#OlRJ+-?}uX1`wCe=r?1y zl~iT7SiPAH?Kh-TZB~9$pA{Z+;!5r|W@bbx)P#^mj}>o&S|gO!bC|dq|Fs>-@}u5o zC;m%|rgZ*ud;6Ee0b}Mht-0}S=FVA3z2mKe$~iF39lrKblcfAV7l>4RgnEbSfQ@QFO>Y+ zG)%FLRaVliX8E*;(6(3X1CIIMS^qr}AybCqS^wxPX-lj#ve41dNLa{Y1Jh%IOtE9O z8FVAg8AU-wPkVkzPf(QFn7K`bEX3HPIhkE$5~DH6hwa%jxmtRLD|vnQBp=BlNpi7} z2vHgfdD2w2Yqd}_BTDLxPf1H{B@b;^coq7KOWfpy45Vb1BE-4d+nfAdhBj648r}8` z`-`KM`PI(Ys@1^xh^v%4NO=3;JZa%89(&F_j18SQ)k;{686TDtQA$dOc#Ycs}BkdPSZlWLruwxWRnw)>;DaV?Yhmr?>Dr+frwA4^qf zO>z0h1ls~mCdv*xM#dyS;z1D+QPKX-fe>|w_riC^(9nf!^_4B{tkjqcu~}^Cx%!yl-t%(*a>}xMFR#{MZvBiY znEm;W&V1Ly(h?kuT6PKoIx4QxFGjXHu_KrQ3o>dA0C#T=qq3&&zp>{Dvzb?8lVY*6 zWbtk`yJ)TGLT<}nsM}?9(B*m^WN&BN2m^Dc=g;oSKrB_f-(&FT$TE*Uqz&R6;^N{E zb{Oj2Ay2Mf7`DwK^C@XrEK0nWLh*p$d~qipJ2$LQg8u1_00K0DzWl1Gd=0;JFy6;r z>-4O#q?5a+xN`SO4SuM1T{9gK0RwZrwiVx^+C)!(zp)95GqlkE5vZBN!;#-(jOZHS zvJs5(;Bivpaip3j5%a%j;>2@;Oicw1(tdE&F@3%TKHU6qokrkF}`F zAvF|_%{V3-AS6hroN+oE?c!WN-hy&Mo%b* zi!Q@uCk6sga^(a-0B6>fEb3U)nS?bpZY7i!qPn}g9CC>3t8c&49zaUr*hbTpdNW>P zH&5j0;n0D?{9f2VI%$s4Rb^z zkkyDIb`I)+&fBt9KVTye)Wb^k_t;xj0E9rxU_x_@kiUQT+@ZkkR{?{XuhlP>!cyXP zbNfl_E&xk%iTLA~UwEeQ*4)S>%&xe(5@+5Siz?;Q3iv5~`bY0#VjvMpi8)e-=jzNF(suH;#T3oAzeM&h45MGObtv1; zJBQQa6{JXZ7ZEPr)?m{aVKahB9GhLRo|ok5!^mi+BnYcfs30@h+^kR zfCHPt$!`H2ixVHiBn)m*?1JXiHNIX!_Ff@ z%9o&q>4-YMLgIwPOlxS)3J>V3hpi6x8L<%nf_*mhwHgYt(NMvAl+FW!3R zi};EKk`QD4iR4cm;)}n>y*)AZ5)OW9=86Qup|g>es^a}2`4t4`U}dBxr=WmH_W{Wp zC}h+(X(ndvTB*u6Nqw5oo;`0aXKMhZF(9sKZb=s;O*uIncM{WFtp^)~>Kyr?R4^~M zAP*0+l$gmdEsLLD0XN>+hILi=Pd zui~xOCo0KTKfj?=N%$y&+$c*tln2FLU=WE+uo)g^Ku_ecrH_Mw0asg2VV|7oBU(Ga&f3tA(7U1TJj9@ z;QxeTLV?r)VZ6I#Oi-B{$2G@D>hT*T_;IC%U`v*CqcIjlXZE!)Y}{=b@;K?dc@~t^ z;mYEGxfIE)P4i@XHbSUGvPEA3%0$URJ3_c%t!{k;QJBmT!Z>rSIk+HR5=A8sr-gv#*>c6`(F`M$`VH+sgnmvl+&%i3V)7^ z9=55Nt(GF$_LTH~S&fCF59QaD;Efk1N?tx^=8hN3aS%i(9MdzJOOekME}EBFn{b3m z6f{V+gv-<{t8c3ijubc1XXtsc<(yjhZj-p4w#Ls3Hz}N$BAQ1lNKVT~wS!;^!~J>_ zZ%|aJpEZABE9#2CV9GQaBnTBSgq(H`mWsuAZz=CLdr=cWB*7Ui>9Fc5nIvi;FY%Ch5kUb<*WM=E9rl}dfLuES%+pis(44~zakp|wz83~n!4 zRk)0W5=iR?h9naqEN%6UdI8)2A?^dg_WuwA|ImlPsxX8IGcFBOIAJ?+15ZF7I~Sz1+;L{hjiExla>X=&Q?5V+p*Gyb! z)Q&q;U;jxI(o*&MblpAatox$q85r!A1258PY5!y6^QxhulH9!cL-uwM;m7&s%W1WW zXG@j9(_D1)Eogn33@?u7-U!bFz*XRD?hCP9kt)A+qXw(QQLvliRCFi)1byGdrXeWyOlh z7lb-@Z&juInon6PO<}No^}X~JMLIR5Pzl18l~X3HMWHwWBUU7{y@5Y!(D0ZBP7^z3 z>L)=L7uBvp_nCgB)9OBggOEO5IR4!SZ(*MxXA`i}%09P!+ZkBLh}i<28v;~f9@82& zF*44$SW&9ga9p802z_$jsIgd&o-8Fo$=+94z8w4N-)aFvyAVie1KvOr^f7I2-r|PC zRyK6-`c(828L+OIuAhFTmAqlni6xN$z^|9o<eXhX% z#GeIt?v{4(JdmP+M)p!PLXeg0)trc3Lik(Y?fU8%N}HJUWx=kIn%9?5-Pu@3J2@x$ zJVz%l1{*Og_S@V^d=p9g1N)=;2aTnT8Su6uY~^E1$u361#ehD!g%6rhh+jo}h!jyn z259>GhWlB*6>y5rSyJt+;To4d#ujx^*WoD!AZ`H2^DX~*kaq{ zklfibtJ-RD{Yg`t=G(^IW^*XGpLd&|ZoqoEb0%)p;(@~DyPDrQbOl!y!;Ykm`a3HXz4^Ofj=;-t6?zyL;+*OaomLZHidzqjgL3)e8K zY{N$U4ZwK?rUruXvudQmiX@$N3lV>10CRLDlLI0ug{{5o*?owwyY4Z|8b2hedWG9K z<(a`rZ`PS40&gm=`0-FEYpeBGw<&4yW->{0n!iDA^bssSrp#Gt{-ruJ3^&B~RXFVx z|JLgmGtPtcIoUZgY@&_LV;rVJCh6l)VvBIN~C+=2OU8PAr-KRw@Gn|`-` z)Ce%X4A$XQ8mwBUvi?5)-ABfDJ6X)%A;I?Z`mTLg!cy&ivi1#9FZi=4h8h>i_EujZ z+uP(gPh`nKil+npzf_ZL%w)ArPc~Ed&i9YG&!jStMig}Sa~|4&cM`^um3`L4zq5?-z+(NR_pHhMrGs%*KG0a!B!RNdTq<~=n_|2 z)VrKt7!`jsL_D`gb1?M5M-~L+LJvup@jG?7r~Uo|W5D~(xc)c? z1wt&1+7@cAKHd&5@xe_e6V=J@E34TW50y3|JGC{02cD;Ho}1UyPD`M+0xUDREfm6^ z`+GuwrK6)`(|v1bpK%HN{4spk(#(u(Y)bf+@u)%o{9C-bdRY_>H(+iJSok+G{86Zw zX;HaKr#AjH!}!tI%ZnUxLALWCHP{!Tv0^j&0rZDl(A&qnlg1=dV?zQ8Dp`bs5bL>p zf{+cQcm-(nW(uw&dxf0DW7xD&^LMKcKnJ8!EN&}HAu`sb{iF}3_PSym*4@-lG#+66 zX(#H*|E2D1;WYX>vTAi5LeU|->ytUmQF(2LC8{q^oagSr>+|-~xk$#P>j}W$-p6Nh zdk==_9A?Rws)SM5xBcCfLT zf>hB0caTXXaPaOM1=I-#llyAYR5LSku6db+nfyj275|X!$ja-*>t(-m8O?j%7hFM8 zOwtH0oS%pp@&;-56xGi4cn|uP;Bwp8T^KL`adph=A(d&f=7lB~Xh^R{RU4h4K*ni_ z%ms%Jfiq$_o##HTD>Zzgz@N-~k#hfHwp1nE5POuJIF)gnbP1K&ES+M9CUQsjd|%5p+EoFv-f*4v-;Av@L%b* zXE@{kKv!s^3AROJf_jXWFjJD>OJht{04Vud{ZJ1S#7OMX9p#ddaZzQnM2R0z5gQo3 zozQXyQa>tq!8SoZ)i7j0oGp_10iQh|M=^D(qOimYCU)#r!m+(;ZssgyymaAX&8;qc z?P9RP&j^XKCH5^Efr9Yhk}Bx2#5wX`f1!IWOc?Ohv7!UQDstpZpN|iJs%_vB1oXwbS4k#BqXH9cD_X;_R*pJFhVsy8 zF!)cRVMRv6VY2eO^3akGmmnL(`q%K4ZZh5`N-EfLW z@|R%zT-9$Mwp!HTnqgQ!CossuCqRQ~;>8cNiTtqV>B)@JELybhjd=yCyiNy9-YJH> zx?~}+h<*#G^e-kSM&?VAQH6eWqVa&|7B)oH*2F{C28 zR7Y`YnGz+7liZ424%m3c@uTUk7DeIoppDS`eigv7x+|{k+wOxxVMAvVxZf`&Vn3?PllZ5`^J0)+FqNdIym?WT5u1i-)mn^ zG~bg@mrGX1D|9ARd4WbiUobwxU`K=q<83U4>{IsY=qP04qa$yHTiN_ws3BQ6oBaG( z21-KDKIK}jRp7`E+Qgvs0(WeoMtCY{Z&$5%c^qrJUs2h+b2Y+~Een3TK^RGOKCG(3 z8ViehiUtGCx(aibgSA6#qCf37A-4&jy~M)OpHLT}u54{hU4#53B@5FWbCx<2Hmnl~ zp^<=eh}wuanc2z7u^^Auoz3SbS6poDh*9)6cxlE%;RKkt(8|Ldi5GS88}%z3!~h!4 zz`-}_urT)JdA__uMdtgvdCU6xGZYH>U#A6y?QBi8C49WiQ8dU!X(}&|F(t`F z+&cM7h3-DQ9rfip;@F%SS=+0BV9U<~Qq4I~SM!X)1FpIU^ocr?l1*5v%nx{ z7oI;G*<%i~FK|wXWSo>WLN6FeQZ8F2!ePTr0XxZQgUq5CW_7gCwq}y*Pp9hbH^zh1 z@Nl0g(3DkEl9La&rji^Ki_sDr$s#{NV!_?L#ex+I4GyKaL-FFpB?XFWa4i9fyStSBLeKY{``r6H_rLqk&3~JBcHY^Y z-FJ3(c0M!cgwIwa{oEY$2W2TGqjC<#j~x1(oUap0$6Up3IYl-)EIFrwCize>;%lkT zdas4XQiPo-WdwVWvXrC&D7iV?*`*;ny%=25^>NZh#J-^p-`O&{7Vk52gs7Z2SW!NC zir3D=k^AZR^l&vqHBEmEjG?cHM)k}gT9dM ztz`Z@9LM4aR*J5=b-d#MCZ+cN%eb$%4}(8}b%RC&+X5B7iOtD{%nV6>u>kd<=_)&(>R6&&%iHL1Olr@Tmn&*s zIGlT<`ACtVZ)Me@U?I|w{qR0cd-6_2vYAcs4>G4yJ#-(xAYrtAhL* zfj(Ovw|XaK(G3VfyJ=9Ug^YCl(t5hz2au;A5xVNeW~P_Ia(PoKQF@V_Iake=`8?y|F&Ez`#d18G{ zR;VI+qer8mvp7MeG0)Ido2ATBQc|L7oA&KjY5<_HHg@Lg>CeQv)k})Xbhjk~MGZnW z;buctvQ&JKM-9C|1<8LLYn@N=A)*c>3@(qzx2)V|$}&xp#tQxI0k>Lrsf}djjm9zNOKg$-@5cL=?R`bn6kc(KPN67qd z@IE9B$@_C^c|Sv@;Z{A#x;`+x*AlO{gO$qUp~;TQTx|{tyn>sk}ybdu`X$AXWJ7uw{^-MRao)CnZR)(3fY2)~^Rvb)$3``VZs zEkt8q5dp>Q0f{-5s(CfB*s`l}>c2!?yi+oV+fU5oktr%=^v~DN?B)exkeD8!wxq|O z3~|3z{r7CMCG>DQoKcj2+d$q-g0iuEdphh@#YKM)sd80Kr}88J^?n@{FEd%8fALq5 zVt@RgBiMQ5`|Qp5NG+juOQd86M|sv^`03OC9-Q7L$^fpA{};HBOFAhZUGac@@#fXl zqe+pu8pR^wKbI$SyLEvi;S*wx>R96#^Q0fI!y7GiBE`&q+r1U$WOdg_dCeMA((J1^ zq&>j_A%Uum^Aihhdllr7W+)~FLdU;~?e3N616!rtm}1sj4zjM2PkY`kABX}72MwcM{DHQNnh2`}pV>1C zy^GW={$)b#2V+t&^LS9|#r;+-;nEON}#xGodE&C<+-SrrA#U1J(So{{aY)4?CP z-k3iYi9jmIkmN)43}l;QxF>V2M2eu%>-J?oWFS7acu{3)h8%6tnC>nS9dj*s3Wsxm{Zl~B$8r!-xQfX#VsKjMC{%HXimJgBy4w|yt(;vmJA6j`x zcz)!v#=#sOZS;(*!H#`V5w<&{@JX6xvQS<&K}rvsr3#W^jzJ3*pa-tj-vsc%c0G;as%bg}vq_Z}|%a zi-Ow{--1Wfo7x$P<%On46bR<8Fpl9U9n>qTC01#XPK(A_j@V3_wKuPeLq#YIStD#L zjs^OEs1q1Qe+`sgVTu}J_v{zENhkrLM znk|hgXEaL=3}n@EmJqi2AR!`4{);tkwD`_w`3pLn`h%_Yz`xi-9~B*{iwZZ#v`zgK z5cA`uX#`i4WGQOTAxZForZ*2_n6)anlBrC#xU#=uwoJ4}?JW+O?36w$)1-(a4kJ;m zn)R{M#m!hZAolZl;%7{qQ088#fZ`<9c%oA~yH8LYDXrr%(ooYFGSa11@2(PrGg7yq zY~~gInGG}Qc|RGUb{%1!owN=yelCw}LR7RD4dsdbfANDl>q$Uk0wOYb*c8gODvt{m zg3|Kb!_o~NRx1F0zAZK3TOL~-Og+EyWk}${x`RCf5C5kEk4K}N?RT%nLW#T}nNYeXoNOPbG=sGs zI;yh{G8Ytu42m1e^=Npl@vm+!j=uWQH!({s7NV48pfVny?eb#BCzKyX%JeQdJb~eY zC7wTy*F64ZiUK@$U3RVr)mW=*!*3O| ztiq+Q@-Gji_1*%z_Kl)VC3C)7^|@C`a=D=kg@eEK{u>h7sEDs8GWYJTgFrCleZxmp zv+<$HH@V)=8l~+pWq|Xq@F)no1%a}xC|vSmhZz(u#_{+ZiH4g1*Y}WjEU@%EfxPKo z4Bne`PBhrs5>I6$bhmeMg0;hA&1_`OKL5=7VGwSx$6SmrY=; zhERx}PT?E#=>{1am69Lps(oB_l``}TM~aHup`l7iRMIiIKjpW~7278+WaLK~JzP;- z(ywj4iTa3yb}19bv;#JizG^jj$&fAdly5Q@;9-GfEi(ySuW)p-mwY(eXX&x`NUeqN z!+V=9p~bK1#MC+>x9N7BOoStY17AT5B%WL9(D61Mi@u8yFFiqORzmgRRyVo5zv<&X zGkw}O#W;U=#-%;Y!;&1wH|}z?#HH#rugU6Khs_jM{XH@95{Oj zJ{Y<=z?d-;ZKfcrNstGrlI_ZdoLf+piHC;yzvr7T~W<9$Pp&tBxKc)cx ztPQLd?oHeM`RM((7VL~Zg2qC75&z!QPZ7E&LgP~1$3C|YQlg0h|1tWe>o{nlSO47H z;yFPFl~>XIVCEeLIgfzyK$2)0CoRdEf#s9dS z`VV(Gb_MPboIqb9A?&;Nyl%fnUFXw|-)7Rv1*0$x$^evM;fEi!vgefgMajTHDO=JY zO01opPB0Ts>)E}e@F&2fVESuo-S~>}9`>EII81v&O#78%dp@O|)YLReinIxesCt^! z^)48`2dl$XLc>f1a?jTsF+$~6)0B{V5IZ-f@zgb<8xemleCE%XK`@`6Q$VtYa&abF z-^>|mVpnPY^rhfB=lVXS_rLoK4OMgp`|(;?l(V6RDX+$hnG`E+Xk*fq5!1PucDbrP z*vY_E%zl5d-+jsC)7e+$)@@_eyUCM3a|pam=KaUfD}Bw#7MPFoVxp2@Um{{)f6d7i zQIFV4t5cBwuuAugF0JT&!uM%$;nYl(J;vIK`sc!kNKui67!&t4d1)pYe zC9qv+_z&Cr}3zWlc8U8|zM;o-P7-PKJ0EmE z>PN8b^qPDlcOKTg931z*J~*S&_dXxO`!pGCB>gU4Az@To)Jf0FI9dw2 z5Z8LOHRl5+53g(;0)R#WGl5*nyJ>MV0-}vuD-lR*dvERhDK3@rt4*oN?+x46F9W2q zC$`R7W^-rG+EqQW0Q1*fA7*dHm(@>UXuol-`-!1bG;{*OA>@JEFi%shhmuVHx%L4${STeOL1I36$L(7`F%woSLR@tFe$?sVOPgTpXW-LL%R5BvPsr5S zpL9-*T7$a7KH5+7#S`1D40UPvoy~PU<9k|NxYRYKvOG-L%jFnrkW7@JS;7csm}M>MHPCc`^#P?p_nKLC>A2vt9r@eVsUEeH>{U6&16_ z*>$``dM9tuNtNTD@1kUI)RnYe9$vm<8A?=HcAH$>G?SVsMecRg_4}5iB_`cJ3rCKP z;aodfOl-rGRoZKu*@X@+iA5pRKp%B7@#?&g{5>tR(3(fzaesxuU_ZIInZ_7<`P8*l zbUQcBVv@lyr!amxI`>XpLTw(`^(`$23Hx(lwUIt-y+%Z8mttRkjl3uc*IiyicvmEz zVWsF4t8-QhR}@E1;l;p(_S|Wp?w{YcMVid)+_x+4qk3M8+SOUA4F)BAE*_khrRP5< zvD9SNmr6b&mR-nP&WHS0g}Aj&i@O~`T|lct!tRS++gl83woGiqL3wJ&<<(yb87TEc#a>Fn6hk>ES2F;ZQ`KdR@ z723uu!YP#CvuZ+1#hq)M6W9h+meKHX&zu$rii7}u+c>+pZ6!QWvI-L1gjQsx@SDgh zF5I5fPbU@cQq~QM7#dzLU3ZLHPM^zIg5?Yk@M?2rpaDwDysfy1rmv8!WFZiirn4=i94e9lTL zpZV?(Fl!oWbVQ=$aIQmaJm|Y_q97rR-$KoB(d_@H&6qT^F0x)#g%>Wd@T!0-55h~( zj?S`7+K!oGvLF|+l2SxV#ldEpk6d{3&GjJFoU=Fvh=KHa9_P#&$Fhj|GkIL&&vn%d zf!RSP%trIiRq;jDN&;|7MghLcL3fmJW@`Nx}~wiQpVXs#+G-DoE`-mea|J5DyQv z>I<-M&(OXqQ4;Q~a$ay3F*=*09WoT!{j=a5BK&n|{tTkfdO(<;vLQs`*55oJ-lf)~ zB-|0PUQt&;FZIIx$cxW+J#p;-U1(S?6CmLGvWN}pizU6@I#DtYE_nv)v5g7g^tzh< zb7GX%zOL`?vnT?el^R#FwhL?16mg=Is&(C|(<;GrlF(r&f1~tL?{YNI3tSa66$9il zl+Qd3`j)#r%VZr2OdO~I7nVnAQv_-w2Z=uWq+dnGjYm&yOss!zytxfoY7~}{v)&iy z7phE~(Jbe2Tom^2w+_p_uyuled+C0j*&dTyumH>yduL+YJcbA+6Owx2uRnAKTtC<3 zM$t&PbPuFcf_y=YiwM7!JI;;cahP^&kL|%gHXk*rb$KKDw=L;M*Ar$q&_+rh@I-GQ z+is|hZK&I2sL932w@|FcNS?!2Z>%-%>%kNdnmJFV(Rap$wX=NZ7n;3^5VP* zfMc^(aM>8WRfkT^!j%!J2(zQoubrhchlU{QiY8Rk;TPQ=GcIQ8tJ^(ZsZF+*wJfJ@ zRiAy_ooyVTsH=oDjXt~f`L{ap`1VHcPy4h>(6Ca>Fpmo9Eu)w&~Gl@2jzB?R3ROm>_dr<_ud#i^FU{;Pq~akW_Lkp{V0tCicrKRRmth z-s)DA#8uZpXvM~6Avztl6rkn{C!8TiKLk>boqxd=3UsQVLFoxJ*p-S)#X)S{Fa6|E zkTi8mHy;#6tvY?o*HfrjhHfrhl7OsP;Cv}lB9lwh1-3^ugr0ni3|pjjYR|(?>*vy+ zs?9NbfzCxpiJAz%MV;>2s+UFL&h(@BMoK=9mZSBWcHBkCRl~kJU|_Wy^-yc}ZNB2; zex>E5`aHE+?jr$WJD<@nfvCKy4LrO4&_2HR9`!svk{QEVaUrx?bxO_4gHCDzy_A%4 zysF)F#(iePw4ZskaF^R%n}Sm2W7CZG+km!;t1ag5^Ud6$^*kl2vZx`xq5_jk3?e)N zQue`Bg8G04EsEf=R|||ZUX=aB>tZbdHqt4YN<&*QiLu;s?}&~pW~rFoMJ2s%(au?i zGNZHAEtL(I&y(i<(i=Ld_+G_VJLxlx5&=qmdGZ?+X`AF&MuTln%x$(DXC%L0|J(ulksd8Wijl7}5@7E)9WJBa$B|22 zmIeP_w(QQnP2|O6gM11AKH}WO13jh-2Xz8!?n~(RJ(LRNU6(|ERnTl6fI7)s@2xd@ zYJ32iMGD``BL(1>1n_oKp`SkjJ*J?8lbPe9pQEee0Hq>%pQ5#nu8si!btnG|Z6MIq z{{;t{5B{I*FT~)`l3JWcnQezr(Whi!xFLO!v*2U4>^GY?P7S!A#}YqiKqDrDz(*)d zbm8AD(dmc-Y5&cUMGDY{_g7vt4l(@K)4$@PF_)wc(XT^Gi$+`pT|WFPEPC$(ynXOj zR`ens;D>&Q78Sjb_}|zne*iX7(Tr+E&uxi5dx$3g%d1Ix)5D95UA%|pSksvSatUp> z2>FNiJZR$73-WuA@chHZX)aCmSUmx=C>;1#FdLlgf&D)3kkT)(c#h{VAnW)UlvHT` z*68f5F}f-D0)3bQx*Uu5`27m=P2OD$TJ&lE)5YL?;z$uUphiZ(Z#_;veaNe+b~L*8 ztaJ&-{9BP%DKy~VF-m{GdyqO>;`lJYpbov_{-+^dxZ%*UjZ^Mk>bB6V*yjwvc%Qp} zSM-?DEQn#GeQNbI?p$)TzfoRgx0jV-S*hbo8DuU`H&{Q#dD~=PQJ2KHpMl`WEBfdR zW+`S*UQ5uTVD|#O_W-1frww%jB$Mt*{$*u4%l?urQR{i>j~3c1fefS~Zhr(SP0onQ=v= z&|@+=>!wOB@>0S_(=cRaiX zY0maMqy#Zy*OGAf?I7(ypQ09|aZld#qO7w#y&?7Cx7Um0QUIcP5S;jlb@@@RwR*aA zDb|y-P6k67#J1gyq=BM^QQ3^+>VbrNFqlPAK5Vd2F`Wo5o4K_S=E5%0*V7q(S0mfp zl%zW{kwWDD%I0~NBX4RdrM^s4OK=6DM%txF9Qwk=jnOCT$=-+=l>M3|L6SbQEUIWd zCL^v|gUhgw-BQ=Bf6$K0s}f^rsd{6DP=krt?a)t34nXX<3L1&o&A6&91h)~M%|r=w zLfx~RkKHZRc9x617A%iyJ5{A3ygESq&vrvPA$)J!GtnjEtU^lzzW2T^1c0E**&}s2&EGXB|i|RN@j7O?%^+ zdP?i06H{l9)U!6qTHDcp;WW*MI$Q%P@sObfB7z0R5%0+U-#uXwDkLI??`s=_GF&VU z@6c_f#GSWU*ppR?M>h{zz2NuzSHaxc2qgyuG3mfS+oP)@Qma=cpc9Jph?w2~UEqO; z@-Az$sU<^qNwekcJkezxs^6+gxeyXN{h=ZXv)r@c1%W6b`kaBBunGV0KF_ zC$D%Wd#r`_X=p0@g(1h5$r>SOuxOK@Uh_by5jCqL3FqN0S=G}|i=RvD9vjeC)UXo; z#|{x!>8JW!Cp4{hcVAEJxX$nF;Om+2i-Sw>)pl zAZea8t+uhG=otB&Jd;=5MC}nV8736@eR$;5j2z%_-*tt+N4~26uS^ZU6CeXpNVLx` zGJiOSugv(5-Rj24o^?PY+1*?m{CTGAQ1SgZTrq#lh93=!)JZMG-t?!@-|gC(2=?j3 zNaCL=U*TwA;DdQ|SZVUi-EmSY@Fo!BV;g0=&?lI&MUhCz;Dxtx^d{1N(z8|HsfQNi zCjH~&J-flZ`GQflKSjeZEeO;He+xE0TnM|EDBXN{EscgnM9}>rkCI&!>f}M2 zv!*$qpn$-Y;1Bpw2kjlth&13W`(G>f{2?4@g8kPdKpxd&EhW%6$}9fqx7ddipe~NQ z7BdEz)N%Y@F1iCi%5VNlX6jylE*~?q{ z1C=2?79~#Qj=xHY;8((|I%NFEr^iabzoP><+j&hd~tc_I~HXNg_tHlp{2 z6=}*&j}=_-nhwqbLXTH`sTa>sUeRw@$7!tDEHT%bI@>MVg3rn61EU1bwV>MC^_M1}JZ%kH4ID9%_(fFR z;-nZYTtu`Ln&0t10o&pKG>m55KYU!VY8IU&tcjddVjJcEpor-~I*%JHrCR?Q zVNq88UkbwMF{z2=j(ztcof$D__O2HPx2$W;r7;0R&N$>nw#YZ5@7G zm@ULCuv;Ed_aa!eN!%kX?nM!AoGMc)ay4jX53(G|R(lY-4dR^=R@Y? z`@!b{I$a18TJlh6m0v3BC1K@U?66ljDppJWf}U!dPSOBEk~5%RD^Tk19{^A~zZ1@q zGpzR7T6q)b;qGoolV4L4e@Ssw*OnKIR{Kiuh*foMeSP(;gBi23g^G$wr??C->~$x# zHLS@IR|01mdEns-{wXEzdvlLvvol?>=stgQ&`L{0v^s|!M}f9|_^p!fl^$GRQ-j

ydc4;zx{?BUKiSEwxCY8^p+kOs1m8r+N+SyZT$ET%&b1l`(XPq0T zoerE@9qD))4KC0qG$u7qef|IS;K5@?IPk%PN9eA5@Zcd1=<$OOAJD3JAc^jmhY#q! wfZz`v0MREz4;}z)03b9u|Nr;o$vr23oLg9v<1iRLK0yBzWFW80rAz|<2Ps;`JOBUy literal 0 HcmV?d00001 diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 8d8825e432..d7f650f6cc 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -1,6 +1,6 @@ --- -title: Get started with Windows Analytics (Windows 10) -description: Configure Windows Analytics in OMS to enable use of Update Compliance, Upgrade Readiness, and Device Health. +title: Enrolling devices in Windows Analytics (Windows 10) +description: Enroll devices to enable use of Update Compliance, Upgrade Readiness, and Device Health in Windows Analytics. keywords: windows analytics, oms, operations management suite, prerequisites, requirements, updates, upgrades, log analytics, health ms.prod: w10 ms.mktglfcycl: deploy @@ -8,36 +8,50 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/06/2018 +ms.date: 03/08/2018 --- -# Get started with Windows Analytics +# Enrolling devices in Windows Analytics -The three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) have common prerequisites and configuration steps. +If you have not already done so, consult the topics for any of the three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) you intend to use and follow the steps there to add the solutions to Microsoft Operations Management Suite. ->[!NOTE] ->The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. +- [Get started with Device Health](device-health-get-started.md) +- [Get started with Update Compliance](update-compliance-get-started.md) +- [Get started with Upgrade Readiness](../upgrade/upgrade-readiness-get-started.md) + +If you've already done that, you're ready to enroll your devices in Windows Analytics by following these steps: -## Prerequisites -[DO WE HAVE WA PREREQUISITES TO LIST HERE?] ## Deploy your Commercial ID to your Windows 10 devices and enable data sharing In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. You can use either Group Policy or Mobile Device Management (MDM) to deploy your Commercial ID. -### Copy your commercial ID key +### Copy your Commercial ID key -Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. +Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. -1. On the **Settings** dashboard, navigate to the **Windows telemetry** panel. +1. On the **Settings** dashboard, navigate to the **Windows Telemetry** panel under **Connected Sources** . - ![Operations Management Suite dialog showing settings icon (a gear) in the title bar indicated by a red box.](../images/upgrade-analytics-settings.png) + ![Operations Management Suite Settings dialog showing Connected sources and Windows telemetry selected and the commercial ID location marked by a black box in the lower right.](images/WA-device-enrollment.png) -2. On the **Connected Sources** tab, navigate to the Windows telemetry panel. +2. Copy your Commercial ID (which should already be populated). - >**Important**
Regenerate a commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. + >**Important**
Regenerate a Commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. + +### Deploy your Commercial ID to your Windows 10 devices and set the diagnostic data level + +There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). + +- Using Group Policy

+ Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. + 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** + 2. Double-click **Configure the Commercial ID** + 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

+ +- Using Microsoft Mobile Device Management (MDM)

+Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. You can find more information on deployment using MDM at the [DMClient Configuration Service Provider topic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   @@ -51,15 +65,12 @@ To enable data sharing, configure your proxy sever to whitelist the following en | `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | -| `https://v10.events.data.microsoft.com` | New telemetry endpoint for Windows 10, version 1803| +| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | ->[!IMPORTANT] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Configuring endpoint access with proxy servers** section for options. ->[!NOTE] ->The compatibility update runs under the device's system account. + #### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: @@ -68,65 +79,7 @@ If your organization uses proxy server authentication for outbound traffic, use - **User proxy authentication:** Alternatively, you can configure devices on the user side. First, update the devices to Windows 10, version 1703 or later. Then, ensure that users of the devices have proxy permission to reach the diagnostic data endpoints. This requires that the devices have console users with proxy permissions, so you couldn't use this method with headless devices. - **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. -### Test data sharing -Devices must be able to reach the endpoints specified in the "Enable data sharing" section of this topic, so it's worth taking some time now to verify that they are reachable. -Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. - -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). - -To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: - -```powershell - -$endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'v10.events.data.microsoft.com' - ) - -$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded - -``` - -If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. - -To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: - -```powershell - -[scriptblock]$accessTest = { - $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'v10.events.data.microsoft.com' - ) - - $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded -} - -$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" -$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" -$accessTest.ToString() > $scriptFullPath -$null > $outputFileFullPath -$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" -$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) -$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force -Start-Sleep -Seconds 120 -Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false -Get-Content $outputFileFullPath - -``` - -As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. ## Deploy the compatibility update and related updates @@ -140,7 +93,10 @@ The compatibility update scans your devices and enables application usage tracki | Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | >[!IMPORTANT] ->Restart computers after you install the compatibility updates for the first time. +>Restart devices after you install the compatibility updates for the first time. + +>[!NOTE] +>The compatibility update runs under the device's system account. If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. @@ -152,7 +108,7 @@ If you are planning to enable IE Site Discovery in Upgrade Readiness, you will n You can use the Upgrade Readiness deployment script to automate and verify your deployment. We always recommend manually running this script on a few representative devices to verify things are properly configured and the device can connect to the diagnostic data endpoints. Make sure to run the pilot version of the script, which will provide extra diagnostics. -See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. +See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. From 69402bbf8ebf26ce79488d9cb16ddc21316adde8 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:02:15 -0800 Subject: [PATCH 08/32] testing intratopic links --- .../windows-analytics-FAQ-troubleshooting.md | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index a6c6ab8647..ac9b497002 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/07/2018 +ms.date: 03/09/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -19,7 +19,18 @@ This topic compiles the most common issues encountered with configuring and usin If you've followed the steps in the [Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -Devices not showing up(#Devices not showing up) +Devices not showing up(#Devices-not-showing-up) + +Device Health data not appearing(#Device-Health-data-not-appearing) + +Upgrade Readiness reports outdated updates(#Upgrade-Readiness-reports-outdated-updates) + +Upgrade Readiness reports incomplete inventory(#Upgrade-Readiness-reports-incomplete-inventory) + +Upgrade Readiness doesn't show app inventory data on some devices(#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) + +Upgrade Readiness doesn't show IE site discovery data from some devices(#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) + ### Devices not showing up @@ -30,7 +41,7 @@ Even though devices can take 2-3 days after enrollment to show up due to latency If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). [MERGE WHAT EXACTLY FROM WHERE?] - In the collected logs, the filename with a GUID has clear text that can be read to uncover common issues, so it's worth checking these logs prior to opening a support ticket. -- If you think the issue might be related a network proxy, check the endpoint connectivity[INTERNAL LINK]. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] +- If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] ### Device Health data not appearing From df5352cd83ec4c6ffda5a16f67aef3b2b5aeb576 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:18:17 -0800 Subject: [PATCH 09/32] tweaking TOC --- windows/deployment/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index de56d4d613..42da0786c7 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -229,7 +229,7 @@ #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) -## [Windows Analytics] +## Windows Analytics ### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) @@ -254,6 +254,7 @@ ### [Device Health](update/device-health-monitor.md) #### [Get started with Device Health](update/device-health-get-started.md) #### [Using Device Health](update/device-health-using.md) +### [Troubleshooting Windows Analytics and FAQ](windows-analytics-FAQ-troubleshooting.md) ## [Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) From 29b5f025a8a2a716b8592070e9efe8e62dda52dd Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:37:20 -0800 Subject: [PATCH 10/32] fix TOC error --- windows/deployment/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 42da0786c7..e2008ee5b6 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -254,7 +254,7 @@ ### [Device Health](update/device-health-monitor.md) #### [Get started with Device Health](update/device-health-get-started.md) #### [Using Device Health](update/device-health-using.md) -### [Troubleshooting Windows Analytics and FAQ](windows-analytics-FAQ-troubleshooting.md) +### [Troubleshooting Windows Analytics and FAQ](update/windows-analytics-FAQ-troubleshooting.md) ## [Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) From 7c570be73f764be271c5de5c534ac9c7ac88025b Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:59:02 -0800 Subject: [PATCH 11/32] still fixing internal links --- .../windows-analytics-FAQ-troubleshooting.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index ac9b497002..903e8b32d5 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -17,19 +17,19 @@ This topic compiles the most common issues encountered with configuring and usin ## Troubleshooting common problems -If you've followed the steps in the [Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. +If you've followed the steps in the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -Devices not showing up(#Devices-not-showing-up) +[Devices not showing up](#Devices-not-showing-up) -Device Health data not appearing(#Device-Health-data-not-appearing) +[Device Health data not appearing](#Device-Health-data-not-appearing) -Upgrade Readiness reports outdated updates(#Upgrade-Readiness-reports-outdated-updates) +[Upgrade Readiness reports outdated updates](#Upgrade-Readiness-reports-outdated-updates) -Upgrade Readiness reports incomplete inventory(#Upgrade-Readiness-reports-incomplete-inventory) +[Upgrade Readiness reports incomplete inventory](#Upgrade-Readiness-reports-incomplete-inventory) -Upgrade Readiness doesn't show app inventory data on some devices(#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) +[Upgrade Readiness doesn't show app inventory data on some devices](#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) -Upgrade Readiness doesn't show IE site discovery data from some devices(#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) +[Upgrade Readiness doesn't show IE site discovery data from some devices](#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) ### Devices not showing up From 23fca603011f3117eb0edd369732d00a69d4f37b Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 12:46:29 -0800 Subject: [PATCH 12/32] still trying to fix internal links --- .../windows-analytics-FAQ-troubleshooting.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 903e8b32d5..f39c74c83f 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -19,17 +19,17 @@ This topic compiles the most common issues encountered with configuring and usin If you've followed the steps in the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -[Devices not showing up](#Devices-not-showing-up) +[Devices not showing up](#devices-not-showing-up) -[Device Health data not appearing](#Device-Health-data-not-appearing) +[Device Health data not appearing](#device-health-data-not-appearing) -[Upgrade Readiness reports outdated updates](#Upgrade-Readiness-reports-outdated-updates) +[Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates) -[Upgrade Readiness reports incomplete inventory](#Upgrade-Readiness-reports-incomplete-inventory) +[Upgrade Readiness reports incomplete inventory](#upgrade-readiness-reports-incomplete-inventory) -[Upgrade Readiness doesn't show app inventory data on some devices](#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) +[Upgrade Readiness doesn't show app inventory data on some devices](#upgrade-readiness-doesn't-show-app-inventory-data-on-some-devices) -[Upgrade Readiness doesn't show IE site discovery data from some devices](#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) +[Upgrade Readiness doesn't show IE site discovery data from some devices](#upgrade-readiness-doesn't-show-ie-site-discovery-data-from-some-devices) ### Devices not showing up @@ -58,7 +58,7 @@ If you need further information on Windows Error Reporting (WER) settings, see W #### Endpoint connectivity -Devices must be able to reach the endpoints specified in (windows-analytics-get-started.md). +Devices must be able to reach the endpoints specified in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. From 1373401dff3a66eb05b724fe65baffb310b4a535 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 13:25:06 -0800 Subject: [PATCH 13/32] still fixing internal links --- .../update/windows-analytics-FAQ-troubleshooting.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index f39c74c83f..608d68218f 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -27,9 +27,9 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Upgrade Readiness reports incomplete inventory](#upgrade-readiness-reports-incomplete-inventory) -[Upgrade Readiness doesn't show app inventory data on some devices](#upgrade-readiness-doesn't-show-app-inventory-data-on-some-devices) +[Upgrade Readiness doesn't show app inventory data on some devices](#upgrade-readiness-doesnt-show-app-inventory-data-on-some-devices) -[Upgrade Readiness doesn't show IE site discovery data from some devices](#upgrade-readiness-doesn't-show-ie-site-discovery-data-from-some-devices) +[Upgrade Readiness doesn't show IE site discovery data from some devices](#upgrade-readiness-doesnt-show-ie-site-discovery-data-from-some-devices) ### Devices not showing up From 308427bd6305effb7a8216557dbdd2622c70dc5f Mon Sep 17 00:00:00 2001 From: jaimeo Date: Mon, 12 Mar 2018 09:39:23 -0700 Subject: [PATCH 14/32] readded enrolling topic to TOC --- windows/deployment/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index b7322887c4..11c73b9a7d 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -230,6 +230,7 @@ ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) ## [Windows Analytics](update/windows-analytics-overview.md) +### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) From f2e5b3b110f420d7376626856b52cc1dcfd149f2 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 10:57:06 -0700 Subject: [PATCH 15/32] latest updates from Marc's response --- .../windows-analytics-FAQ-troubleshooting.md | 45 +++++++++++++++---- 1 file changed, 36 insertions(+), 9 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 608d68218f..074e39dafe 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/09/2018 +ms.date: 03/14/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -38,10 +38,19 @@ In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. -If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). [MERGE WHAT EXACTLY FROM WHERE?] +If devices are not showing up as expected, find a representative device and follow these steps to rerun the latest Upgrade Readiness deployment script on it to troubleshoot issues: -- In the collected logs, the filename with a GUID has clear text that can be read to uncover common issues, so it's worth checking these logs prior to opening a support ticket. -- If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] +1. Download and extract the [Upgrade Readiness Deployment Script](https://www.microsoft.com/download/details.aspx?id=53327). Ensure that the **Pilot/Diagnostics** folder is included. +2. Edit the script as described in [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md). +3. Check that `isVerboseLogging` is set to `$true`. +4. Run the script again. Log files will be saved to the directory specified in the script. +5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully. The filename with a GUID has clear text that can be read to uncover common issues. +6. If you are still seeing errors you can't diagnose, then consider open a support case with Microsoft Support through your regular channel and provide this information. + +If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally (you might not need verbose logging in this case, unless you plan to collect the log files). + + +If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. ### Device Health data not appearing @@ -144,9 +153,9 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that ### What are the requirements and costs for Windows Analytics solutions? | Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements | |----------------------|-----------------------------------|------------------------------|------------------------------| -| Upgrade Readiness | [??? EDITION?] | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | -| Update Compliance | [??? EDITION?] | Windows 10 | Basic level in most cases; Enhanced level to support Windows Defender AV data if using [1607 pre-Oct-EXACTLY WHAT RELEASE IS THIS?]. | -| Device Health | [??? EDITION?] | E3 or [EXACTLY WHICH E LICENSES?] | Windows 10 | Enhanced level | +| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | +| Update Compliance | No additional requirements | Windows 10 | Basic level | +| Device Health | No additional requirements | - Windows 10 Enterprise or Windows 10 Education per-device with active Software Assurance
- Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)
- Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)
- Windows VDA E3 or E5 per-device or per-user subscription
- Windows Server 2016 or later | Windows 10 | Enhanced level | >[!NOTE] > Regarding licensing requirements for Device Health, you do not need per-seat licensing, but only enough licenses to cover your total device usage. For example, if you have 100 E3 licenses, you can monitor 100 devices with Device Health. @@ -157,13 +166,31 @@ Beyond the cost of Windows operating system licenses, there is no additional cos Windows Analytics is fully committed to privacy, centering on these tenets: -- **Transparency:** We fully document the Windows Analytics diagnostic events [LINK?] so you can review them with your company’s security and compliance teams. The Diagnostic Data Viewer lets you see diagnostic data sent from a given device (see [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) for details). +- **Transparency:** We fully document the Windows Analytics diagnostic events (see the links for additional information) so you can review them with your company’s security and compliance teams. The Diagnostic Data Viewer lets you see diagnostic data sent from a given device (see [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) for details). - **Control:** You ultimately control the level of diagnostic data you wish to share. In Windows 10 1709 we added a new policy to Limit enhanced diagnostic data to the minimum required by Windows Analytics - **Security:** Your data is protected with strong security and encryption - **Trust:** Windows Analytics supports the Microsoft Online Service Terms +See these topics for additional background information about related privacy issues: + +- [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) +- [Licensing Terms and Documentation](www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) +- [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) +- [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) + ### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? No ### Can I chose the data center location? -Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). \ No newline at end of file +Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). + +### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade? +system Center Configuration Manager (SCCM) considers a device ready to upgrade if no installed app is marked “not ready”, while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready” (or are in the ignore/low installation count category). +  +Currently, you can choose the criteria you wish to use: +- To use the SCCM criteria, create the collection of devices ready to upgrade within the SCCM console (using the analytics connector). +- To use the Upgrade Readiness criteria, export the list of ready-to-upgrade devices from the corresponding Upgrade Readiness report, and then build the SCCM collection from that spreadsheet. From ab008bb97f31af701075072d073c613a5799f94e Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 11:17:19 -0700 Subject: [PATCH 16/32] fixing relative links --- .../update/windows-analytics-FAQ-troubleshooting.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 074e39dafe..0f854ffac8 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,11 +174,11 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) -- [Licensing Terms and Documentation](www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) +- [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) From 24af92f24eff4ea5a000adb0ebb3bf0e6a53c508 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 11:30:38 -0700 Subject: [PATCH 17/32] still trying to fix links --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 0f854ffac8..4d9b920354 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -175,9 +175,9 @@ See these topics for additional background information about related privacy iss - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) - [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) -- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) From dc71b6e5a64c1ac0e6ea4b2f54455c435dbf1c29 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 11:50:55 -0700 Subject: [PATCH 18/32] still trying to fix linking --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4d9b920354..7e23be4471 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From 83bb15515c978db2823e754511724a13f7ea008f Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:05:05 -0700 Subject: [PATCH 19/32] STILL WITH THE LINKS --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 7e23be4471..4d9b920354 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From ad590b34cc1d197b5e775c9b1dc4170b017b09ff Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:17:13 -0700 Subject: [PATCH 20/32] trying 3 sets of dots again --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4d9b920354..a8bf2e6db0 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From 6af728770b2692cd7adc19f2beacc0166779a214 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:35:40 -0700 Subject: [PATCH 21/32] trying another approach --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index a8bf2e6db0..547f543385 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../windows/configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../windows/configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From ed37abe9cfae4455f5a7d7a804747e08a54cc1e0 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:47:48 -0700 Subject: [PATCH 22/32] still trying paths --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 547f543385..4d9b920354 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../windows/configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../windows/configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From edb9fdf74b630441c9821ab70702cf83103ea4e5 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 13:06:22 -0700 Subject: [PATCH 23/32] trying w/o .md now --- .../update/windows-analytics-FAQ-troubleshooting.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4d9b920354..394b8090ad 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,10 +174,10 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) -- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) From d7402a212611c51aa3cbb38416fab40f69b37373 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 13:38:05 -0700 Subject: [PATCH 24/32] I think I've got it --- .../update/windows-analytics-FAQ-troubleshooting.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 394b8090ad..06611c8acc 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -50,7 +50,7 @@ If devices are not showing up as expected, find a representative device and foll If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally (you might not need verbose logging in this case, unless you plan to collect the log files). -If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. +If you think the issue might be related a network proxy, check the endpoint connectivity(#endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. ### Device Health data not appearing @@ -71,7 +71,7 @@ Devices must be able to reach the endpoints specified in [Enrolling devices in W If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). For suggested methods, see (windows-analytics-get-started.md#Configuring endpoint access with proxy servers) +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). For suggested methods, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md#configuring-endpoint-access-with-proxy-servers). To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-and-fields-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From ddc8d7f36f1b19131d530990b2f2a9b82ed16ec4 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 16:11:22 -0700 Subject: [PATCH 25/32] giving up for now and using ordinary web links --- .../update/windows-analytics-FAQ-troubleshooting.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 06611c8acc..4cc127f412 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-and-fields-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) @@ -185,7 +185,7 @@ See these topics for additional background information about related privacy iss ### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? No -### Can I chose the data center location? +### Can I choose the data center location? Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). ### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade? From c838abc0677c77699147c86fa8d10e581fa639af Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 10:42:28 -0700 Subject: [PATCH 26/32] many changes, listed in WAtechreview2.txt --- .../update/device-health-get-started.md | 116 ++---------------- .../update/update-compliance-get-started.md | 48 ++------ .../update/windows-analytics-get-started.md | 15 ++- .../upgrade/upgrade-readiness-get-started.md | 78 ++---------- .../upgrade/upgrade-readiness-requirements.md | 31 +---- 5 files changed, 35 insertions(+), 253 deletions(-) diff --git a/windows/deployment/update/device-health-get-started.md b/windows/deployment/update/device-health-get-started.md index 175f553534..70a781cb0d 100644 --- a/windows/deployment/update/device-health-get-started.md +++ b/windows/deployment/update/device-health-get-started.md @@ -5,7 +5,7 @@ keywords: Device Health, oms, operations management suite, prerequisites, requir ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library -ms.date: 11/14/2017 +ms.date: 03/15/2018 ms.pagetype: deploy author: jaimeo --- @@ -15,25 +15,11 @@ author: jaimeo This topic explains the steps necessary to configure your environment for Windows Analytics: Device Health. Steps are provided in sections that follow the recommended setup process: -1. Ensure that [prerequisites](#device-health-prerequisites) are met. -2. [Add Device Health](#add-device-health-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. -3. [Deploy your Commercial ID](#deploy-your-commercial-id-to-your-windows-10-devices and set the telemetry level) to your organization’s devices. -## Device Health prerequisites +1. [Add Device Health](#add-device-health-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. +2. [Enroll devices in Windows Analytics](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +3. [Use Device Health to monitor frequency and causes of device crashes](#use-device-health-to-monitor-frequency-and-causes-of-device-crashes) once your devices are enrolled. -Device Health has the following requirements: -1. Device Health is currently only compatible with Windows 10 and Windows Server 2016 devices. The solution is intended to be used with desktop devices (Windows 10 workstations and laptops). -2. The solution requires that at least the [enhanced level of diagnostic data](https://technet.microsoft.com/itpro/windows/manage/configure-windows-diagnostic-data-in-your-organization#basic-level) is enabled on all devices that are intended to be displayed in the solution. To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization). -3. The diagnostic data of your organization’s Windows devices must be successfully transmitted to Microsoft. Microsoft has specified [endpoints for each of the diagnostic data services](/windows/configuration//configure-windows-diagnostic-data-in-your-organization#endpoints), which must be whitelisted by your organization so the data can be transmitted. The following table is taken from the article on diagnostic data endpoints and summarizes the use of each endpoint: - -Service | Endpoint ---- | --- -Connected User Experiences and Telemetry component | v10.vortex-win.data.microsoft.com
settings-win.data.microsoft.com -Windows Error Reporting | watson.telemetry.microsoft.com -Online Crash Analysis | oca.telemetry.microsoft.com - ->[!NOTE] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for the endpoints listed in Step 3. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization) for steps to exclude authentication for these endpoints. ## Add Device Health to Microsoft Operations Management Suite @@ -79,100 +65,14 @@ After you have added Device Health and devices have a Commercial ID, you will be >[!NOTE] >You can unsubscribe from the Device Health solution if you no longer want to monitor your organization’s devices. User device data will continue to be shared with Microsoft while the opt-in keys are set on user devices and the proxy allows traffic. -## Deploy your Commercial ID to your Windows 10 devices and set the diagnostic data level - -In order for your devices to show up in Windows Analytics: Device Health, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). - -- Using Group Policy

- Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. - 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** - 2. Double-click **Configure the Commercial ID** - 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

- -- Using Microsoft Mobile Device Management (MDM)

-Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. You can find more information on deployment using MDM at the [DMClient Configuration Service Provider topic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   - -## Perform checks to ensure and verify successful deployment - -While you're waiting for the initial data to populate, there are some configuration details it's worth confirming to ensure that the necessary data connections are set up properly. - -### Check for disabled Windows Error Reporting (WER) -  -If WER is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. - -Check these Registry settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: - -- Verify that the value "Disabled" (REG_DWORD), if set, is 0. -- Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. -- Verify that the value "CorporateWERServer" (REG_SZ) is not configured. -  -If you need further information on Windows Error Reporting (WER) settings, see [WER Settings](https://msdn.microsoft.com/library/windows/desktop/bb513638(v=vs.85).aspx). - - -### Endpoint connectivity - -Devices must be able to reach the endpoints specified in the "Device Health prerequisites" section of this topic. - ->[!NOTE] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for the endpoints listed in Step 3 of the "Device Health prerequisites" section of this topic. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. (If you need more information about diagnostic data endpoints and how to manage them, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). - -If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. - -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). - -To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: - -```powershell - -$endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'vortex.data.microsoft.com' - ) - -$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded - -``` - -If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. - -To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: - -```powershell - -[scriptblock]$accessTest = { - $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'vortex.data.microsoft.com' - ) - - $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded -} - -$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" -$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" -$accessTest.ToString() > $scriptFullPath -$null > $outputFileFullPath -$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" -$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) -$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force -Start-Sleep -Seconds 120 -Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false -Get-Content $outputFileFullPath - -``` - -As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. - +## Enroll devices in Windows Analytics +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). +## Use Device Health to monitor frequency and causes of device crashes +Once your devices are enrolled, you can move on to [Use Device Health](device-health-using.md). ## Related topics diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 354ad86c3d..504a1f501e 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -6,9 +6,9 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy -author: DaniHalfin -ms.author: daniha -ms.date: 10/13/2017 +author: Jaimeo +ms.author: jaimeo +ms.date: 03/15/2018 --- # Get started with Update Compliance @@ -16,29 +16,10 @@ ms.date: 10/13/2017 This topic explains the steps necessary to configure your environment for Windows Analytics: Update Compliance. Steps are provided in sections that follow the recommended setup process: -1. Ensure that [prerequisites](#update-compliance-prerequisites) are met. -2. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. -3. [Deploy your Commercial ID](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +1. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. +2. [Enroll devices in Windows Analytics](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +3. [Use Update Compliance to monitor Windows Updates](#use-update-compliance-to-monitor-windows-updates) once your devices are enrolled. -## Update Compliance prerequisites - -Update Compliance has the following requirements: -1. Update Compliance is currently only compatible with Windows 10 devices. The solution is intended to be used with desktop devices (Windows 10 workstations and laptops). -2. The solution requires that Windows 10 diagnostic data is enabled on all devices that are intended to be displayed in the solution. These devices must have at least the [basic level of diagnostic data](/configuration/configure-windows-diagnostic-data-in-your-organization#basic-level) enabled. To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization). -3. The diagnostic data of your organization’s Windows devices must be successfully transmitted to Microsoft. Microsoft has specified [endpoints for each of the diagnostic data services](/configuration/configure-windows-diagnostic-data-in-your-organization#endpoints), which must be whitelisted by your organization so the data can be transmitted. The following table is taken from the article on diagnostic data endpoints and summarizes the use of each endpoint: - - Service | Endpoint - --- | --- - Connected User Experiences and Telemetry component | v10.vortex-win.data.microsoft.com
settings-win.data.microsoft.com - Windows Error Reporting | watson.telemetry.microsoft.com - Online Crash Analysis | oca.telemetry.microsoft.com - - - 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troublehsoot Windows Defender Antivirus reporting](/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md) topic for help on ensuring the configuration is correct. - - For endpoints running Windows 10, version 1607 or earlier, [Windows diagnostic data must also be set to **Enhanced**](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level), to be compatible with Windows Defender Antivirus. - - See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. ## Add Update Compliance to Microsoft Operations Management Suite @@ -81,20 +62,11 @@ After you are subscribed to OMS Update Compliance and your devices have a Commer >[!NOTE] >You can unsubscribe from the Update Compliance solution if you no longer want to monitor your organization’s devices. User device data will continue to be shared with Microsoft while the opt-in keys are set on user devices and the proxy allows traffic. -## Deploy your Commercial ID to your Windows 10 devices +## Enroll devices in Windows Analytics -In order for your devices to show up in Windows Analytics: Update Compliance, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). - -- Using Group Policy

- Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. - 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** - 2. Double-click **Configure the Commercial ID** - 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

- -- Using Microsoft Mobile Device Management (MDM)

- Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. More information on deployment using MDM can be found [here](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). -## Related topics +## Use Update Compliance to monitor Windows Updates -[Use Update Compliance to monitor Windows Updates](update-compliance-using.md) \ No newline at end of file +Once your devices are enrolled, you can starte to [Use Update Compliance to monitor Windows Updates](update-compliance-using.md). \ No newline at end of file diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index d7f650f6cc..1457e294d5 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -61,11 +61,11 @@ To enable data sharing, configure your proxy sever to whitelist the following en | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. -| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. (This endpoint is used by Windows 10, version 1709 or earlier.) +| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 | +| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | -| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | @@ -95,8 +95,7 @@ The compatibility update scans your devices and enables application usage tracki >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. ->[!NOTE] ->The compatibility update runs under the device's system account. + If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. @@ -110,7 +109,7 @@ You can use the Upgrade Readiness deployment script to automate and verify your See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. -After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. +After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in Windows Analytics. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Windows Analytics. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. ## Deploy additional optional settings @@ -118,7 +117,7 @@ Certain of the Windows Analytics features have additional settings you can use. - **Update Compliance** is only compatible with Windows 10 desktop devices (workstations and laptops). To use the Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a partner antivirus application), and must have enabled cloud-delivered protection, as described in [Utilize Microsoft cloud-delivered protection in Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troubleshoot Windows Defender Antivirus reporting in Update Compliance](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/troubleshoot-reporting) topic for help with ensuring that the configuration is correct. -- For endpoints running Windows 10, version 1607 or earlier, Windows diagnostic data must also be set to Enhanced (see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level)) in order to be compatible with Windows Defender Antivirus. See the [Windows Defender Antivirus in Windows 10 and Windows Server 2016](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) for more information about enabling, configuring, and validating Windows Defender AV. +- For devices running Windows 10, version 1607 or earlier, Windows diagnostic data must also be set to Enhanced (see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level)) in order to be compatible with Windows Defender Antivirus. See the [Windows Defender Antivirus in Windows 10 and Windows Server 2016](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) for more information about enabling, configuring, and validating Windows Defender AV. - **Device Health** is only compatible with Windows 10 desktop devices (workstations and laptops) and Windows Server 2016. The solution requires that at least the Enhanced level of diagnostic data is enabled on all devices that are intended to be displayed in the solution. In Windows 10, version 1709, a new policy was added to "limit enhanced telemetry to the minimum required by Windows Analytics". To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). @@ -147,7 +146,7 @@ There are a number of policies that can be centrally managed to control Windows | Policy | Value | |-----------------------|------------------| | CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | -| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level. For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | +| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | | LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| | CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8 | diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index f36c4018aa..557a180f90 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -6,7 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy author: jaimeo -ms.date: 09/20/2017 +ms.date: 03/18/2018 --- # Get started with Upgrade Readiness @@ -25,17 +25,12 @@ When you are ready to begin using Upgrade Readiness, perform the following steps 1. Review [data collection and privacy](#data-collection-and-privacy) information. 2. [Add Upgrade Readiness to OMS](#add-upgrade-readiness-to-operations-management-suite). -3. [Enable data sharing](#enable-data-sharing). -4. [Deploy required updates](#deploy-the-compatibility-update-and-related-kbs) to computers, and validate using a pilot deployment. -5. [Deploy Upgrade Readiness at scale](#deploy-upgrade-readiness-at-scale). +3. [Enroll devices in Windows Analytics](#enroll-devices-in-windows-analytics). +4. [Use Upgrade Readiness to manage Windows Upgrades](#use-upgrade-readiness-to-manage-windows-upgrades) once your devices are enrolled. ## Data collection and privacy -To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics: - -- [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization) -- [Manage connections from Windows operating system components to Microsoft services](/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services) -- [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965) +To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](windows-analytics-FAQ-troubleshooting.md), which discusses the issues and provides links to still more detailed information. ## Add Upgrade Readiness to Operations Management Suite @@ -57,36 +52,9 @@ If you are not using OMS: 5. To add the Upgrade Readiness solution to your workspace, go to the **Solutions Gallery**. Select the **Upgrade Readiness** tile in the gallery and then select **Add** on the solution’s details page. The solution is now visible on your workspace. Note that you may need to scroll to find Upgrade Readiness. -### Copy your commercial ID key +## Enroll devices in Windows Analytics -Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. - - - - - -1. On the **Settings** dashboard, navigate to the **Windows telemetry** panel. - - ![Operations Management Suite dialog showing settings icon (a gear) in the title bar indicated by a red box.](../images/upgrade-analytics-settings.png) - -2. On the **Connected Sources** tab, navigate to the Windows telemetry panel. - - >**Important**
Regenerate a commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. - - - -## Enable data sharing - -To enable data sharing, whitelist the following endpoints. Note that you may need to get approval from your security group to do this. - -| **Endpoint** | **Function** | -|---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. -| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 -| `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. -| `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | - -Note: The compatibility update KB runs under the computer’s system account. +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). ### Connection settings @@ -98,36 +66,6 @@ The settings that are used to enable client computers to connect to Windows diag | WinHTTP proxy | **ClientProxy=System** | Specify `netsh winhttp set proxy :` on client computers | | Other proxy | **ClientProxy=User** | Configure the Windows Registry value:

**HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection\DisableEnterpriseAuthProxy**

to 0 on client computers | -## Deploy the compatibility update and related KBs - -The compatibility update KB scans your computers and enables application usage tracking. If you don’t already have these KBs installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. - -| **Operating System** | **KBs** | -|----------------------|-----------------------------------------------------------------------------| -| Windows 10 | The latest cumulative updates must be installed on Windows 10 computers to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](upgrade-readiness-requirements.md) for more information. | -| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues may be encountered when the latest Windows operating system is installed.
For more information about this KB, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
NOTE: KB2976978 must be installed before you can download and install KB3150513. | -| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues may be encountered when the latest Windows operating system is installed.
For more information about this KB, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
NOTE: KB2952664 must be installed before you can download and install KB3150513. | - -IMPORTANT: Restart user computers after you install the compatibility update KBs for the first time. - -If you are planning to enable IE Site Discovery, you will need to install a few additional KBs. - -| **Site discovery** | **Update** | -|----------------------|-----------------------------------------------------------------------------| -| [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this KB, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | - -### Deploy the Upgrade Readiness deployment script - -You can use the Upgrade Readiness deployment script to automate and verify your deployment. - -See [Upgrade Readiness deployment script](upgrade-readiness-deployment-script.md) for information on obtaining and running the script, and for a description of the error codes that can be displayed. - ->After data is sent from computers to Microsoft, it generally takes 48 hours for the data to populate in Upgrade Readiness. The compatibility update KB takes several minutes to run. If the KB does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most your computers to be populated in OMS in about 1-2 weeks after deploying the KB and configuration to user computers. - -## Deploy Upgrade Readiness at scale - -When you have completed a pilot deployment, you are ready to automate data collection and distribute the deployment script to the remaining computers in your organization. - ### Automate data collection To ensure that user computers are receiving the most up to date data from Microsoft, we recommend that you establish the following data sharing and analysis processes. @@ -138,6 +76,6 @@ To ensure that user computers are receiving the most up to date data from Micros >When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the deltas is created when the update package is installed. For Windows 10 devices, it's already part of the OS. A full scan averages about 2 MB, but the delta scans are very small. The scheduled task is named **Windows Compatibility Appraiser** and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Deltas are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. -### Distribute the deployment script at scale +## Use Upgrade Readiness to manage Windows Upgrades -Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see the [Upgrade Readiness blog](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/). +Now that your devices are enrolled, you can move on to [Use Upgrade Readiness to manage Windows Upgrades](#use-upgrade-readiness-to-manage-windows-upgrades).. diff --git a/windows/deployment/upgrade/upgrade-readiness-requirements.md b/windows/deployment/upgrade/upgrade-readiness-requirements.md index 023c8405c5..83bda44d24 100644 --- a/windows/deployment/upgrade/upgrade-readiness-requirements.md +++ b/windows/deployment/upgrade/upgrade-readiness-requirements.md @@ -2,8 +2,8 @@ title: Upgrade Readiness requirements (Windows 10) description: Provides requirements for Upgrade Readiness. ms.prod: w10 -author: greg-lindsay -ms.date: 11/08/2017 +author: jaimeo +ms.date: 03/15/2018 --- # Upgrade Readiness requirements @@ -47,34 +47,7 @@ Important: You can use either a Microsoft Account or a Work or School account to Upgrade Readiness can be integrated with your installation of Configuration Manager. For more information, see [Integrate Upgrade Readiness with System Center Configuration Manager](https://docs.microsoft.com/sccm/core/clients/manage/upgrade/upgrade-analytics). -## Diagnostic data and data sharing -After you’ve signed in to Operations Management Suite and added the Upgrade Readiness solution to your workspace, you’ll need to complete the following tasks to allow user computer data to be shared with and assessed by Upgrade Readiness. - -See [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965) for more information about what user computer data Upgrade Readiness collects and assesses. See [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization) for more information about how Microsoft uses Windows diagnostic data. - -**Whitelist diagnostic data endpoints.** To enable diagnostic data to be sent to Microsoft, you’ll need to whitelist the following Microsoft endpoints on your proxy server or firewall. You may need to get approval from your security group to do this. - -`https://v10.vortex-win.data.microsoft.com/collect/v1`
-`https://vortex-win.data.microsoft.com/health/keepalive`
-`https://settings.data.microsoft.com/qos`
-`https://settings-win.data.microsoft.com/qos`
-`https://go.microsoft.com/fwlink/?LinkID=544713`
-`https://compatexchange1.trafficmanager.net/CompatibilityExchangeService.svc`
- ->**Note** The compatibility update KB runs under the computer’s system account and does not support user authentication in this release. - -**Generate your commercial ID key.** Microsoft uses a unique commercial ID GUID to map data from your computers to your OMS workspace. You’ll need to generate your commercial ID key in OMS. We recommend that you save your commercial ID key as you’ll need it later. - -**Subscribe your OMS workspace to Upgrade Readiness.** For Upgrade Readiness to receive and display upgrade readiness data from Microsoft, you’ll need to subscribe your OMS workspace to Upgrade Readiness. - -**Enable diagnostic data and connect data sources.** To allow Upgrade Readiness to collect system, application, and driver data and assess your organization’s upgrade readiness, communication must be established between Upgrade Readiness and user computers. You’ll need to connect Upgrade Readiness to your data sources and enable diagnostic data to establish communication. - -**Deploy compatibility update and related KBs.** The compatibility update KB scans your systems and enables application usage tracking. If you don’t already have this KB installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. - ->**Important**
The compatibility update and related KBs are updated frequently to include new compatibility issues as they become known to Microsoft. We recommend that you use a deployment system that allows for automatic updates of these KBs. The compatibility update KB collects inventory information from computers only when it is updated. - -**Configure and deploy Upgrade Readiness deployment script.** Configure and deploy the Upgrade Readiness deployment script to user computers to finish setting up. ## Important information about this release From 8718fd369796bda9525370daf53a0efe258367c3 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 10:53:38 -0700 Subject: [PATCH 27/32] moved 'enrolling' to more logical spot --- windows/deployment/TOC.md | 2 +- .../update/windows-analytics-FAQ-troubleshooting.md | 7 +++++-- windows/deployment/update/windows-analytics-get-started.md | 4 ++-- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 788eae31c0..60b97c2e42 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -230,7 +230,6 @@ ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) ## [Windows Analytics](update/windows-analytics-overview.md) -### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) @@ -254,6 +253,7 @@ ### [Device Health](update/device-health-monitor.md) #### [Get started with Device Health](update/device-health-get-started.md) #### [Using Device Health](update/device-health-using.md) +### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Troubleshooting Windows Analytics and FAQ](update/windows-analytics-FAQ-troubleshooting.md) ## [Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4cc127f412..5548e78ab8 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -131,7 +131,9 @@ Currently, updates are not automatically updated by Microsoft Update, so new ver ### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. +Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. + +If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. @@ -142,7 +144,8 @@ Upgrade Readiness only collects app inventory on devices that are not yet upgrad ### Upgrade Readiness doesn't show IE site discovery data from some devices -Double-check that IE site discovery opt-in has been configured in the deployment script. +Double-check that IE site discovery opt-in has been configured in the deployment script. (See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity.) + Also, on Windows 10 devices remember that IE site discovery requires data diagnostics set to the Enhanced level. Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 1457e294d5..1d0b442c14 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -89,8 +89,8 @@ The compatibility update scans your devices and enables application usage tracki | **Operating System** | **Updates** | |----------------------|-----------------------------------------------------------------------------| | Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](../upgrade/upgrade-readiness-requirements.md) for more information. | -| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 must be installed before you can download and install KB3150513. | -| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | +| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 is a critical update, so it should already be installed by your management tool. You should, however, verify that it was deployed. | +| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** If KB 3510513 is reported as out of date, you should manually find a recent version at [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513) and ensure that it is installed and deployed. | >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. From 1beda5a51bf0cf6553cf81bd743b22cf978ae1c6 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 11:01:55 -0700 Subject: [PATCH 28/32] fixing UR links --- windows/deployment/upgrade/upgrade-readiness-get-started.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 557a180f90..1a6a9e4da7 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -30,7 +30,7 @@ When you are ready to begin using Upgrade Readiness, perform the following steps ## Data collection and privacy -To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](windows-analytics-FAQ-troubleshooting.md), which discusses the issues and provides links to still more detailed information. +To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md), which discusses the issues and provides links to still more detailed information. ## Add Upgrade Readiness to Operations Management Suite @@ -54,7 +54,7 @@ If you are not using OMS: ## Enroll devices in Windows Analytics -Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started.md). ### Connection settings @@ -78,4 +78,4 @@ To ensure that user computers are receiving the most up to date data from Micros ## Use Upgrade Readiness to manage Windows Upgrades -Now that your devices are enrolled, you can move on to [Use Upgrade Readiness to manage Windows Upgrades](#use-upgrade-readiness-to-manage-windows-upgrades).. +Now that your devices are enrolled, you can move on to [Use Upgrade Readiness to manage Windows Upgrades](https://docs.microsoft.com/windows/deployment/upgrade/use-upgrade-readiness-to-manage-windows-upgrades). From 5f03ef9f3c0971486ef831fb1773da8e9bba73fe Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 14:20:45 -0700 Subject: [PATCH 29/32] fixed some newly broken links and stray inappropriate references to 'KB' --- windows/deployment/update/device-health-monitor.md | 2 +- windows/deployment/update/update-compliance-monitor.md | 2 +- windows/deployment/update/update-compliance-using.md | 2 +- windows/deployment/upgrade/upgrade-readiness-get-started.md | 4 ++-- .../deployment/upgrade/upgrade-readiness-requirements.md | 4 ++-- .../upgrade/upgrade-readiness-upgrade-overview.md | 6 +++--- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/deployment/update/device-health-monitor.md b/windows/deployment/update/device-health-monitor.md index 078a95742a..96aec57103 100644 --- a/windows/deployment/update/device-health-monitor.md +++ b/windows/deployment/update/device-health-monitor.md @@ -67,7 +67,7 @@ These steps are illustrated in following diagram: [![](images/analytics-architecture.png)](images/analytics-architecture.png) >[!NOTE] ->This process assumes that Windows diagnostic data is enabled and you [have assigned your Commercial ID to devices](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). +>This process assumes that Windows diagnostic data is enabled and data sharing is enabled as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). diff --git a/windows/deployment/update/update-compliance-monitor.md b/windows/deployment/update/update-compliance-monitor.md index 638cb4079e..a7ed74d098 100644 --- a/windows/deployment/update/update-compliance-monitor.md +++ b/windows/deployment/update/update-compliance-monitor.md @@ -54,7 +54,7 @@ These steps are illustrated in following diagram: ![Update Compliance architecture](images/uc-01-wdav.png) >[!NOTE] ->This process assumes that Windows diagnostic data is enabled and you [have assigned your Commercial ID to devices](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). +>This process assumes that Windows diagnostic data is enabled and data sharing is enabled as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). diff --git a/windows/deployment/update/update-compliance-using.md b/windows/deployment/update/update-compliance-using.md index fe2d443d21..59660993ae 100644 --- a/windows/deployment/update/update-compliance-using.md +++ b/windows/deployment/update/update-compliance-using.md @@ -32,7 +32,7 @@ In Update Compliance, data is separated into vertically-sliced sections. Each se After Update Compliance has successfully been added from the solution gallery, you’ll see this tile: ![Empty Update Compliance Tile](images/uc-emptyworkspacetile.png) -When the solution is added, data is not immediately available. Data will begin to be collected after data is sent up that is associated with the Commercial ID associated with the device. If you haven’t read about assigning your Commercial ID to your devices, refer to [this topic](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). After Microsoft has collected and processed any device data associated with your Commercial ID, the tile will be replaced with the following summary: +When the solution is added, data is not immediately available. Data will begin to be collected after data is sent up that is associated with the Commercial ID associated with the device. This process assumes that Windows diagnostic data is enabled and data sharing is enabled as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). After Microsoft has collected and processed any device data associated with your Commercial ID, the tile will be replaced with the following summary: ![Filled Update Compliance Tile](images/uc-filledworkspacetile.png) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 1a6a9e4da7..ebfdbf06e8 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -70,8 +70,8 @@ The settings that are used to enable client computers to connect to Windows diag To ensure that user computers are receiving the most up to date data from Microsoft, we recommend that you establish the following data sharing and analysis processes. -- Enable automatic updates for the compatibility update and related KBs. These KBs are updated frequently to include the latest application and driver issue information as we discover it during testing. -- Schedule the Upgrade Readiness deployment script to automatically run so that you don’t have to manually initiate an inventory scan each time the compatibility update KBs are updated. +- Enable automatic updates for the compatibility update and related updates. These updates are updated frequently to include the latest application and driver issue information as we discover it during testing. +- Schedule the Upgrade Readiness deployment script to automatically run so that you don’t have to manually initiate an inventory scan each time the compatibility updates are updated. - Schedule monthly user computer scans to view monthly active computer and usage information. >When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the deltas is created when the update package is installed. For Windows 10 devices, it's already part of the OS. A full scan averages about 2 MB, but the delta scans are very small. The scheduled task is named **Windows Compatibility Appraiser** and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Deltas are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. diff --git a/windows/deployment/upgrade/upgrade-readiness-requirements.md b/windows/deployment/upgrade/upgrade-readiness-requirements.md index 83bda44d24..252ed481b1 100644 --- a/windows/deployment/upgrade/upgrade-readiness-requirements.md +++ b/windows/deployment/upgrade/upgrade-readiness-requirements.md @@ -16,7 +16,7 @@ This article introduces concepts and steps needed to get up and running with Upg To perform an in-place upgrade, user computers must be running the latest version of either Windows 7 SP1 or Windows 8.1. After you enable Windows diagnostic data, Upgrade Readiness performs a full inventory of computers so that you can see which version of Windows is installed on each computer. -The compatibility update KB that sends diagnostic data from user computers to Microsoft data centers works with Windows 7 SP1 and Windows 8.1 only. Upgrade Readiness cannot evaluate Windows XP or Windows Vista for upgrade eligibility. +The compatibility update that sends diagnostic data from user computers to Microsoft data centers works with Windows 7 SP1 and Windows 8.1 only. Upgrade Readiness cannot evaluate Windows XP or Windows Vista for upgrade eligibility. @@ -29,7 +29,7 @@ See [Windows 10 Specifications](http://www.microsoft.com/en-US/windows/windows-1 ### Windows 10 Keeping Windows 10 up to date involves deploying a feature update, and Upgrade Readiness tools help you prepare and plan for these Windows updates. -The latest cumulative updates must be installed on Windows 10 computers to make sure that the required compatibility KBs are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com). +The latest cumulative updates must be installed on Windows 10 computers to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com). Windows 10 LTSB is not supported by Upgrade Readiness. The Long-Term Servicing Channel of Windows 10 is not intended for general deployment, and does not receive feature updates, therefore it is not compatible with Upgrade Readiness. See [Windows as a service overview](../update/waas-overview.md#long-term-servicing-channel) to understand more about LTSB. diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index f1e9422095..acdb75166c 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -33,9 +33,9 @@ The following color-coded status changes are reflected on the upgrade overview b - If the current value is an older OS version than the recommended value, but not deprecated, the version is displayed in amber. - If the current value is a deprecated OS version, the version is displayed in red. -Click on a row to drill down and see details about individual computers. If KBs are missing, see [Deploy the compatibility update and related KBs](upgrade-readiness-get-started.md#deploy-the-compatibility-update-and-related-kbs) for information on required KBs. +Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](windows-analytics-get-started.md#deploy-the-compatibility-update-and-related-updates) for information on required updates. -In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require a KB update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: +In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require an update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: ![Upgrade overview](../images/ur-overview.png) @@ -45,7 +45,7 @@ In the following example, there is no delay in data processing, more than 10% of If data processing is delayed, the "Last updated" banner will indicate the date on which data was last updated. You can continue using your workspace as normal. However, any changes or additional information that is added might not be displayed until data is refreshed. When your workspace is in this state, there is no action required; data is typically refreshed and the display will return to normal again within 24 hours. -If there are computers with incomplete data, verify that you have installed the latest compatibilty update KBs. Install the updated KBs if necessary and then run the most recent [Update Readiness deployment script](https://go.microsoft.com/fwlink/?LinkID=822966&clcid=0x409) from the Microsoft download center. The updated data payload should appear in Upgrade Readiness within 48 hours of a successful run on the deployment script. +If there are computers with incomplete data, verify that you have installed the latest compatibilty updates. Install the updates if necessary and then run the most recent [Update Readiness deployment script](https://go.microsoft.com/fwlink/?LinkID=822966&clcid=0x409) from the Microsoft download center. The updated data payload should appear in Upgrade Readiness within 48 hours of a successful run on the deployment script. Select **Total computers** for a list of computers and details about them, including: From 8463f8f32b03d0182635442be2ebff5f7c786641 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 16 Mar 2018 16:45:17 -0700 Subject: [PATCH 30/32] many small updates from Marc; two new screenshots in FAQ --- .../update/images/outdated_incomplete.png | Bin 0 -> 61025 bytes .../update/images/outdated_outdated.png | Bin 0 -> 61088 bytes .../windows-analytics-FAQ-troubleshooting.md | 52 +++++++++--------- .../update/windows-analytics-get-started.md | 50 ++++++----------- .../upgrade-readiness-additional-insights.md | 31 +---------- .../upgrade/upgrade-readiness-get-started.md | 18 ------ 6 files changed, 44 insertions(+), 107 deletions(-) create mode 100644 windows/deployment/update/images/outdated_incomplete.png create mode 100644 windows/deployment/update/images/outdated_outdated.png diff --git a/windows/deployment/update/images/outdated_incomplete.png b/windows/deployment/update/images/outdated_incomplete.png new file mode 100644 index 0000000000000000000000000000000000000000..61d9343b05cfe1451322da90c015d938ee7e7c57 GIT binary patch literal 61025 zcmb?>Ra6{dvn>)JxCVC!PH=Y!?(QywySq#90Ko=#XK;6ScXxN!%m1H;yUyEvxDUO$ zr&mvZ^_A>hT~!eZa^i?^xNu-#V2F|uzm>qiz)`=BobM1{cZPYf%D+zE079}tU|^tF z_%}nSuivot5}Hn6U`RdxIlzBVN%?=>#BmnYa8|Z6b9OUyGzGIaw6JylWozn8%=(M* z7cZ{H z5QuMc1j2&2DJEC}z|kjCK}#uWpolxY7)^lp&>l9)Qv%JLREQS*^-#CK0g)UdGNy(- zCq(&i%h>9SZlSH@zY<%Qi zc83H>_%{`7O>tH{2oCGgEpv-Zupk22pNi`bW!2pLxc!?shqen za^@tdQY9hxB;i8Eo(M7M_*;bFVpS=7m6ADJHk9u{5W|dzU*h2T{$=^iWQu#VFO-Vm zNN?Vt2D9FwS2piorUj$hrUc6xXZ}NqfGSB31q zT(sD)IVuxuy}W75dK8u@e9I(=iEg1haDk~uW4|h~7MgmkDCLrAk;B+J#nXJL3ax4A ze~Dru$8((D!Bs5lf5U>vRB-EmlfVF)ekxKC3uqNI$ri+y)f*9`DM1KZ&09u)8!9R+ zP)ZUb3B@*ni`Jr<9$wwX%nx*~FW39h=UNEMpNEGB0v^}8KYiRG<)RA5IGEH4!$ACu zLYb^)qve}_m^n%-Bg`-Bt>|X*8N5Che@8VBwQ)z1E7w_l4)*%X7FZ+p&{8Ez%o(Uh z++6RmhMl!ivm44SH_k*^%*OPp4J>S&Xpd~ls!iWRWoOOCGMJo%lxfYGu?^9Z^4mep zrrWvwvxRaIG0O#uii=gcJf5T#vb{BqLdMcg8hsNrWtsvLnM@upbFv-t;4!&FbUM|rLd6@%2`+Uo23r>C1i6}pt@ix~Tp zo7IwZN#lBTnFGt1;tQ+Ke*sMXh%HkNZJa5Ik* zgW3H{b!@P6hcg;EYMEGbgQp(Zw%)rMeDktm#vp%rC!I`lVky$wyH6vwRQPwqg7KfZ zsgBSah32r{h zct5e`vGlb;p3w@0DQ)H+vbvzc!|34jHxPhlBKLu ze_VswOhmRGXgMtB8SmpF?i~Xf)x&?&x!%~1V-;&UIGOx55!IaEuS*bTt{Ot1_}QyA zuinCA2jx^*D0#MjoIAfz<@lX5SsNipEnGiNC3iw%5(#c|gTmT%v#nCMEU5;%B4)kT zX|lhqJh0~^`cwy~%U6ehhl}R%lTy60TQbHJ2-=Eif&^p-g-qy`#5KU-vD>*=Sffun zO3EsBx7}-#qaB}l+)kS5@w)7|FFo)9CIA@{JTOkFJyCfRzKW}E=NRAN{B-K52Ns8? z#~bT}OcECXS={#IT$*JZEiYl=7Mc_DH(*s%IM@QrIEyOP6MT1K>9+SH{X*M3xo&3( zR8&$cxyk?NZ~wF@&X=l|nB2HR&Uf%}D=Ms~rFq+{%gC7O-il3vg=nNXal1T((r0#0 zf31qjxTW7a)@|(!~jNsY1JlW0BgCqey>#K6*ImhWs6I zxkH@VveSKMYho$9y(Bq?h==gtTw#saWHWPL~ZGk!AvkUfsYU%{*95vp9Q`BQi#xQRondt0VW9YIBT?tHRu#hsRW zrzK=OOMyk1THRF9?AadaS1Sydn!kua`t)4su_}P57k0SNF|(gT+KMWwrCrk1`mWVm>|#$@z7G$cu5F=#Y+ zZl_gX)i~YZ&UXie^)_Crma^6~G_akr@57&%FviDkt_{?Gr9w@4Hqc;6-Gj8M`He|A zafo<2K?BW5oISdnrG^`1@!>y}P!ZrvRuu#Fw*SdcB!u@Vl^}>A6{uA}LkH6I$iQ+t zr2eKz8gg(892mE=jFG^O$u&aYh&(~l1&}#(lU)+& z2o5*s z1b{0Ib#?K;RD^F)(_OgFvsnStUwfO}nolW0l$~Y9;YYb)0d6bm=^<^)?!`-XF&sug zVe*1)-Dl=fm8du(0|OZ8MsEV>zepqp0)g57+eCQ(&MJVJmk#)qOs7}d4}2*A5pzPr zpu2rr-66EkAOH#(>%(c{D(F8ivVKD5GA4mk2X8%Rb znL-@%5Y2!$3Ql9@YTb~;Z#DDOe5wDSkU2aB>wU?9&7!tWU&{n$_FP7@?1AKr2U+G1 z(0Ms=1&cR6Pay5Jzm z7iVU4wAIy>7j+hit!)yf5jFzFKJTHtmIOKNCk?Q-#za)xJ5?tP0E4bC{+(L{zXISe zbQ)n-UC(2*Yn=N#H$JBZ7JRQ1%6vt{5UX)H9N)aMJ{bY^$`URf2qiS$(B^jSlZGvZsr7dYy)|Er_=m*X34dso5@L4!j8dH6L2@EeybI zjTmED{84N~1pBak9w9BeY;vp^BJbDe2$6EJr6}*wk%wr*hAL!H599Fjr|qsRRP+z- zn=tf4C-Z!KX(`ig1_;Ck`ii(ZOrN_CFEz5wY8vw;U(j@mlOK^%+SUhT)#aMq&NQ>T=7nm;f@*L!H!mtk@;2%SS+?(C?c}`=-~HZCcN;0&?iWtU&cvf% z2g4`j^@nmK$uTG19EkxMs!p;SPt$p!OEEa#fH>C!aj59xOR;!tM!@xdPrI(T(w#wiU>CkDX@Y_`A|r#x$$P*T7EGQoYO zyva^P-tb^7`A^Cs3QD3&(m^CjB1wJ+#lq=b25t>_z{euc5Ro%1V5nPXi*vtzY}fd_ z8{5mNX*?ys)eed9vwwpOU>-9&I|MsnzSq@>S}1@qc(f(ei;YwB&1QRy0Y-#V`CmGB z&q|uT*-kZ6mTqZWx(3^lbun&KfN69aV|joXb|~9+IXX;nSVN{C3y>rOGfdf!tRi9Y z*OTE4N;;^4y}{>v<27vjl_@M{_ZI>u7^!EJ2@-JjxAd(*02KP z7BXKEAUJ=QLARq!|o zUM8G+6nwOcs9;J2i9vL*N3e~S-B`1tFf>LO)-;vFho{(T0@(JW#$edXhPm^@ATmpNZfyR_8F`y$=B^!rZ^mzoIG3{+f^KzJ)@#zh00SAtfeW8YvjWF{P?_weeY( z4d%_3<9aNuwK?XRqcG-*dKdo?^QyO`t*VyiTBR;?|P0oD5Tj=1)qtopTEe;PWt zkO5}u=F~$%Lj0b#^L-)1I_9jptllfcI|9O-rIi;eufF8Ew%W8193-d6ezf$>vZ!U!0?6Tz)>Fxf~4@us~qWW_y%^ z3@CT5uvNp(7GbI4h2)c=&>Y^2-Ebd27{`K+5%4Bak9;&gd&I7(D=eZt;hH>kYI8#@joe4$RYrX~yE2@c0&=pRzCHS)c1Sf`~ZQe9stPK|yCz?Va~{ zWSei+?N;_>D-zp1-~v*D1t7+`^r*D4{O@H#KAE+zXXBU2C-)dI(crRO=A3FC)_!&8 zSB6yxSyzAGTL&jhjjQgjP@(^`&-zIk6MD_d_Rnj^*6UvDL8N*wuj=)qaGUPlP=wn0 zEHGXiGY-$D^Ha4cf|XbTYnFu(*E##vc%O30s267k$-Lk4gg3!r-7yLzDL2R3?_zE5 zC)JIAC-n0K`OK?HsUUyeZPW~`JluD28X2s`6LJjBx@@e`rbU8VGEQ2Ci1>!=JZs~jf!+oxH$P5D z5pFW8s!4a_oz~tn3WP=iwmGvog;hmkJtBc6U!6`=JH#4~b=SGm-ND$#MjZAL+v19( zdHdD)ARBRil8w!m^VCy_I{YG$QJg`)gk0|dN_6Oz&ihzHJ0gBJS$Ny>G!}^+H=EkV z#!IWui6O~a+S9bIa!7U%@;Rrm5_WyXtl!(TCFk735efT4Z~1wsc64=34XA<8+SrP3 z?IC*GEdL8E2sz&@V!wK zNO#jCye?7RLQ1i5d?F`Va*KnFv~h)5d-aCaic_px%*5l^uE=@Vt*{o?SY1M_C0za@ zU0;H7s@8HY9Ufp{DH-{Cgc^b*oRiVWjb zX*wS654d_cYpRN5}R0JKF=G-()Zj1DW+n&B5|W)w5=SkQE$#OKv^_;4M&7ZeC+XtWnI;6 z@IIey1TB^F+;)Dav*57~;rp!jY){eEOl@^?-Um4o5!HqK=0Zf7?RZ91x2 zgRy7q)7I+`LPlvOMlA&!6nv3v0TY}URnwvi0w(Vv!BtpBs{6+0u9x)^7g8vz{Od5Q zkrC=F8GQ544S}%EbZ?Td`C&eeUqqbNbJ7h72X2E~MU5buqAc(+%&FD=)%)5zqp!)eM(8Eg|CR616xFEhrz?--e)8wL!A?~Vn31WOOel>+!udV#o~y97CRcqh$O`E^o}NuusgZ zX5wW2ER)gCAGMbN^HX?=j(3tfHHMCl{`fP}854uQhMj=zvG=VgrC%)%7cfMq6H)#p zhmj9Nrpa^4Q{hdo;lnq;0JE(qPdROl_gcSIjZUUM*WCK^r;a>|j21odCj(|`C}oOv zwkg{le-c+){(!Hf6S2+<@YE`R2~qNW_aYMq9!z7h9JVN2rtEMX50(~W3>=n z36Qa@D7^`r=&Fy&N3*WJ+N*!R}={DfsuE$9{+ z#^P+z99?jQ*C}l17|V>;U94W~0mK>tfbpx^W_$uO9NyTir|I}y>?WbX=Ydu4IabxW ziIo+{+QU7GosZv}6zuQN$r)nsYs7EJEP$a{hHS{dhhQ%5bsK!*TU;a_x;*kZ(~5b< z)-P6pS&jCZ{t&6k7|fQ8f;NT$6UCCgUeR=KIl0~B{f?34m6xnunBi_Z^?gQ6@=kDl;4l9gpLbaA-3Eq!; z(p(Alvd+r+&bpFgQi{Skmyc|Dw);>DNj%k*S?q2A3k!@xZA?S9XVPT+D=s@UfZVRG z^Pbd?$=H{R_e;R{$}C^2{P!+Ybg$SqVwz(JB;}|LgE>gb@oE0VCIR4fvK2yN?%7)( z>VpZX*oJ&}+(z+N>ZgK_#(@vLa0&4NA5eakQM>F&9dE>l z5b6qt2q?XCN`IYfzuif>?m{oOb1k_FZ*p`rsnB&DGTZHs!RK|j18!(C)Y4MheCEPY zgU&XwSwAB4$BaVT6!EkcfhQsnug2+y0GJ1sekL1RtA8siD_FNUQn^*HMbYd#-Fdnxf- z;@}^Ij7=|I?PBoEI9evd9~V8&XB3)-MKZ%Wv?~d%Q)FIVLM=hR;qIa7!0%zi|Mh3( zf@_EYO!Cnjj(aqf&&6WCK6*VnYm{WYDX!*sLe*KGesI zjOI9y{n?eZQT$_z{TsG>3a9ZRHsXlYUZW4~mu1?CONyib&b&6q7fN)P<<9$?D-I<6 zp@OLs<^4he51-(5`!6(I_QUsKl#T2}?LOpXybePH3W40brm*yVlH-$*qv2Sv{+J1w zr-kHzFDd8&Z_nKlLbX@5R%1X7UOrzOnJnf*=y!v*WIv_H=#El@I)QNh=+`7rD_r%} zkW#9-5mlyGUWvvx_`FDAz~m^A95uj0rv;Z4;)nk#YQY1-cXkvYgZK+O6VfBTzp+5xF)o*WLcdIx*GLz#Evp@vVuFhk`yq%RQ8Fw(@zdvCxmM z!G*)bWi&YohZQ;Z=iT+^6*2U+cr?>LZG?{bFo?FwP794dX+R?fPlcS=avD#dK*D~W zh+MEE7;Xy{m}X@XL>?%%qZ@v6-U;7!Md@8lNNy?14v_rLkB=qwZPaW_(5e+S z=$ulx0;$%AKrG2np;u$r7-lu*+>R$FdHgqa_&>WFlrl|xqU`7BCrhqk<{lhfHOun% zYN1b#msYpJ^7-Qc)V(4ZM$FW@ZMo4w4Q<3)yiLH|U>LKlIkD{9HY?J_febHx69bUM z3(6p6o5%!_KTkfu5TB^l=Bzj#5(cTJ2G5kk68PiJ??1$j^Xe$j8rzxScCzCF1d$GM zlMSM4={`WC?^sCh@F8s}rlQQn{PJk9Gt>K~c1`9;@;wzx#! z=YS8EM%K=DzF%#=dm-bp&TahjgL){wZXh!(1}}4$=_Dc3JGOi6E&r+6ENW7KiXFJi z?4eI>i~LpavRTPVQUCmSWAPD>{oLZo__t(h;%Yf(!Fuz6yn*{UVpY{KHQ5lm?v;di z-iE2+E8xWA3k%q~DeNNlPm9IGfWP%-Oq`x!R=Cn9w{8J?P)u#Ql?ClW!z7Pq`mVZC z?qMa-&TAEW9##7@uII9YUIq$7M^-{hPdp2d9`htmu3(@s&JIpaETIBVXoTvsD+5Ap zuPeQM6~OzU(ae9;)b!*Ui^se?KeckU*se60_7+xX19jd+NdL;`tE;G4bzeXwq$&ik z%%Tbq>R2Em3SXo*IDt>#RsB`ZYxEeFCw6nqdPE%%SS!RW+LW8*3 z%4glKg6s&*lb?lhHzpPrfe@c#&ikbrr1#nW{PGV+xmq8(5GuJV;p zxzPr{bMG8MwApotwz;Th$9TCnd2FCsaKyEu1abY{{L6gf!Gs0wiQRFe5G{za0kSIL z)*0I>D=m|zbWfhp-V4qT*%(*t-rVQAI&$3bNJzF7OkTBJo2J}xRo_Vp;QwbjjLEKu z#_yN0v5h>Ky6#{T;dV}PhXJq!M?gbi0BcloXW9{wqO*+?@-SZ$V>-g&tK8nQ!8duT zU}~S9YPr4I<`serq9EufoA{PWUdGMJPVf|}7!}$ytcN!cg&Ic|5dloV;tvFPv&Zvd z%couCc?@Q-^M9h15nDpn%M6cPrYeIoVS$tIkwrP zR0|T<$qJU?;1CWJX~uJP;4~Zy0>2L=W^MJjcvneT)q=3 z{zsE3r*gtZYje|uB>bQJM7;(D@orE!8WqzTtuxbX&qn+$f0xE^sr0utoBj%P&w3!Yp#zUs)pMF!j(IowOz{m&}@fHos)Aufy#esGw-N^{(N zcWPRH%rw*HzCpP8KO;f4kULsbimbsyVwGz-t|BmtDNe16Oh#vRqmK@);Br_mEtOLO zyP<=%$dRdq$cV2cf{&0yP&?GYbiRYvp}ZP}jaUZsQDR8mx*$(cF~Cl#gIaX*@fP;>ZcIv2KdoQsYxin^3VF7R zv`ePRHvE+(HBnZ4e|sGhzMP@2gG#uykJ}<%q?&5JUKyOY3z!J`=KdNQ8j&Owop1IC zvc}wD9hxxJsi3b~0`a}Iy9r$1N2?v}GkbVB-??&ZZm}HJA|$qOe%^$v;pOl=D7!2s z$Y(vk{egpvR6?P};Sn<@>Zto9+d4#dI8&1*--(U^HyI0fR2M-Q6z!X=@8~wT`8y`-KF11OGjC@d&$J&i81lV~(Zh9kOT5r*U}RQ;bBG z(-FH8-+7(sIQpRHAAU%PAspqy!`DfHBv0^V=sPgv`8-W+f&Gel-ltf zg_xGQ_BH_u&JF=~D-SixVW?Wg5)Nja)8=#@_3*t*KM4sq4@A&okr_miEVRo=M4b(| z97*@;$Nhb-C(ihE%PwHnN2J$y7ma)hCr#zYkAfT_a0j87GImb!bAgA~Ed47MXV|Ez>|P%`^HT*LgM^OGOCzOqmwxSUN^+>~UxQ2>_yGvxC1p(hh4<$uxAuKIEAhnXT-HrX<`A|Zu!CMB72pNWqHpEn^|Fpgw7 z)wF<4^TyiDV~t%$Au>i)lT<#uYoy5eU7~7YFN^xJ^XA80{#^wV@%TmhAd~L70;H{L z1MiuU`xvDH?~AeHFa}Kj(SUa^4i9KXrE@rdda);2UMn`1)0@sewUq|bvLG~X?EA{E z_HdO>@a!eUB=tC-D?gu8ch9}TVeU$s>V;68dqp-b2H5zw!sTrA56($dnq&vy%UEh% z+!i)uS?a@h`PtYhiiq{zMh2{dQT$#|EPn!(>K3!r%3I=GEwjU`xLv!lni}}A?g)3q z{BU*?Jb{~_0}|27{dp+1Lgr0r8pzIv{73!I0v(NQ46p|6yNRoN(DKMYO{~CslPFzs zgf{=1{mjEVbtm$~mY}ghL|SDh&nV0R0GLC6(Y2khxSI5o@ZOM65+SW?j39L!JA1%J zm7T6wXsQQy=Ykj;{$_S!y)_0$d5NBE$GEjze2@Z-m6dYVLy;gf%tV?b^RS(7L0Tb% zjKM5n_Df@WDmUEKt!(kQPRvK6FQ%`L99=shO|!}Km=v-it7S&N2w(tFtRmS^u1odr zPcr9#2pUkaf!=wuAX1bq`hHU;J?C!(^>TC-fMF9StI6we!_Y zKUt{I#ll6UFSb)kV8foEGO;*zW6AjGnA%On<8@#i=Z7)Ixz+&P1^iY>gqXDNi-(2Z zses+`SQjxJnEIp9N8J0(H&y3-JXzp78(ff(vYOsL9=7KYU>r-CgDM~QlD^C-TPE>$ zo|62tZ(3o6?Lwfbc6*T9*~U)!1y5_tj}7$WXEC*o;9 z<;6!73n#4dpY$94lyhTYs2`LU0`}Wtt+)ak*|M^HAp6Kp#d&s*gC2GQ+TxLS^OsOp z2fRDdG7eid?0edbb~&A2f~y#ZbQK>TsPl--m?JWc!=gRN0$CI)+jppDWwn@9mgaxO zJYE`)oVoM(Nj(p{`-1SbvmA5G`)5MR<@jt|{H2gx8^lO|G&gw-?cIzMdTB}x;_P)B z!b}2^*jd@VS!`NVs0$POS^l-|VJ_|+=rsH0$xvEwy52pNjFB?B8KBX{H<$u|nOrWe z6%bjI5Rv$tL1m(!JaPIJ{@azwlB;S}8>M;C1}$9zd?{u-D-r0MrD4NR^8+~hkq1?k z7_6bc!;)F+yHFCF$Vd$y9kBbV00-V2HkAq`OVy656*7iK+9^&II_s`v?{Cp_w`?XglS8I9{XhG&d^q5V zJfJ61$-9>NBk@=EX=0MHxHB%$YQju$+>-4Tc+jO)lT|{YT7DK~N=vj18G)T&9Qk-X z62ySewp2r(FM&)<%U`rAQ>Wii&+uL=grOY zI8)yy?J=L57`*;r7|;3rG<~hjfIlHuXyV9z1oFhTvQ0nawFgIMpOLzsez6mH`p3yx zO+{0S(dof4r<%Yz`#yc$k=8OB%@4@bDOp-x+VnA8_d_fCO=@Bung4UZ++?B2J#(TX zX4L#iT3%J|p!sLy!Vm`TAGO5=mDc9hpM=~H${FaC6Xh#ArSsF<8y`j)a&{&SqLWjH zr&%*lUsnUYM)SVWgKF_s=m2JPJ_+0Y({Nc4dJ=8t-F$!Ndk zJ7bcot;B~mjHiC=0d!OOy<&dr8iBNNGJWBdo)seA-2}(Du*OyPz)6{|8bGU((=W=QR6`HNY*5YdSQ%G^`hlRin z0}34X_b&avns+Mf&!-mi_v74}&pcTZ7IyJJ&tf!oaEFibp`I59+HZ3d$YWL$jtKKasaOA1D4W6mT02~em!_p5cDZ}Z?=m2h+$G^Xl*&dR$D3bBHDDkk$(P|k z62v0m1W%hA$ct0qeL`c$fc!bkf(c_C$y~$z)vLu zgD=CI8=eB$RP?89<_225<9(@Vrd~`!(c}Zt#>5WTuV&Z%p2k_sO07#@KC*X5Tc$pH zDiYh1@(|S?GqIm~+)gWXskiFQFQ-(`(Sd*0+8m3;3`M%%nj;Ixbkf}4$m=-9J5Ayg z+1YgT+f0VnOv{|Aum~lV;2Tnt^TJ{i2BUDC@*W6C%y?B3lUZB_dOW1rp}z&6bJ;88 z%(!#6(%?Y$Dm|++eCgWey)YW|8UrUPHIW?~;3%7QK!DaUyslpgO)J)EHyLvY_>~5- z4qC|Ps9yOCgpV|n)2(&&*{jqonweBK$24HDt!&bd{sIGYiSR`eQik3@!r^Z=(zA?# zQy6)R{_D|JG1-m?;?o#Q^#*(aBeMu130Z)iZ{JEs`@n0>Ymx&U6cD7X<_#!Bc)2nC zBH+3FI}n`Ha)tb|)pzfrBE%91D==bEan1MZTu5;LurW{hzo}u_b{${MZ<=%>k&hw{r|)*NHUMEX!d_^JLCu9^&qqtyS{rxe7l{%9AVq~$mp zFbP3zt2_a8p9ZcRHHWVIvKmp&H zf-W^?`V>J5G| zm`B3R0QFaR0NFpR_HKR0$XIl@0{d7nO)wA0`k%AVdpL5t*$!QJj7T&Pp(IyupAK_7 zZddMGX|z$s&|bJPk5I|N=<`8dtdvVo6a5^iJ2+Xx4!zqb6B zNuRqnz(!vLAZ2n%C<$t5%D>T(|NBn6478!bKKOy0|E*0PJ7WqG46abk3LmIr;t1v5 zwKYX4h#tp+hFa;i1r>pt9^EHR1MwrS4w_RWSfl<3nVvYGDFUpvR~&vrFqY(ItBcWG zv@O7^U&cx~I(@dVI-G!zU#RurC&@bql`&EfugU+2M0f@o`+Fo3PT%itGBIg1f7>Wd zBSHy^98d%d*hjy=268@{?+-@ME91nPx`B&pytZS{W)NYBohrSr5R~O#l|oGmTZolO z?}zF@s!Y@|B|T(rD_GXdV^TgS{vYjnvB;G1{6r!1C5etDGT^h=xU$gr+dK&rd_8vX z$hd&-#7>McdF){BEh(34aPWYqmjF+HG96dPLS@tOKhnIPo?D#Y{=tj{%qcmvh2M__ zgW{4PQ*vCk5n!Lvdx8dVjH(4wyY>!_g(6 z!S>fg?HbmGYe1M;2KwzU)3Y-rkl85ycZmw^4=P8lse=P2)?gMmi=xEj zWKv!1+e6{6y>5|!KmWnN=bGpPMd{7`dMN->)6z1fB2fHe+D`Tg;CkZXcqoDrSPaYB zZ?0YAqZ_J1u#G27{Rm0#RjSU*+FNzvuCTWZ-bCfvb&wG$aN1-V3@5?%ZRR{uiLhW1y=-; zsF;J+k0=)A2;oXn>+J$O02o|^6iM>PZw}n50UhM;t=pJ-Tiw#X1H?_#haaQH9xoDY zpfYnfczvaMY}YW~)L=X5CDa4vTAwd}J?rVR%qA#piT-V}yZ%Hju!7p4ScPk86jl#- zIQf!AFwzZvMwR&HOVW|`gbz*KKY})Qu(Vf53|Gr)TLfxbutGiXZ4LXoKP7&5Ag{rR zBNOZC*1{bsLJ>|s6DmFvPA|S89}rqA|G}uq+KUn{RFH~ifs0p4Dd1#Ux_(v%68VfD zgLtGEiUvJ-_&2EAfrNhj&!DWo>KUytmlRdpF32;gTecjZx&_*D7v%D5s$GzMSF<~J z=7U^Bs>#}&fB?@^wFKRLfYu%W@2-JZcmDzrZf4w%7ir4u| zVK18ppK1X>143?Qr&j;}+D{phHz&m{evn75>yY94(<{C*X-YSHqP1RFy?GLGW&J-A zKdXWBdDm1e?!LEY`j2+##ok|kI0;mVzk2eo5Uos~f_(L2(JOq7{1Xgvl@%O0T@pv3mKx?}#)0+E()A;-v`TKHw(#6c?ZHetng~58h z_Lc1o3%zstr|k?qWh3ms)hq;IW?LEW#^x=oV~_a!{lcY2%e)~+z+YFZkV*)*FHfOZ ze{)M{h3WK~A^y5Trz1eyz5Wsq!U@`okEQRv%2@ZcbD!5ccQh{EwhGDB&(?o1;hm3= z;OKcza1tOi+zPkJ(laaw*o#X1`zAc`oq<|z#l1r!_b8K6PcR@Zn`7T^I91!pu?m7M zMD=a<#$3SZ^Bcqm&${2HaN;hd_?G@U>HigAlcFni@Wm7IXD0UX%S=-RgKd@Ib&lrnHPXB==Pg!GY8D~jN)%kGUWG(;BtPNC+1FYaklXhvV{jf_{`>R2{@rVa$p{1eq>G;LQpHY?iI4nuu~8( zF(FH1x0e6j_r@%OaF4A)(+*B~#5->U8eA!G95B1MfPl1@`GQ^i}8rM1Wjn!XJ765-{2Ct`H?ZvFoeZp^f%p@4zR`X?WRC z#$kyM^R^&1h~-GVE4yy>iPhr(M?#X6a5==KfGM#X&)^hNZ=`Nin)jxuQTpQRA3m#8z@$i z)MY@X4)^0cb%aGN^K-8rPNlPI@Js1%Fe)AmS&vyS9&L<6=c=?ElNoM#n*EP#RwFCo#< zwS-?R7EH^VO)+iplkwI$TNOa>{zY0K>l1J9x`&Z&n@Iom!^sZYRVa)%6aNUQ_cWn> zo#^uN<%aS5{Ch62edH{kLTBuhZGa=*D?} z&M!aD`PX5gi_dBYpZS&j{_Pk)kZ=#Lz}kEN^n@SY&dT7x^L%`zAJM_{*r;9=f}@v1 z{;0I;uTPF|7!&WQ;I>s7tsmnP=MnsbpBzKCSq(8&F^=B-E9a>~da<1cFO*ag`jzNLNqk?YCtM6IIb&a^ReABUH)0WcZ)9r_W~w^2HlPU)ZuRx|>Rp`ChK8U;FST zqJIe>344%ZSZU?w7=nj;9Yaap*agBwI|Si=A9*-@JbCeUb|rgX=MDV;Sa6WZYmfrWZ^FwVhl@9#}tWFY8)*$EnUHiN|vd+)_{tA4#!IE&!uT881W^9xBFf&rJP{9hRRY^+~} zRnGSsd-L=PhFrz~N%6p#oTh5TUZr@E zjUU^7@SaTK`-y$Qetp~3m^XTGzx+1DShYdM7eM28yua{RyJhzeAKUKyF0A8X66qe_ z{QSPh;EXv7Z|nKwdu*pK2JbGAW?ME^pl#=U3@lcU=<=kBsitMiQc)wP-fhW`WBKq~)@(z4ll5tULDg;H|GaoL&)=7qq`3XhGbtflfm{*f#%SW1RCLyO({eKacwE zoFpwO*LP3liV<#)5A}vg=hMACU$l0A*&4f>e-3dO<$P-CCxNew^m_ai&*%Q>-hXNA zoc-1NqjTK-GA4t~{f6&1dvaoS=Pb5z{ezYF6R-JNjrACJtTf2woY%hMHTD}{o}0S- zNMT6w4S&azpV>kOfrIv+U-s@Z+Uc`v(&O`YKHJyxpQD}LD`-6xe&*|8UVr+B_diB% z{@_x@*)0c0Si3(C{(&&0^X}BD2U%cfg>KZw`5(S#wrsdEqmSp~qud5;zv8{CB=}(c z&J{`1`?)?b-1CL#!oW|%-h9dL&;7i?y6GX#SP{-ZXL(1?40d^UThabG5oj{?@%;Pf zK${Oj-u@=cc8tfc5w2E~0`0yDvbFJhd*l8E$@yDf_kFoP7$+XDj&vXTUeNG?u77>U z{iS!qN7=dAd>1(Jv*3x}g}(WQ>nkH%|NbwZ(fixb)OV_{S{)&zJfRDl^ei<@$wBLYX?gJ)xjhYlTZhrK-BID8by#DYSb{qd^ z4J6rW|CQfoXVd{>eIB>C!B1VP_B+U>93`qIXs-zLntF7|oDe~eq*!M&CK z!Ko8o_87c5bL-;mvp;bfm#*`l5d0DjL|%U#;M?!Bpb?Wo$J)EwPjr8`Ky_~Q{&&ZC zKlY0EtFL;!eOVOxWw_lKmx;;E@uN2VY4b&Yrxdpx*VhbkdE#B)e@yiKI`FD*NcyLP zHupPlJ$Qc9f^D^-U;DoBx%24Ll9;i+|LE@xYVpTDuA}B1-H=inkW{vEpw}z5?w?#} zO}pCYGS2t$*IfEf-|0}RE^#x(9$P_ZAOx30kUsRs8 z?lPajUJ54$T{z=9F|=ss^hmH1p6%oD>avR~r^HN+%3ibO)P{xeb9UxzoDppOdGeHv z`==)rtRETrkAB{N?CU=0-+}+$QRz0s?Zvgb-rdo-ed^xXb#&5?dp}rn!f|g+t(ZJ+B7K`9gZ_zawOV9K_Fz&WvBol$y^^nDIE zGr;Sg@9h3)+3s)G9#|1w9{8E}m@LJq6^AB{34G)=pT0x=CS{5@z3%cCc6D`{N@1(!lR+XF*2GX4b>BMDbTsku(oZApMmi4OTa}t3IPQ9U+)xkT zFiu(?D$We?es;9`Ylka#jPZW;HIF|I^8D*SpQr4cUtM;1n)kIe{oEe!@BZ8m!JkG~ z`#$FgX3>Aj898ons$>c&aHd@@&QhjzTLZvZ2XY3;^9&GRi0hkSMLTCiKGo0rZ?Cxy z9PKvI^^8m0Wsis}F0;3Pn=A;M9%kRybHM!VZ${*n?%o_(^n>-v=MS}|ho7G1b#B?t`qREAoK9BE9_0DwHv?u|F&!nGd7+=zUk3;N zZR6!-kpWN*L-vYG?vD)J@~=b9@k{si z9^~}NSc#u;2U zYtK@ixs5ZBA((>m^2h+!_kxRJXGJ~U-~SaW&xy%x2bRTsIn(32U6bbI|BpVtqS`hMa+C0XY2#@cTZ$|Bap^_mj1C8lVy&5Gxbw4eTH!}C^K zpa0vYv5OOz9nPE9+x_W}edd&LC*St?Lob-;cs$+T=@0$9`VV&b4fR*SjSWhmXUSZ?Eu~7WHa>_W^VFPT$$+ zJRsn?zTVHj>pp8|-MW9Qf9cKeuL|X^HvWJ6yZ75(c@9CzWBY8d-Xrkuv!UMr_pymt zTW0SYGsyc-L)@%f9UwqDcPa#Vuud*`NQ*meO~hZ`$N zoNePu0|$HjX@IBw`<@>~TwgQH>5sNs|J-~1JA0}_y^dJF=KXHi`K?X~nkG^5${@6e)^^?85q1CVt<`wG!mi}Ik4f1^4*5$>$#Ze!}j(f@V577GzcKGXp zw6DHC`X zuG--}|M#|+`Y%h^kgbiIe`v_NI~OL`2YwT5v+mrgJ;mEr?Ehp@#^f=L+n{{rxZZ%*zu- z&q@6JhutHGIX~Ik{e?GzModlo^poh}??m<=?E1=QyWX9=f6`|$LthX2>uVlEzKR_? zDQ4(U*B8Io{o&lif4?2sZ=m;!Hoik=9{%L39dAwAX*10CiQc%G^TLQg+sTQa{LfANIU6ZU1|Nya)MY%v_rC zE=<@4d%XBn)LZioemV2tzrH&#uD9#|*?SL~8vo9hvDSTE9_{P-)T`bvj^8%uz2F!B z>G6C&*WOe1eLQR5yJLM{>hJo*V815^dOm04IcVyE&%TTu|H1bDgWaCB^&S1){x`-3 z{&k@5BmKRf>gVvv7kmEw&Hj;AxM==tAJ2bUx&L!QSf9SG&%EXP%G=?+2Ri-jU)#pd zI{e9)fEU0d9_aq+4{;xVyJyr8=SK#4Ju=AiFV=qc|B4tq#1p!qCkJ~x|6#<4F}{7@ z-8Ib0<1b^pUVUTR%l$q7HagV$z3`WYc|I`+tPb3HKvj4c1XO>Z=Mw{5A06uO*O)Tj zm4~L=ZGCy9^Q-Si*!(NXYOF`!@tX$6Rc~8)VJg32*fk&=|3l8S$=lCMPgr^Wv$yBt z=0!7HH|xro$H7$V?e<35p$9uUy(Hqa79PIwo0FNj8dOXwD z^=T+Te@}il4Sn`?dwP)jpI-Fn`$fXH7n)p$di`aP`x67)9)Hc_3Ebas{Znt(M|wm2 zkf`g^{ahaF>-y*39*_5d;(0tqkdVDvacr!&+}Q-5xV!vh zA6LlaqrF`o11lK>_gm3ihB|x{x3fH-dd=;Tm)&qPr;pdOWXge!M>cK2&(lz=ecc}! z;LdMUKLZ8n?e=JI%mB%@*E54WAWkR?cz&uc=Hb!4u1^f~z$764KIYi4$hk(}WM-{ZYJ9(l?APkn(-9{3#OKp&WaAsaytK$H4; zJ_kBYR1Hc(HbbF=9-yz!!00y^9~tU+uFgEdVz&Xc&>OgiB!6}QsG|?w9pL?RKW|6^ zs{^VAAJM}nFY!T%fuPXf+3V>+KF{}e{|ofWgFPOBTcEy!ahLsRh#v;@KAw*N;Xxgd zZ@5p4D^b7%IO*m7Xg}b*=hFjW9);O>0zAL~f-zv;K>iH<1t#tJOkb~OUxi|#y+j%Y zH5>H%*g4>Yd(*V7%)XR0fAZtflG*!Jbr;~(aYzN z-uTSH)6jjq=F|DyfVu1sgMcDIJzy>QJlWUhDNw3$A-%&&-7@4y4z@>b%$;TvgwL4u zaR<*(^Ea!d3unlqEoRQ(a{zZF4RA&-Qz#@#+@BFEg;}!W)}H_9!*h=Gtf1mNTe=GA z6wTugsx_`TK(G85cn0a?iJdg>;pRgn#2XQOu(Y2KF|{Ees3SS=;sNAIxW)T~%RXKh zA$I(jBB%?V<7J0`vuBbSh>$oE&s`!hJ9fy;crX+e6Z4Pmd=W@&ymSO7v2_U4e%CCS zqb1%jUH+0UIG+uqggLC)+fBzVL3p{D7PJL_(kbARRBY!Z9`RwE4xc1QS26qijSEp2 zvmXBn!I74i0Wgnse!9Q&v;ADj^I4F}&3fxzEu`m#KIo|d&VT*h>nn*)qLiqVauq&~ zDOW1c95aLGj2t+lRH!71mTdV6YtI+?=Kwn7W+u9cnV=T2NKXjSv`($-Iq~FY8QqiX zls@E0OqFNAoEhZw*U8@BNN?c`oG5w10B+%oSkZDxe%#vY#oo~I<2c0&T2ntI&`I~U zh(&rxI!v2iD}BhZUl&13+w1XOx1|WeJHpUS%;v`iIzRh^&leKCnCA?zb0H{JGa+t zyNdg(-ID7jcJ41h25j8_Il`gWT=$s@twJd=6Xp(_0RU~}`1%=1X=CAr@D(dU=C2G{ zV3yFIlvU)o!Xg&w30WDou%~3zZ7#fYOR=kfGOrF@xH@dXn&3rY@j-I@9i~Esgn{{t z;trhYL~U*D*>h)(pE=ekCqPb<id164d0oM&3}@SYOuw(oo+h zZkNcr5auU2gRekWDb;GVQlU_F5x9i^Xor`;ITX+)?fvmIog(N#|}bnSfp#a7HSX;47K# zggbKPZfW-{AT6j4lF>Vh*`EauF+d+d6AU8pfDMvRc-jYgYt^n{Bog2t=F|x7FIOY)Yd{Z2--9%$Pm+@XZ1B=gHj@Gr{zky zsJ@9xXI}bj=0c;9+UVezQ&5(&drwAL=B}LynP+m9DmB#Ws%4AR>UKx( zkU2}ds|(JC?mC=$t;g`7I{k{34m4cprBZRr5yHpzG zx9RY))H$02@(Rk1?~Pcz*}Yt%M03`H-w#k%x(NRlIb$-$MsC}ia#9B4gF)WjR6ld( z0)G_+@)ivN7ZQlHoZ!j`fnE1YJobW~H|Zo%&fT~!zaKiZGV!*WL5 z`BO<#W-n?I%T#K$R#d%W@zQJ8Z>ZI>io%K&4jwhlqD`yUfClDXFPJ)gMvJh0+MER% ztu{H@d%=>m&O1*UjWTZ!|D#7wu`FdU>dA91-BRlr&cG4usb9ny9zQY85YFKG7R=)G zwWawRRxJ5$>hz@>oEn;ioI%Z~TR;19`sD%v^e4L`e82hj+o_Azo=nT~_i(SMZxgk( ze*E!gWfiq;wFRGiIk~W=6^81hUAwN8Tu#`zedc%5r_Eh)>};m8y=}tVpPb9i(`nmg zEm#v09gjVfIS&^6KG0Q#K{_~N;8;DSksa9|_rsLApU+xxHtl?URoVKL%fI_^=AyM* z>l%fuP8}2K_uaQYd^c;wwcM*3rEuzk#TuPXE2;bb>u-IwA7qU>f4`7pDJKmE#$>{E z=le9y@FzXQ8DtF}peo2InTeSUoI#H(%eaz=VXkr=0 z1iAyjJK!I51Ggb*gjJgLn!wcpeG#z(jz#XC|B}X4n zMyL){ekhuOhQSR$F$@jfaJPm;YJyq49{yvq0g4k{Gb#KrguY33o`$;DPswfnn}~KRm!w zpbA_8F)f_=oq_1UO@U@cj$q%20@t`kjPx-P&JZ;*;*v4L;%Ecpz)=L;KuJK6FcPE< z2Wm&OU{A)OK6Hr(n&0Rd)D}WQgj83so#Df1VfUscv!6^8v zI0JgzDLA^~Ac0T+{6e`qpc8`LrBl!->*=1ug8wGEwf?=z-OFI)ov&X94+A{KcFg@@rDY%>6G1_E_694%szhd=;0 zM*{rPH2@wwXZTr>1r|JnuyDo#3+@d)!WqV3pve)VVFsfCf8XD+pTfeW z!Tb=7d7YTN8i6%&_`nRDfxsQIri|dXqKpQXoIr5?2FtPLrvl)JXPA(A%ckRz3Vg)I zgc*a#@W~948D7wDhX)jrC6JC7h>(OVc(8#ggs-ST{a|>##>dxCS3vkvbmsMtM~`p@ zBE)AXL69ycj@C1jp4QW>j>bnZF=ZCSXu^lILB)Y1_y`)w7rA9(DVpMNH_bE=n>BF01c%fHoab-lz8ZH z!ol4K4#yu%(r9(i*@I?7TAYzK87UZ3Fj>e2sy}(7vysls%$7)$CZit595OT^r|@ZS z49VhCdgL0*10x1R1**@I$NDgC)=0w{#0t^ECC?2~PRKip`O~Li+FaUrap3lt2xj%ZisScnoJ;oV> zkpcyUk%W?~GLM};ajmdLr86@4q7a5LsnG0Fb0*CON56WJ90+D&Ra)dWjEVHBl^Y9- z>kURdFpo3pIips~n6xlja5~ng)w7%mh6EG**BKa^HgG!N4-2Ch1c#mg$_>L5%d$oW zd8K3U=>aUOkphCs8XE-h2T!Aei30AZX-! zHH-xelXv>;g~B4Okpk_{yOJFk5abuJi_$9!uBJ`;ZlRO!Hn~!|duN1~pI`E+laPni zt2P!C*TZnZ8MH7iWna1K>mTG35Nb4N^7F5H`fqb^@)fsqVtO zK~V<}90Q%db}8fJ@gso|ks%Q=lwNWv=UP!^EpX;oN_s_6wzI>gxr;WQO3%>gwJ}jq zp1y%;m#%P(c2E3)U9mgzE?1Z_WT8m8em@CNXxuXSghly#>#4E zM}L;l-zctLJbxAp0;?RhiDYWMR#jVF*(#B*c5!cLZd|!?V}40J4c$L0YHe%Z=n)Kq zLQ_+H;f>vxf2-0Z$h)7F#&;fCD*$lLc`@eapIa&d!d`>sKtjR9GQtZe2BZZeUcrmS_OX za$%YblW;y1phq}!3t(cwbLL`EvDQS#@7jOjRFGJuUG3%% z=O>S!OG(Kv>Y3C%yILsfVB*oVv^15`*dlDZl)UrUiL{LCB_@vc4^6mUm|I;}yMJFQ zMd>#?Z1VF9@DJPW5g4tMs+_z+VCJV&w0V06283^`sBdJ_sl4RxzlZ7eFSrwj~d5?{+N z*pr+NoKdMYS1(~5o|#6!u+M~|vl zw!FL|J1yzdxyu<>^C(^0sx6V%Z{*e0S0@}uWm(3{$Gf(v8G@6ys~KEn z=U+Op)x%qXZ-}PJ3LCD*nTuq>g9&~Cij}mrZ*lREC}dJ;qxbHl_Li0qAGi93hPCT9 z)(OQroX_BbYA1T0GoWimlPUYm+3bP>%0RQUI(l2k>}4BQY;bI8Zsv^4o~UiJmu;x8 zYgoEy$%-wWvzIKZs;Qp0U`fFZeA^(dn9+*p5WhuBR?b`JqE?9_gMAk*-86a8#`20A z5^?*Q&Ca0oDMwEwB^@^zOb2%CROqtYs(S#or4T;_*!k~ zgm6WT6v%=H6O56i$ z!D$uvAdB4)KTfh(y@EEVY228>5s@)zwCGW%r&JWHH^2=8Md7B4iSU_&;?R^v$0#W< zl?*19*63I@zF!d{HtDdS9D}1c4JA!R+yD0O-r!!a!6 zz)0yC6|TPP^?I#Z$50Hug+UJ^iR(DQv_UecrafQXGGUfJa}*D+Qq%|l0QMdL7{O5&)+p4yC%_j zw;OIx(SnBueAA-_kP}`>;QWr-0`B*PGyi2k*>FhWw{$JA;C|u(;f#ea7W~)nfN;hF z3;t`kH_m_`o-<$zS;Qg_mfYshO^6TR4E(w0ai+1cv9+~DC=|jGq`9TJ=|2?+3m}J| zz->Xg3fygJY38%h;jZHYu;ro?Ty!#Jb8 z4Z8mk%*o$Rm{YoUn8RD}TY|Z5ejWIDe(5{T!B0s^N!QsnOl@Ge!d347RPK(uM~-*9 zkDxs#V1nM7TsOHpEEeoy6wz&>M!azxi|>LW&oSdOm}ak-3V8qk-^qb~JD&#VJn6(wxpWFd3-Lm7{5S(A zm{s!XDY%3qM9*gm&#^4zB|8XGP!fYVY72f>fQG|H1l5AJiFUO}(SKQ?OCLR3k9HG?Rr36F%(aF^r?b4<=n z919WZ-~wOIfx3yQz~G2fQ?9Lg3O4eS#Zo{UlIajXc6`xGcM)J~19mD7` zWunxKR!33fSJ1S91|yB=J&S~)8E^oT4%|@F@x5gD*=K!8Q9*iEo*pO(VQ73K6l5LL z89!x9LwP8crSy8V10i}G!8jA#;j;t)&-|hVIFf)!58{EmfequKF(df8Gp$N*pkP!p z={O_g+Q4ZW(=X*6yIjOEY9pi9Qcx&M+(+7#!Tz)@I?%?+biuQP?e-0(`ws zpU*5P5oopgw#F7$S7*?csPJuj;uDcG`0KQrFC)4K&M1|N+t&cPg4auht423E_l>NDrFwrtw!6R=I8VWiD1hfkc@?C6+qFfpg3bi;;q*REcNoSjTPd9AE< z{kkn@PM>Ft-0`z#L}D>VNt2QibBjtgu9!1r;mXq&uPBu=cTca44jvLolS0sW)hT^6w;qM@9aFH7(jV>IUl$ic)~!RP0@73_FcrxA!e0PbvZZBAvB&d zsB?33!uB1PGze#|b*A;w4QrRUMC_%t5-$gL=(l}*!$S6-0Yk{g%P+U0K6Kaarsif& z*Y4x*1D6Gt(@te%XlTkO(66MrwxpywzTaKGcCXwZ$ICw1#5hF(hS?w*s^%V+>(mA^{XNo zok*t=Zgus&SX31ecbGGZ!72+2Kf>zkW;^X*V3=m*MFrQL)-0Ymcj|?_vf!8#EpjMD z%cY#6jGVI4W7|KQ?J{kp+lmFVQ}^!qa>^pP9&0o-DyFSXV&Tm16vW2Hcd1mA6z@yD zAZ`%`y16?ChBSgvgoYWJB$)m7C}(h3!8td~5@g$geXo>P!(72gYt$Omft2H!#T6W_ zP^o1>JCh}C(%|?5CWCl)Y{co@YL3&!28S55jCW8-lT>Xqs1gq!x?EnrKQXbfsfkgw zuUfbEx}Z7tQu>KAX;QUztE)Rqg@6|dX^W_})x&Q;Bu(p-kX+R6_^|D<8eBhUS1E)} zez7#8C@LvmvUX`{Ma_yOfs9V3kc)i$!fsU7_(a5VtWqqIc?Bo1`kI9IJ&wwizGC(H}s2UzxQFB0l?f_BWVot zbXd7=)6z|Dr_N@m6{1y37p&jpHg~0CnV_+?qS0$x3}e&hP@8-tpG`<18 z{?P{(tZ;Dh4$@NEvXZ=ci&i)}JAFTUL2g+MBd(mcV9}`y7cQJTJ#F$2OEeoAk09&tRom#YX`MkBx=db7B#v`r+aDl%5OIB=laPpWr`@4#Yim5-Ybl&Pbf90C1 zCB+(z$jj4r<;n%2+xL6=?q+m#GnQ{b&NDiP4Qto0Tfbtx>!~vrDoV>1End1|(}oQ` z+sV!W zwMy04)ZE%G22KK6g`%cbkzB2%@kP;=aprdk(3SS~_J+nLC8#C7p@o$z6gZOsb44tN z83uT`zvE0NAR$PVNLQeX*#`k!0AV;I=^SS)u%HwF31`a6%5bwEAG+!>0eS<= zf#*a3x7_^|0)SxzM-m`qha-Q&C&V8CT~9g%zz4C2MLGqc*Xt#cU&a}gN?BT3iZcNV zEO=PKb4Dut1@8mkeZV+VV}S(^F9d+v+S*_A-kDC@40y)Rjd+VKwC+WIhH~8! z`tM7(s%iEhdL z_r;tK3+@9zVMzVL0T-e0Q~0=)ioc>nC$k?^E6}R0Ezx6~!6!orAO(|I7$b|HVlw;q z33OSff^+=b62$)tf!p>_U=~t`k})QhGH2qK!JLDi0H`b^(N%;0n?g}~IGVF!!F>Sv zwIsfp0t7Bi2HIrM8}Z2U`wWCCsOq58_k}ZE0BIp#P52u)$i&ZZhHw}JvWdU4yeA-2 z%s&RY{Rg8xfL}i1^|;V9euT}O4-4)Cx^admD!v+pS0rAm;2e(KcItYVGhiq|dxK?0 z#(+C$F@%MQMArzwv;xn#CEuZ-<{Q5N5L3rCKZ*C}RwMZMNd|t#Cjk8L{{JTeoPi@` z)tnm(dJep@z+WH(=nfbv=M0G1$%38(C?Dtm%^(v%Wk4%a~Qp^S8#Pz3y=pWhs+1S zEi%0)nTD|FNWz$}vFJv1)|n$$DrMKNUd>25Nn-~=`U&(&e347e#7IPKVl`9&y?4(p zi9|wra1`PX8O2|MV4Xm3gIx~X>ntgp{A8)`2P~ZFaiA%Nf1#D3Y4rj@RcOp!aA~No z_waD@@$&U@^^MuPPa4&9DJk%8`No`F{M3}?WN*b?M*N+wgomE63d zVqgZxXmo0IwVfts%lr^FJvTQal1rbRaGUCNm(N$lgShcWp#B`n?!12W$8zErCyh*)heY@4#`nE zO_iXwskw=z^}^OxK~=RxA*b}}nC;<5va57@y{NsNOoI&d4Gq=R0zLL5kc3DkmseC) zs?-{&Pl&9tx~8c`2=wIVW_%IJ@xKAmW1yI?E$9irOa;ss=nA1LZmqcy5fZe@J6gjU z$V*r7;oyrImj!}aVPj)pfKPLK+a?F+`oQUemcH*$f=boCdq+&hsgs@&(Ue}{@4U%xPqJ8{a@_17Y7C;L%i{;B6W`<>%!Vmvq`cDh@iN{|RR-xF3M_L*+;F z0klkNWa({DJHb+CKy4YhMBFleW1vo_6*o5o2Ly-2#y8+E3xP}ccqN18nHfF68J;b0 z0`3?c8asykwDhdPB8`zcoqBfH?qs7;)gqG5pEb*%Q!LvU)Fu*}7=2S?%c+bD%hqpf zXsB7cYEw~39c$2W1_i`XT~l@L{MqRXJ(TS&8=YN~vPw9kG=ATXw99#}L9wZ)PIE?C z(y5C%*RH1}#hkgJx^VK?!NgsMPo6n?G!5T9$f^yDu2N8)oql3dKol_fMB>iOauM_= z?rWB{H#Dwy^^wYzoKYDZ6qK4*>F(*7m6fH}X}o;`Duilx$4$j$WeP2^WpP?);mm`8 zPR@Xt!5I~xC)*-pwJfgfaz^T4V$#XXTrkAi8=Iz2o9!R7R}I}i&H!*u(-o-XzmhX# zc)4l%{>g z>#NtV-dtSTKvNpd*j`sB*y`;i6baU@k5IO>IJmf;E2!giqSO;9X_v10h3~v}y^v$t zGp-cp)TOXmDXi)$E$;*6r)+$)JEPS@1e&Y0`0XlZnIaolk@T_IP6L`REc5`RDc zxLpTiVo`AP-j>Gtvxj0&^Ri0bh(7bG| zi$pAC7@8E27YlyJFwbX@GX~C}0?vd)#sX)IOuJMj^@}-VU~%cTt-0OTJ5aCJ1$uiQ zJbFTd3XU6{=2&`!GXUN;ZRUwjWtAd*RiqnFa$D6&1B_ z-@YYFmSkpTLO!nLUahXKE-bupDLWhDFUZSZwtV&W=VY0fNk_zDrLV8o+O_K%8(VO;*rhwL z;DG_oyg4rY>=`h-p?!tTO*cwPLH7Vssr2N@ljz4}3JnbfdhkIy(F2@;E40SQXamW> zUETvv9$eM~X2X3j4DsbG9GUOH75+35&PhhiVfhmX%|`;@7{w+hhYQ!sz(^tw3NQfy z0oSfwBR9zpp^0aV4kmIK7~?<(h!=vB*PjCwNm_8*yk|vH!BY@OnLokg$v!5D1<%Q) z*)p@>0Ry%!Dhucpwm-BtICkm=uZnO<^a%ZT0`C5L&hRT{oq|fnpYwpEfh{a~g*gbX zqx?B!m3SsGU{CBw3O?48t%*B!%Kj+O516JSc!>#myIf?*&d!rOZ?@a|Uz( zJ>Ck?haRxaz~xr(j=Z*kpi*`UlA84H{5kQ7#v&PxFeHhg1N?2$3z%KH!u%{M+``CU z5W$s1k|L&pNuVdQ-wu;1m9s^_~aejM;_X7IZ^Eb@Q}nHzUZdSRTAh$X*>Gho1#m6g#9%do~yfyq5Fj4Wc22UbAIX@ij> zZ(Y^12CbfwN~Ax}8L-|!O3TW*Km5TW7J0};B9Rf!D0uk^&dB8|rK+&Bx?5n2SmYrT zu@qnU*D=i8GSb|_8HHR~SXRr2DVNZ^R9M6!54MQ$SSF#$CHiU!&FjD9mvBY}vl)f* zM!A_Yw?t|Yi#)heNjOs~McPz~DKlqeDhp>UVv#$Gg)gn@M3Na*vz=^G&W$ z7Ibi?b3S7ci##+!RY*EHqXZDD@NyHkaz^|0zoPyEZnM)GQj3axRg>TBsTC|C8aB+Y=zWN3P+i~QlhPt zz|ou>i2-7R7%(^q0!Nmd=*lHJC?v#O2Dy?LDnxJ&o{d#frcolR5Npe%Mo1bmQzn5U z1v#%0GsPmVLTsoKL*yXl+*U~GD)c}y3~7<%zyzt&llC?HEV7(E7fYDe{B543Q;B0h13MBC zL@$8Mh-rZw_(_+wgDO+i;3DH!R5ZZPN(oykqKm{#ncP?|2G6=uD4obCQ^|eyBp@s6=JNC({++oW9gy1fTi_Wr_(N-KfEvM z>K>=75$iMJcM726masx`D^-2*LfHE1E6I7goi6V1IuIXs=~||~EbVgetV`QgmYg}t z)}*EGjw&lIF28i>YUt{=dSR8EgH%c-psrA{_k%N1ra{u4aQwtFzr;F;wo$G-U)ETq zpeoyy*96VE^%BqzL7TR)ReiNic%xNTDpKSKnxV-BQmU*;R@|=7scb4~R#yWPn&p)u z8g#3$MN%nN>_3#~7MGgSqOOssuhj^z)QYO1yA`Vnnw3{-TC3WWHyUNx0%2*JzCuRV zO0^}e%HnpaNhB|7(Nu%RiRSWH@R@nu-JI8^1Za>0I*qc$B{CuYYJ;F%QrsZT5;RpvWc6+B%N_jU(({U1 zAw_j=b>sC0X|)3T5$GmrC8{csuB4)&u)O)l^+BZ~wxm^YRnU~%Agz$8Gct0&SnPDM zUD+tr6bo9f3WO!tQ^3Fl<1=!mThly{0{ub>>84>M7f6(<_B{38SwiP88q!Y}Qe25% z#|g9Y!dDeu%&L%bMG~W4c)k39YyQ4?rr}aq@M5;2u$D0>G<6M!{Tp{JlAiOr>a|D| zzv^UM9CV|K=4&MZKa`$6ArKjhpw9&}A^5m4I z4l^9L#~eLhBr`}v!ib%5+fL>%D&dsXUJWYa!DGkQL}x5_@;RP;Wy%Kk@0V}BmV4SE zc>5~1fVB>;(;asfqe-c$k?M|L%#YfcbR^^QSM!%{3Wy#1&ARg?6#{YFlCAEm{GwL{ z##OhAH#@p+@QC_!g?C2Qh5U;8uNFEu`uKl2e~njE;^GZ{i=Be1^vp)@02lw@#je4h ztqXw>-ytd?;c{7V*_FBLJeIixZ14+B%Psz4#**32!B;EWw?)J)-|RhUk@tzhX5dVX zSSi-XJwx}b+v>Z)E##Zke)S4EFlOfluZWrJee+uyU40|oowhdkL{?=(y`!Vw+)Y8@ zr}D}b27yE;fWb;^HeDWUDU&dz*gH_=GOE43p3RFb-?6SKbXDEi)ax2rBFdFzMxP3H zDs2##A!j(Q{!GEPg*UELDFxZt?q4_W*-)Q-LZ;TWW+tBZno%4&t2KN^rr#Q2U1OAGz!^Oo>7Sf%{rYdIA;I;OEs?Bc4Y%+ zTI*MO`JXCjNKHSt_hfo$n{v(?mjkCV6H_kCT(&HusA|^ch(@*MMEbdP?!ho{6$mw@ zGE>@lNbw^4@gWh;W zAl??_DiF#RdF^l1aK5_|{A2d&8Op^cAWx)O=Np?|TvS8p{bEmFNI&Tun|L5c5VkEe zN{wNz(#{ki#d=MeRPd!Z)T+tZS8N@{0-cS=WB;dd-3@{>7BBRwzAx@j}eO)E_p63p6n2p{m6X3ulNx zzie!hw5SAW1;J~zg>f|jGesH4ixm_t%&gk8B|r5@wbTT?d9j2u)*LAanOa<`tPrd7 z8>*zGXYzyRSEeM^i`4lwrRw5j$@ax92YiJ&$C__kQnd=?8QZeM-DP6Ub(x8uD)&5R zKuX&64KixAqffcgR0^|{Hd%{W6N~o+Zvmw)jl!Tl_rV2E$&#_!EAw7*p5q;Emh5pE8Kifl{O}wIURfSR8Cdfy!9TZ z@@h|JS6#e*?P9TDm3LyLR8!s3o_W3E-R~ElENHHfaaCejn_9iqH*$^NzQiMGD>t}q z3W*o!*`+Q%r;97YQ!hjvJZVtWxP>4dlqnakMa3OYI(Kbd zU~DbJMJJ!xpRi+tU*yr^mQtarQEl*vjX!(663pC!7F|e?bFDLo?36Gy|+AW3!|sEy3@!*NRKQ(@NdH zJ>|RQYFUM`G3BD~QejnXrJMts8O9l7ZOV<%SyiQ~CaJVu(q?GR7N$C1j0&k1(`{`v zE$1RGdCn>Gozt@4G1Y5DQ)a5-LinW!PmxdooFM}mBzhk>12$iSRJ-fovCUz7^Xg?V zB{*}v=)k!wm&nAr7TKY5*FiUm3z{~^9I2JGd4`1TzEs&pQ=abIni{ohJVN)JE3Ry6 zU+))nu|l{jAvy6v!IhGV52r3XTi$y3)UnWg$py`-G9`OPh zbGf7NN;#m}= ziX}erC8b495%C8umG3>UKlI4iBAMy<#e#-bnWKMX(xn?$1hQ4G;rR{H{04P;em!() zHBwDQZNnO`=#qMA{L!;tt@OBXqiThRpFpT{^WKqKBf4;{aLSTRm1@IgCzrF?HT*{HuWS3{`G}WHDzQf_%;bW~55mkNuTKFnq&dJJvd5VmX z%+QUJ^GS_|oiFT+YHrsT%GeT#5t6%4oWX@1FknvS7Je~z+2`}uoX9J0P|*Rg`@fj6 zVv%D|mBg4=+#H#lArLEL4;??6SJOms+jk^1H_JDANAEaY^10=*tw!j*`7@OCpbEw5zF@LuXIt z3o1n7C0l$ynzkftUrMb=cfGp#yCs{_^8_gwIUi1$|H0&C#jP|<;;W^)TCqCu^rg?H zE((oH*&4dHMMDMcO!)A-*};2{U2RZRwaVAJhq^@WFK%d=wrJf_=WyrkM+F)*LMkQt zhlDeo0)s$_j4PF!>V?8nM-JxZ7YG#Et7nd!OFvUC))z|+Rbp+Wn3A?tRwp=!_Bu3G z<)9pr@~r>Z;{>Tm_Qh&PlbLs!=l4O12Vu1qo9tqpQSJHLeTO6;fl1RM#Zcu5jO0 ztl+BUbhQkZjBzTgU~3f+7GtQ9QMF2@1}>#ky#j9G_DH3iEt64IGTg(dfyfnXi3nzd zY=smiZH5ZDp;8Vy#0V5@1?I$1rC`7(Zi6VOY8h3nFqO*;FoT4dSh>_#iVDZnNsW+! za*4iDuCJ8nY87;~65`ik>T0%H4js8hAlKG{sM#_x)7BcP;YfB_ncP$bnoYI~ajyoq2pQZV5d&4| zDk%)a7&Gqc;r<{d1eB|k8IUBnAjp);AU`ZAA?~_h(?UWR6$Nw!EyOJyP${S#AhrZ7 zU0g#XnS|gF&`>Q#jU?NPP@9@6ESe4o%&P+Ken^31dV!oOmFdZNP2)xosew|7fozh} zb#nUT)e@{38RQ%)9ax9ifUspiNKypi&H_JC%OQtm0ooXWIS`~2*M*=sm~)69hy+Pg z$=F&fEbih}<2Er{4qXG7b0WH0WNre!QSP5$t#%0H89B_~>e$Tf>iNGQ`~n)`1{{$m zpxmVroP?B0@i{T@13AR3O7ud#sa9nymyzyLsv~=S(8WMls7Bn~u8B(D zInXZbhWLc;firkdi9fATcXEbro;wK7A6^5*d`fWCgCnn?m~}Gvpekd%8wmmUGVpEC z!5MOboB?*>rZ^}H43Rik;XWXGK+X^af-+-~u!4ZJBoE+|uPiELkYU^^Eyo84z#C9S3*Imfq(mU7ACP$%xTN}0DOy2%SbS)JPf=>9#-&NTtONp! zVLSmBxP($0$-u~fZb5#)8=o;g26HNq9OeOIz=r~fPw-X^y(S6-Azg+XN)3+Kn}CXd z2LX^u%omNX@cSsFGI_zB)@lh`FJoJ9)s8$8K?(xi_-vTV)ghhk_f4=tp=rn?mApzo zoj@g{rj^T##pHPol6fcyv>>!K9Ki#>1B12(K7=8LOXvZa3OQ;K2%#TVFR%aNyK+VW zccpkx5Y7m?aRy@fHMPL&A_#xp_114qIX6Te>GM;n1n93VgOuMeJ}2j@4iS5%cu{ z5Mm(UoUM~HcV^5joWX}URYeuGd>FLIiA^Ga`N`b{X7E2DaI3rL+oW5Nt|EZ>{cZkl zmF_{h%59!+liPxH%0rv;8VOsA3pu#G3nw)qs-UcD!JMUW@dx%Lovv<}KwfJ`^IH3h&n}Rt4um511-Gws%qzhPPz?+h?Dn5)w zEb=gmL?$EDxC403+(bo1MYq5fvB*Ox63H)n_pDN>#P^%gG;=Fh3mzIU_^MVToEQv7 z6UXUkLuFOfy!rFv_r_B(PW}n20!OOUJ(Yu81Q@iJtbXU z8jOM;I=*jWe)B8=P(Uh`{5)s)l{Nm|vt2=6EohO4Lr2Y}qPM3XaeNzfNg1)z;QU zMa6=8frg+X3p$Ns!L7RUy989gFXasH;dagd_yNa)hXLfh#heigBco~Q;uTVf>_~EQ za8L+#!v-2(ZH#wW;7mkB3=)j^Mt26qDox1ow* zXs2=1=NSB2I|m&c8Ry|HerLvHfEgwh3@)+BFbjB>7|-AiM~oU8i#8hc_)>Pv8*O44 z1II8dek>7sMx5mFL0ArFw-5y+1M%QQ6XvcEmLii*5+US?fwlk*z~YijLi~)8qm3Ly zi)w>kO2dNS7f(%`-o(+wV&T<|hUob(8N$)TQ49qkC`b#Z$wtVPj?z+4b=W2Isz8eM z+W=$;8Gt0<7>Y?cl)Pv6K5PIMDg-ALFxi1yg6i6YghbvaIAc{3!G`J~Kvd9J97}Uh z+n`|-%jiu83aS#D9;=w*Ky~oDvycaVDvx@`aeQ-A-~lxczv7JNs9O*S%3&lv4Ga{8 z1*HRp00rnA$L@_YGMNlGV-ETgFc~2!y+)(Cay2(Q`)Z@GO@qpeU;P9H0uPWjY8|IB`%;tG=}B-HE2PKg60AWpoWslA~ga>IOo69 ziz6KGZc}T4Y+&$oX|LY|pwmPq;GlsWgsZFPjT=SK2IvCC#eT&U z5*$`hQHAY_oWUyLrDp*VVvlRmO61j-OVhKC$EcIwOmntb5XUtMXb1a02m=T-l^*BVaS5+AE*e$Zf$PTXcTFeuAVrT&2jSWF|jqRa_|myid_+E0B}YJ-429= z|Bx@x4#+BtU%RG(R5D>*%)TTAa12U>B$H-ey?XRqA%vzFlbVG=gXRp{!w2?VDk#xH zcvfwsb-+@Hg!ElF=H_0#mXvxN3JNU_3GdkzS5Z~f+}yNki@!ox73}YIJhPy>q%d^n zVJHyPC(!se2vT3z+qJigzxwjKD_3%`6(PSyV^C1Yh7B7DweZp$;64B;3Uz4EYV?g| zqN}Bf!+yCA--S)7kmt+~``9II;U^xS1)MyfBH7?fRcA}Kf9O4>M088kM2)CBUk9u?b37SFC9ubm6nlKT2Zh+;ZRX=6*Rz=?98I7 zhC_)*u3X8Z8B@;n>vDy{#40XcI$zb$80qi4(JLgsQXrQ#CnqPx9y-w?ZdEAdC(>JuRaJ%AMOEjI z?p?5QV`^3&OY1VyGtV5^y?g(`&}b?!ksnnX%rQ&nPo z?17YYxl(DOwO4blB_vfPfyR|$B)BZ=psNJh==EZLDt{tuup8nkJ>noDO+b;Rfif{+B3;H+4c+n$a&c-82Rl-9*xPNq3em3d4 z|Kh;UJuhyb?eqDOtD8Rce&_qx88K&$zzoe`tO`CkcS)REJ5U4^xl0T5FlWHHqG%>8 zdKXR~(0XS$Ms_v7c)8CWgF%;uOtCrY&&Q z>GYRQpNNY;NU?^Z8zrP;5EbNP#_T_7G|J~L*`!lwGtL}~Nh|XU46mrGJDznVDJ9ip zYWE0;3g5mIy5Wog+^fSo-RPGogEv(=HbrOitm9;`EG^kV9vT zvii{NF_giWeKFf1B+g(^2YEXmJe8?ZsT&&`^-8JJrVY(%Q^L;h>p53oKy?iWhC0c- zT(~d9@5a@ui`{p?XtgIM=IE*OdX59*jbrt3F*_D6Ute6`s>flc)z8~GE+uPs^sa=n z7ooAyoQ9G3H)fvkKy4)g#x$rA?+BW}pAef2wSvFA4}gS_3~&bX7|Ph5*5vTv)*q@Q z8XcXtZuh_EpZIvJ!ZOWSbVfc*btZb>O(k*iK zyuf!{PklEf#6gbJ1+YBY4wd?T5xPJEfhm}d-mL!~00zDucd_(JO;?9F;UkLlaUAta$Iv$m3V5fmg9X5vi1v2y@pL*} zDq(2l^{dwprlbL9U|@rBX8-mGKVRRNq%#^&Fc@e2Jj3EnoKHU+v+uB6Ps98WRpK`Z zG|$LTgAGrnqX1qFzzu}=cK?7=VlbzXwkq0`zbJWuLwp!b%gSX3e~4Tbf7yHM{`s4Z zZG)*J%!Eby)CB?Kj}?}eOLoqSS-j)&u8@?uYmWQ2&=j;|v+TqdVV}-PnzH8bkE{2r zINOkuSs(d@?;PX|OdpKUA)9H_gPbwK+>V>_3f-)snKd8 zb|p)irQz|1VD`LcN5t7{RbY+o363&o4BjCTDhk4AQ%{__R$7~!5Z~C`!f2#U&aMTO z&3Rd8Pn|v`ma8^9yFuO|-z=jMHn%zZCg6e=&S#8q2U51}*bT!fYXF5b?uZCmv2~lU zx_r*enE^YGz{JSK-MhT5{^+?&`wk!DxVCN4I|V|iiKADpaS_xu7-%JM=KtG!53f3s zG*9%uc;}t7``$Ub`}UpLw==Ud(=*#$-Cf>ERV7m@NeD?G-F+RmHMx9C-otE=* zxG$%mTx3l}#rbjBm74jnkcb#9W6pk-J-MbcGwXG=wS_f3T@BUc)itp44+@H$Sz{l^ z1=av(baX`I11Ku8n4=?OBg%TFdD_s@(3V|X#X=Er#b!==^k{T!EHKEwX=p-V)`Nor z8v17iMw^tLKeM<7y$Dp7^r^o@NW_3DN(w-XRAVcVeqw;i!Tc4LD{2E*wKM#5>0qxY zu03gX-xGFr5hnPiihY4sl=#mqMLkn}Hst+;uFmIeZbyTTb~8P#GmqbQwdtK6H;7Zw zCD$)ToccKIZN=pV;NRkikma3A`Inf081aCA&YsefQdP+x(VpJHeWTMXrM%FdswXAqFFnps5|0sdoSavy{}zl$rH+g zyK82l-z)vpjpF1PRnzs*qwX1wm!eLF7d|nv>vhA0C;jafSB9OQI$e)CapK{S=@}xSo8~ZM{y;Sg&N8L1b01PS8>o8h6Pkn$fChvmU1Bq$grDl#-j))$VP@StuQIRBDm%aO|2(Vvg#q`ev4yNzzDCY$f|J@9e(=EtC<>uwYm^OdEtLbLRVi&n7mWv641Gp`vP`g=1mnfKLhV(IrS2ByBS5 zhiCd1*Okzqpbj8z^01CPDkLh4V#j+*tzGOJ@7FOVXbRQ>Q#;T^R3pIlI0G0Q93%z$ zUXb=C-8SeOY9>)SAV2&ib;Rmz0PN6XgVsPiumi8qk%UEcl!St!fRGpst{@+{M+;an z7-WaKg(^k>_o%*B1CSINDoj!bU5B7JSWCWAQiL%ZyP`-t;v%Jh6@k%5Dmh5jnit83 zgdhn?f31f6!Ucg@B2}PaFbe#lg+wBuQ9hWawRFfc;v<0sd37t}I{*@dmcbSTjo1*E zB%7HI_$3gHaH`_KLebR*aBl3PGDpsn>WZHV9a0`=Ergd%+@`CZ>1<3+5F}W zuB*2<&WwzVKxi2<-dHFU3MIjh!t$x#Sv0uo+@2iq2pS5c(X5F4J7JKA4`AV$V79OQ{2 zG#WmG$F>ttwWQ-0))qD6tG$vh0p3a4vf;epL;R$N`S=1Eq=R0Yx?l|^ofsf_pgW!y zAZoTXou7m=xF3f{9nG9Y;9>HI`9o>JaOA@T5Ffu50aqxTg?zjM5Bvxg7K(%KDw`QR zCXbGI=nJkG5OXEf1`F0_hnj$mj0bm7TR;t@Muq_33t{klB8^7@ zK@CwWATCiGa-<2uV0bHMz#TJ$REV9VjF8qd+u+RT=qM`o_roGW0r7MqR1B&M8IcN` zfe#G%EDOgv1 z)sqbPi#*NZ+tuhUy`U@xkckO2Bp&%9Unjx0Jn$1Ul6vDuPB=250L5Tw zoZX1ngCcoA1$j^*n)H>>+R!zFdN3AV(mD$RWB?ZnYvITjBOpl(gJ*Q17bZGJ<7rx{ z7}jIM5?()NKvid^W|Wv8ZRWL;Gt(N#5^I6H$3t(xDo||F1wi3|TSzbLI3QV|yL2v? zVi{G>#5`06ZX||)JJbt+gAW+A;76dq14)AEkd6r`$CE?|V4%ZV;>k`jxXYaR^#IRM z3hG&PUeEj(jfW>^#ue3l>nr#|tJK6~$N`l?Ey2E7jo$?TU-H2dGSR@X0(AnF9;bG2 zZ??=eFLaO4THqlBAj$-Z8+maNqJy##O+sZulH$Av<~cv#|)G;(i!ITS?)kran5#K@PdDejEvGJ`Ts5exLv2eVR5jjeuSbu4E)7u2MCYFM# znkh4Fq9~Rogb-Mc;mmr*Y=R+)=PaCwqbV4tDOQ958?s?(PRHWeRuKm)!NgebdlUe| z7MU}@3gEZAEQ;vrPaHy=InZsfHz42EwIo>ygM)c(#j?C+*0P|^_;j8V#HEUf$XhAS zGn5fOs9|1O6V{bHC>rnvCmJv%;RTh(JiWx%e-v``$y5i7B^q%?Bj{-}O9|s~^_LTx zO4XvkSd@BkVO3P?$hZWZHjV{9DQ5z`eJ5y+=X56RlE1(IvR<5@8G4kGk)Ky6Fx1S# zL|ST6ZozYgWfrG;>)Hp4o>#CezIP*<^~;M34-(U}vNG3~x=!B>XlUt3N=}_$Qwe5c z>C^vd96~lnwk0Jd2w-FLxS6UnuL%>!shYJ+KMiNh z{@(s$48yY;lXmg`{ebax^PxlgHD+O`vtBhjYLS$~OguA1H=d zU|C9e&%<|B&kc6fug`XUWPiJ&zOB8fDJ(h_x{`sOMuUlVa&l)F?FEl0pNLqPl)1XP z@Vvn#DrIPDW_51-sNKc2b#-D+#ZX`O)Wpzfm&l6N*6674b(OMZZ~){6Q%0FHzZT%! zh+B?pdfz_E#fTHJKL3KF9##HHQ$c&2-^p$)e%#}*+yC$k4+|0a;h*;0-0gO7UcVk! zbLu1i+e<>DYx2Pp$zJ%aCV^9Mg?3?YyXWQfPDa1)@=o$>V|{;Z$@Ac>;jj;!z8qI} z1Q!1;w4h|2?K&Rzk$ZW1(^&YI{zsN!-pApap3>R|@cKC;vQ)6I&ls+)bVl8(&;5WI zwK>GYF*^CFLb2XlUw-i94R8Ml7vGS=?9}$M)U1Xv9=Al)7K?uD<=oS(=g@7KSlZY) zq`Y?1(ci~C(ARIT-KD|a-b?4sl-D+^Xec<0GdQu8IrFOkF8R6jhxP9sjlO5VEr4FX zqQjn*!6}mu4*5AuP?{m5+mXNngIX=&y`)CU-s*#&cwVQP}@XXM!Q#2_l8~8 zfc6NQF+;{z{_nTXXf$l?p75`dX0yjM#dp#U*=6nd5H z$#nA0yl_6~T<^j(tcEz;cCg~La|V=B8y6edI;Z71TBBO`4G3S+!<@)m+0b_B+^PDC zg3w3VxN-yVOlwJ6QR@`=S_HjCWTuCPvvNxC6UMA*eQnInDU!BWDCKf&WKj1&--E4TBh5325d{6MFPgb*UJg^BX zxl^G`f9u8<-D|DB1%J9Petv4j@?AII(9o!;2agvQ=c{s43+e}PM+8-vH`B`Kn5clT z*r>3Owdr2lYu->I6|}XrJcx<*^AF80Ya_*zIrA$5C@iC+n{Gb3e)r+^ zz|=bjybq19wC9aQyzBa}*B;%r^*<0^@Cd(@LdKbv@%Rrfza3keTHc?r+jUP!{yjSn z+l+=vRC8Wr_+j^?Q-=eu1Uz%x;rM>;L|#zNy{jP(x0BAicX3bOa(_zAMLXZCrR}+q zMIHzIPNbA2dd3D&xNjtq=RH=ucFvgb-Fb^ZYiCBs#ztpWKubl=v^+iWa(qh3z_gM# z8&)RACx@n&DPAz>)M^S=82Eu@+~X2Vv~j(EcxrNfjpvLDYX%?_3>53@Dp9m7&drWb zEv_gu0&kpO*Xd#2X0a%hDp&}aDb?7}z{LE@rMvgn^d_D)%}>paj4bIGGec>|#>U5H z*PtL$k0EpB*8)&i!Hka+4D`gXqM>JXd{NJdmZ|3>p?jnDR;mZPR_9IlU8RN0dCsymZSjr!8IWv;r#jYSFT)rIXnWnfGWXR!`XZ%+00qMZ z6KEb$P@=SC#3Eh-2kzh~rM4B|_u4u0^8u;{g^{jXvFZK|15&fbl<_MBcC65hI8S1M z4&-A*fLHAc#v1ge1gMt8nZNwM0VVv>I0ILne7_8UeTP+u(jfIs+Wc}#F5|C&l_l23 zv{jQW8{6QF^gV!)kr5ux5yNyyGQTE}|Ml=I zE3=GW6eRtjC`zdW&RD7O4SbC=YPA|T^Kxita9}_(Lo#H%K^O$QeECxPl8luY-@+@- zNUVZ*65#+aNXd}#rom#da2&Ud^^Eil4cxUQYcGjBGGx3t0L^C@hRn^j!xTdT*91;*WCemFY#ek1%3n>QA?VM9K~zzO*7E-&EQ^9?ScRbUJ2?DI)x5nBuBqM37%EFS8ZfYj6!wvqwECMO46j<8g z!WTA4M%I+2Z~%!jKXz^gVSWT>NG6z%%$Z*np#IY9Lj+(&1I)qq;3bVgVt{SSmM&2* zqJp5-+$+v}kC8NNi-BY%6_k`762j~-FewCh0aaK$28i!t^jMuZ$t8v0!TuKwGt5-nD38<0AFi(DGISjnZbp) zNRD6gdgDOE0m_C#0HJ^$Gx*Qmptpwxf*%$X1+)rv&H{Zs2H!Nm6Y_8BP;%1gUJM8N zWF-$+qyY!6Xe6<38uBlykTjsaU?Hu5y*s|eh0Ovfb1Z(Bh@9@imI5ANKIC{J$w4ys zaTPG6{V*L!7=j@g7zhUWB4@}jidHlX7%OL>Oqe~X5>kaXGaP<1fPAzFl>-uGIDr8l zl0FZNz~E^YyoDkX ziGdr`l=xU9N=6E{0dfF|gv4G1k|qDck7N$OH)o(kQfhdG+szK{jRA;Ev~Z%RVnoIO z!o+WiC>haW5#|1{#6oIE&UOns`n$^R!uj*vrv4b@rqGgH;Mw(2(%kOMinSIG&AT89vR?7LMKoQ zQ8Y7fueXRMs5LJx>BPx(aat=XmH1IHkrCGn;=CHjgrl695|@?YxL#x+FY+xUtjQ)` zFK19%dXph7Ir&joOwfbJ4^wlDMhe0cgRq9ie#iQR5de0GNZcV9w$h(rP} z2qRgfq+Z3^Y#8h*kWL)OPERcq6qJEKc105F;6e_mN?8E5l;pP$=%JAd;!t*XLPkdo zC#u)kl&eL)ed=k!GL+PEE3x}U_KS*+u686BhzqnFC~Qe+2RkJ7f(^WANBMwg_npq$;SfXqj8)o8n(a2G>1?)V1PRYIA_!a~G$4 z*J1sd37W>d+&PwZy)sF`7)5@fdpXxN$7?~YK$??}L?Fi@3o@a?z89*(p<-7zl~yz~ zQ_@HDAQ-rV1*!m7hyvkZI)|J`HuIL@A$_`AiCfOlluo~xU-2}lJRqvV@p8IgQ6LZp=pZp^$*b)VXVZQ zpbNuTWDI2)7{+mToT6w*4kZIDfs_fr5pJO*kUC0>WhfdlVNr%=p2dJ1II#HT9V{#u zsRF-kKu3#HcyTMHtI%{4xutqJ6D5An-UecMhCe}m=>+77B=1h#BF_|f7cuHI{m{;_i z$;7FQX8dFfYo62bN+^TY%riKDfsurpS!_Du`d>ctf8W2RgX2t4GK;v}IQ49w$JtJG z@mM*cnORNp!>IVQvdG6N&^0}H@G$;iT32&@XIF33!}O%o?29hGbBps+K9;?lx>5AT_Y*?{1%M~~9OALZy+v!9<=W@cu0 z%ZtF!xP-KVjFgzJ!MU*DXba1xX6D8vriaEPSJk#CG^#5%FDEA@N5wp=3Cv}o zS*o@(YKj`#ui*$6KjqE0>Bs@cQTW^%r+jE z5@Y9)zx&I8gSq4N!|RE54~_*^Tt5-J`*_Nw6`|KJ-`(lSao4O%=hFg8MttukxD2x6 z&e>o3)~EH)mmKu`gHN;Pk&yQ;K6UfUOr%-R321XhrR_-?h&hsUi4*7I8eLCDdM&X_ zm6In91YKHWa3E80Lwke&;Xz%dlAk^u{i#<`Y~xDF)%ZPbFK!)*cbHe!-7Y?DpK>y$ zGBCR8;^C~be$U(s+7j+P_w;%eJfN?*?>_+R?GtuQX)87j5tT;<%0L zAL`cThN;Yt0>A3#^e~QbWM(Acb#g{BgfpC#Gcb!})jGw(-27r-Of2+wUV#xE-NP^o zy?WbqPN|2QIJ@0lm>WEM?qcuo+}!M}S7?HsX77iFYoMFJ^%wLM%){u=sa3wbET^IN zd3;<_drR-)!uw!+))_eMRA>LveGiZB&UWwE98?$0(h=L^ zgG$cf^ohlV(UsM;z_@gnE(2p=ShUvQHw_qZ;R`#%NNx&PDsD=`hnZN2`< zt@+`f1COp!Wf$YV3~#?3(R}Lzw;MC6!kcMlE|*<(efBSxA3cNtB&y)-vE)7RV^O>O zZ&3Wy==$^j>9;4R=c=v$mrqyAJ_`Bo`xEUFT5j)g`?t%*j&>=>2K8%;N)uTdz|ao7 znMv)5IhuTt6=wpguAPg!uMie%#*gptIWb{^^$5(WR??c!9!tGgt*<)d`EHlG?^5R8 z%TJHBD2gs*zw@Bb>#HZHZ6Dk;2$SyVZ{28!T+^=Vn9*y6r=6eK-Dvap(BrhqxV)fC z{3z()v!&<*PQOd*C~I6u`P|QToHik6EDQ)h$JaSTe&$)z#=)A`JkzDkJrr~h)($m` zsc$*%>{kr08;brIVHZ>5ddB-doEw}y8c+PuXV)MFW2(rI4FgG@ub(rxMs_5A}T z3pX_~77!5I)Y9o6>;;?&i%p!GTNaH=H|{#Gu=qdLy!|}qCVKZCv@31w>1c23=<3xO zDgWSLg&H^m^EOHp)fJ^V4b77e9>y^=<>BsMURmGO(b3k~1?=(+41yIVxOaE=2KwEH zkgWr={+>Q%g@vhw)iA{sO>37f-e{j=&R@BzRnI9D>&||W6mSOj72gQJP>t^|;u_>- zc*$q)h5zq&{5&VL$)EZCAHR?K>Sk7g$y|LUc2{Woov>!7gMof3s?qt$IlHXGm*f9i zcvS@}YU0bT*`@CFt#h)E_Y%d`S-Se)V;t)HgPoszemLj!(UeOEqW|;3$M3mh$4sdv z%bRcPjQT2}qs&CM(O`igiZdxa5l50PSj6?j#(O8juFbI1MN_wI0^vr9mIWF0If zelpHL=K@JeoY9-P{EW29vPz}SLOhYrPz+mNnn1 z$!`+4rOflV-DFv<8TI=&mw$H2DKZM(7n0xo2d8&(`$o-T+m-0AB3nJe>)a3ddas*W zot|92ka;yB_wdmNmtN{y&c`3LOFY{!pJj7@Z|iz)`OLFFx}P1NZ%t{v`L^qy5<4oL zGT(W}`42Bvd)lV*do+*S8^Ub-ZtH0p34_}(3mILp4v!pp3tKmmX5;+r)*m_y5i1os5=Rvsn>da@8*KK$~H-e701pDL?t->eY-e+M+BUj_A-< z2Ry&wlzHZ6k&|nNcVbuIr+43LTx}|zjj#*7RJ)qJ&*|No+40`xtj|36_frN)A9`N6 z>iM?Qk^8-CTJf+LReL04UqnqIZxq$0TDyQ9;qBq|(~k~^x-L`8I%aT~YQB+q#x*6< zgexvw5m}}AlW+z)G&4We)!jce#Rz7~pbZTQcJ>HL%PoN1b8<_TR~10nnb}!yZ=dj} z$lLcLr{)$Zqb@Qy$oZaMd0nfSrK>6`?%j`2YjqIP!qXyeN{Nr^?0qTnJZ)4)J$QJ} z(?9h|4r>-tpFD-tzhY^^+tcH&i~HjI*!aX!a#DtwXeOGrfi%aLu^awY0{Y71g6pZaj7yUD26gnUNd#d?2T& z`&m$WnvR)Gu1b7Vo~G6fxjpglesVXaG%~Uz#bBNsX?(Vj62_D=vxI=K;Sa5gP zxH|+31lQp1?yf#=mVzm|Bg zHtYMo8~4C~@QAll3wH@KXG6KxP>kU4jkBziyIjW_=elq{(Y^2HtCN|fTgPAi8NY-g z2UNQsxff=SEq_ioGh&4T)T%7Ke1L846Y^T1b9)04t&)!4+lMKqOJCn-rK@Q7*4*XV zb~3j*N*Aw*<+qG5KhhW34WSC)HIKf+FZI-VCa)U(3B~aCvMQ~stE(;jC(IU_r~S&v ztIhf|fpC$)K_Z@3?~yg7S^TU=>AIJp1}lgiP>UoA?xB#Na?>*GA+=^5mxzQP=!5Ly z^|z9{UTU|4fk$^woJM-jGb*ewm-zwWDdS(7F)<;{hEL$gip`$_)vIaKm}2xK%A-K;>Q$-I3*y*f>h6WeC>i)tL2(@5y`K1N-Ty= z_@p-iz4y>D?JFqBS7prD#O)(-tq}^s1Ro=AHAf-yyeBfqTN3qDZd4YHh{??SXJueu zP+9X?UXBUV%YO66V59t1cqOI$f!c&vQ~vF|nKBk9p>h)*m$l&EBMVkR*npO8Gno`C zMa>RVoKmP^A%Hgs3AURphkUAJoprVw664`n^g*=OA&d$@p0gh)Fiw2S{73Xr5B48q zc96f>5C7E)R;wIB!Kjqz?Ankg~~>G&WZqPIB2Gri;{2m!_#FgV^*9!kvC zT^!>86O^qL;sW9dq>l)pcnV}TJ`z#yMqul0A4e`wN+N_5O<={aP+}#{at@$r5*i9- zu+(Y}2+T!#6iX1n%aPu7q#f*?&6D(pHA??Q_*IJ@sB|gq_C;aUv5z*(0||CO>Qlun9*RLUBORE~nFpOHfM8>ijB+8Gvoa68qkM2b^ z_Z<_02YQVh&LBfXoa0DFz{QMbHUHF6EGR}6xsh%c<$O0XJ%G<2Ie_09iz2LG62o{W zLLv4L0x5#B>?>vpDLvp^mk`}PJT^f88WR0p)J`MFDj;3-TJ){IlGqO3fSTDT-(RDu z0`Rano<<7y2Zai1_D79oulILjY(_3zuMgyX&bgf?_;_SM{kRo*<}Gd?78D6ms6zg%@pK1Lz>DqUqSSJ;#rD*hr9RN=9vu6;rc8Bex=W3<-0-@y%`Y`&1) zm~cG#swKXsJnURtTwlLJEN;LK`bAYQC=4nE&CFml(OY*ssQ#t z?dr|s18AhBu1VVF7bNJQW<%~zC5j}6O#RS&H8Z}R7dhyI9k zkRUaMl;l8~u3nX77GXF2M`IpuFVG)+xGB?{=OxNG5^qBWXq5?}n%S!2bi{l-2>y;p z$MhrW?%P>!tDFHv95Muw2KtwY2mxx$f8o=Xa+Y8;X)9$)5IpU?igCy;r0VWhv&(8H zNe=dJr(^`u8Ef*d4Gy6k$r9K(LQ5j?baRQ{agZ!g?tQv{tQZ&gVyJFG=OOsnOOM`Z zc2f-W>4=np*dA{>WDur}iHD5(j2n6Yf?5__>{Ctx9<%KsdrZhvYL{>ls0M*)At?hi zaAz3guHPX7B)mYF-+umTE^yuqf2YD%MG}z4Wjux{Mg0R4Yl)8ouE8O{lqB4g9sPJy zUjla0eql@|C9nAc8VQ-6;+~Ux?p;xvcZo`<6poy&@+5 zTYN}%7C;zS6Z%3_tqq{dG=;Ef@S`m#75VaRJbVG&Sa0#QXBYlB6bdFDpjPK)?+=ef zH4uplYmFlMEnzPg4JJZ4&|*gCn=Cd;-f%>o3U&iXR1mWVDNjT9p54yM}c_YzUd)p@&% zp%@5pA^R$S!7{9Y34aJx4W9%&FaZS^s-m;UP|}Bz)tYe&bP)}s^vKr=&NQb-dqZXhMhM!JgH2*qt~7&`g*oLf)TIp)a}nFE647)=uJVjw zKsfk8NIy_Ub-2pZOO;@y0Y?%4OB2gLC8oU2YJZofiy;b+CI*g zsWG#(kk37lBv?0iox2 z^x$Ah3TFjyKBIW#7uDY78er0acx7d=tG)KKFz(o4-`G-|c0i0lqydGZEQC=@PuD@9 z?Be)HdnR2(c9IdPoPh|t3L(@gHW@K$-J}7i~#1mQ3*frBTeYoB@nRxaLf)uA|g@(jyP(X!nTd% z18_V>bBa-U^(xQtgZadw(kupTW(h@!SragMNlaivI8^Evx~I!6*eon39OTqa%)^++ ztLP;ZO)#N{>hH&7n98u*=)$dHm~Erql!O|*(oc5#Eiq)7qv5v;$YP!H4GAiG(+ElUezBw9T-_17nm*2ZJ zwVOCQTKSHQi^w^^VmSd#VUioP@Mp>cS929a_sJl>yKKWeqo@X#*VN>!ZQ)V}dgGB9 zz$0`B4E3JQ=H)|&&Wc9?(j+F~nP7Sg@dvvju}v20STC zJ=ihtY)VkT}XTQK{E82tLmR_E;3^)P;FI)?G$+<1_2!NcG6a!#wJ#%{@L z=7wr++$-+;5#r-uLobh&GgP1{wJz-OIGRaRe2TVWczJtw`+6w%J3S@kD&gGyJ_`XA ztyb8LjgL>E?(!OIg*|LiZ$b z3|Uuu6Z?-82{o?mgapASW0;9=?WT?NB|0yfqUuE3Xx(v?9%z7*#tHGGt6s=@?$)rq zv|i_4X;O*Ql|G7}#`oYCeu}>5*UgcN==TnzO3y1@kw9-m@d zOyk~n%ZQEXRn*y2?po_=pFFYFx32<8XtkBt#)p>;b&cYA^H;SKlK>!79TsaOM> zqf-|7sHe>`20LbM;nk;QgD~rLUm-)Fa04s5k>Bg-Iu`d&6Uh4&!!mp88-(jm!6|&f zA{_a~`N2s}LE$Mi&gKp3?Z;s8l)-g$Y?Pqet%svxqoKuVb{8KWHa0rO9cXb~Jj+0+ zNg$u@kcQVsLHoVutxc&7y7LdCpwr=SF_(D|q`(8Pqja7SC>g@*`3!XDIm1PN=b#JE4t~P7x>bLSNU#`anW&hjI(x98g z+J3j}%1={g8CUT2dm9z}F>+1B-p3tx^Yt`JGBCbBj7F zb{^pDCa2uMp4ab~Gve8=7vr=rAFl~M5++3AEWj=x`V%Xhq^?TAQbSGC8M8}V z7vtpEitPz>X0T?nJ6LDi$GrU+ckDVj$et zxc4F9_s-k{>iG3qq3eMx$`D&M)~R6ft<`1S+$#y?n#tLE20TR#F2yqem)}3=NEi9D z)&r`oglw#ZKXm~XvaPvHhnNV$%HhZ3rHKA$tG2`@9OM_C;e*B<1sJCD24U?D9qnYp z%Pm?iwAn}~NHO1!k&!1}YxM!@ zg7Qd?$;KELIGw9|ub`B#8y^3g)s)|QFV6R#issLdy&dnhn^cwjwhe#$ zo<7y@x{h^r0?FbcC*+y6bTnOM+g8d?q7K0g@p}zaI$PCQ*=0`*;K1VIaG2@2SM%cI zC+E$m{r#Kxah*HyHZF^S%U> zCKvAEbl>Y*th}+dnD0uX?vmsOQr^5>-Tinxl=jv%@raL`I9i#i&0cSJy4tLqx_}dY zzxx|@<#|Wega-`Cg1DW6C2H|gk$d4EH9Rp{w*)hEDL|SZEG{lUGiWVsWTiVYg(tXHu3a+tmbvx{y+!z?7elr?MOPNfi`P)7rQ57CsY&!DI zG4e_nDD;rc(vHB~`}1UvuO98Z`(!gzQ=t7;y=Con2++22f)TjrfFR@7Ik72AF5*5y7w9^VFr zAt~rH%`eBTZx|&SF8^Czn0;{);AgiT%Idh0WS8GKWH=qPV8s|HwXY|LE5T_N%3tU|9Ci50UYJaeH0;aYgOY2_etNBpz z$M(i*Vdx&7TPdq(t0u>F;R>Y|cIMb2Ke7IUWpDRWaRrNkqPimeP|BUR7z4=->~}A( zV!xxbFdUq|s0tGX_A)E2u!vKzrr}N3KfUa9QiO*)G~}si(Faq#595y!Z6=QDncmXR zqscrVj+=rQ%T3 zs*$xdtC-GeTQn9R+51DP>&D5AS>ZS+B>%#@Ql3=WAnq`|tsmw-xhu58ZSVq&7A-X2mW<^1|=0`+E zM8L;@9bQlGLR;}asQ-~1a5Eds*AAm{V@pz-bGr-+U=;ql2aVURmH1*4M+!GgIek60f+8 zwkU>XpvHvO1QVz<$*kAx=&p}aX7OvgqK$9O8O4`_y9=EZ10Rpb{d&%`W8LAd=pYDG zwNR9`CRLTD^{?+v(LxJaz9$aYU`TLweHZt18D*kYH^xmONC7OY=jI|=s;e^hSm=2V z+_6Oyv|V?R#SNV1#s^GiN@>j*Gw@Ln)R@n7;h&!)xkD&-Hd)!9#?#rI~5J`6Wj9b%8-Hb z5$;&HkU7Z=OCH*`It$D?w$QTPoMrw~{c_k5ZkE!Oxb8%m%UWyXa!~Py90x~LXl{w$ zjfZTEp$hBqBGbTRCtIlK>p)WdgA#MEm-22(Tbq^e@&PL=+rL%im-m*+r{ppM2;FKS%M%=n0LQOl`*T!g_12_E0=h~tf{M_ z0VP%oj&HQWTkK(#dB(QW8Krk%Ib71A9cMa*ZIcecPNuqM#fllgk@e`P$qvx(hc{Q%9|49c7heeoo%OlZtlygH$%YG`vof-1@VK=1 zXY1-Lp;p==7Y81$@Wm<7=$DF_6YM9PyADba+dkBBDP3|E#jHH7rrQB&!&i#u>hNt7t6itt>&DT!s!7-S+AX zjDr2#rR+qt6-7OVHXk4RO%+9R1Ga|3;IeU3%&;}$6y$Y1)V!UgB=i~N>y?=twI_Nw zD(pafg=SQpX7!!s9xiK1b8Hp`hvh|`GwKbpCSE#=*~`~#T|Uhwrj-rmV1pqV&RdS? z$xC9SiCMlzt=ZK=?%yY22c=%mt~B@B`bu6a7EbyX>672*u4*lfMLGV`Q)bSrrY`aQ zTv>?IooLo5_QyAak!UgFv_2_om{)I+NG5oasFPz*c8?ONsc+o%R1tMFd%v-wlw+Ad zKG;9N)8Ja*autIl(br%0lvw^0r+g@z*M}+~t?Znr7>cRdb|vI=!*p8Sk;Rg}A82x_ zGO`N^Bt5lb(14TYT{9^Yy<{`hQuu}E{f?Iqq#h1u4;rXBC*mta^T)@$4YYLB*Ovax z&h*q4U0+{k9B?9LR<^V-b9WtUi$2}XnHpYzL_M)4(hN|M_p!eVGI@UOs7L;5uQ&NS zEuk}|y*(o!H=(_@HFre2r`|wWN3f}OVPWBCvZjIlOE zdWjH8jmo%Y-5ziv9%yUOv@S;VWz>CCyZ1*D%4Q|DGU;{#!?(BCR-2fHG#CwY%2RG| z7s?kvzbFKl7p}N zVAyeX@2 z7f)Anpqnb9wK8P;2VXf*7~XoCsoLw6j11fJ@Dr9PG(ov?)p~2}J{ASJQdINV2FwR_ zAKwO5!%~0VK*0YTK2Hw7;pPeY>CD0TRj9L6S+tE(4b&N#Zm)1$)m>C7UDAC=5*o=KF!rCTqG zf-dJsfJq3QcVr0fx_i!tnD3z^As*ViUvo2l_ps6UM!)=!ine>Xmhm(IWo2rH^cBD; zz=c;%r3FStc1A$efx`x@#6dq10lr8_pbx&Ib3uW{PaR(VI>ClOLUu!m{y-%?lyzF> zVpXEx2}jce%fs>^F_Hx}V8hbO{H-ST;6#-3Z{8eme58uFrPgroF4F6UT+*13j;QAO zJoG^H|0xX<)SI|XepBIV2sO9e)J<@xKC;E^LS6dVLC(Gl{Ip8?7{4c=yk+(nKz$~^ z?N58?p=TmQ&CsZmpw0G#lfh5Nd*q-aKW~kYUeZ#cA;fV%rh3Q@rpIt17k%@cNknGz z;DhdSIFu=>?#nmn5I2d(IzP)HLWlf_#C0>asrU0h%tlV6Mt{V*291z~RL0)lR~k5o z;)GZf0H_$`A<7HL7Q}1;ItdQQSma7AGZ=e-08p;HF$f?XfDPq4a)esn3-cjXt-y~U znU`QQjqt{!Oc0|wzs%m9NPy_?0fs_%O=JZr-*;h(=u4YmLJ5dskc((c^s8ZnZqXN;%Rq)a4jv&F}U+Uh-QG$&7$-LPz}C>z)r9UU~WS`fRYXm zY0Gm4g!^TVG{qRiiSld{;5!faN1i4f`!KY6@SHX+fD<4Y0A`I+uXbx z8zzk1KS299T%pV<=lG|a%sCN43B6~tG8XNccPFjXNCGSDX(x@br&pwt=US~aIqhpm zR@gjUaS+Fs^}rz`P%_Ijc2fL~_Ah;tliXe%E!3n%Q?9ZJ4^<>Wyg6*bmEc4v*Jo}HB96g70AxO zUwVR;;iO$$$e!B#VM4vg@apwxX6duuM4lAzgfi3dPI~5`X0G9 z^uPGJqqSKn^HpDx_MXy8l(PG&3fv!11HIfD?geFKrY1dc6Eirg=5}tojgPFXy$w`w zvr~W%Jk~B?)e4ouz2t8~Og3dzSy{T$(y~*s3QXlT#surqGjVLSe`~MhBBM}f&Sl(u zb)3LnI+Z;Zf9y`9l}420BeSwIJ+Jb<2nl|O>IC@O?(dDICG8d;MWE?Q?ZaewrTk92 zqPkJBn0r^NL?kSvb>6>-UHm#J5@)ec#n|3{2J9!|{n#Q2$cr<{^PRSN|UsNgV=jLMbBe#vMi;7`~J&a!tQQui@qz$f<@W}qdB2Hi4 zn8uckSitRIj>$0HEXZe-c_V7B^bXGL!m8Z5TG03G)b^p|YDTGRX@iILuU>}lc_nw! z$kfEh)^mj%5F;Q!h}cBH<=D>pLJky7cZ}5w{y3^bGEuuZLP!`oC8oD-TYtai>ATT9 z_wop)9`rEi+{X}L6RO+kXqv6Pc?-<1H0%)K?09}RA1X>oqV_z>KC2_jFu(#8U@>*q z3;SN$=^84@%3ojQyX~lz+50)t(=?45>v)MX7T8wHX z;yhfc43?Y#B|EmtI;1F#^WSf`%sEj6We7^<_sr}&?$(DNU2LpcoQm8R4PKtqZPnE$ zUcApR6BFNGk7yH-qP_wRUX*yC%*njd*!|o;1>4P0ooP#T_5ifMK^^Bl)fXOOqCUf! ziK&A5mS_L&oQvx}4+{We~eC3O}RdC&?S$VcDIqe0_ae2=~)CSbNj23Dp3Awt5LsCX32&9o5g5&rM~)t%ZzxT{S)z=VRF=MZ zKX^h@pE)#Nv0l|geO4O<-D<_j;a$MQMk|r5c9?i6{7(LOjSlirG`g!ytYlS42UEWap@yoccGbgpfL+@}6NE|3+?5-s@_{Kubm>I|un*I7S6c~OscV`j0@iw@ z=cMaqezr!gHT42FXFjMVKA&6k+6ucf?xWN$zGIB6U-m}xnsF<8Tr5G2__ut?iXSrw z2T9wZcOh3kaQ8GRjo%AGNW0DvGp?>(>Ku`cTuywsl}H_VT-iBDrtUU*{zM|&y&qe} zuQ#tRemC>$C#QcO>Cwfg?k=_%w8-0uXYZlJVsCtLnEB*7k3+--B?GErQ`e3y_fYg{}lVvU07Ivt7>!Ja8N!uv~G{e8GfJS}q2d^jCtd2t-PJVl?zr;g~Of1Cwu3K4Q z7kfwtu%V%GnVp-5yWp$iJ$Iq?uXFRS3onLq94^0*8NBaF(7fU;8d+Jg4t$<_6y38O z!t$jC4ex!tE={fM_C|ZhW2c0b82%8Kvn)LgoWn(wXl4r7POjBBAWhY>eV7bwrMx?` zeTAwfCx6erXy`cDdMm6DS65hjy}dja^v=x8K;zXLW-hsLY<0UTI=MVtGS6;rs;^B+ zOLHAwP|Q^}=<;}OH1|Kqlp{T_J<8BABap1GE{V(E@VeMRat8}7d$Tey_}GA-&q&}x zi-wrWDX4}I`j?TKGCLHry4q@a3=J-CFSjU#AbJcQf}UTz+%ML5wn#fahD&OHuCjD3 zIez#KOOc+APcp34n1qG7Z;HNru2_`sz;!&9bw`)0X5U4h_9l~qNu`Vqa8;(Dwf9n` zJLvK4LFnl45LR}0XM6*r$|M7$dLsxSJt4Fvm`$0n&+*43Xxotpe_@+gt`BkPTOSCj z%;I{Gm(kh-f;a{n%GxDz=MLL;+k>)C2Rbw_cOoEkn#B3>n*V&vF&Y6D8o&JVOKJiJ zK0Mj4FDdQs3>{40bdfWbrGGPKun89L9-`Po1reD}Q}=20-7p5RcsQa*BMV7pajC%O z17~+7=&-3^r~_Q_u+vREVsjZG2UM(LoEkPg*M?q{Ccez&#N>sHco4gu|I0L!<)|hT z21h7LIieHs!T-sO$m5iZ4LC{+>8lfqmXT7CB&0~U{P!oHm(sM4y?n%!<2nf;FB}=F zciTb$MOvFDmdnX2viMR^0`(cMBO;(zg$A)evJVpDBzU&*f4B&Z1wIw#>Z(C zy8ghQPB|n?t?0zdkfjt2Oj)cy-L^%?rmJ(j;_2+zC|`#AP%$A4L;8Jq0iOO}ww(pR zLJ)R`<5!TrU}*3a0>XH&e^&aXzrR{4v3KauSI#_x95ZQKFfr8C)9s`DFm+73%pHbQEjj@6 zv;=OKQ2=R4_YmSEkQd2!+Ezr5;SvG|gWwCY)@1^^=Tgv}lvK4G(TYWrPB;CsOwooF zJo$wi;aZ$u?vCtqzZo=P=IIwVJ9Mg znp#seI0%O#wH8R1^O>`2^bCTK6;H;v+|JgYVLEzdESJZDZ?&9u~C zyPJi^W=kb5mn&ywfmGFKwu4fvrC7n~NKmrueFM=|(w$Cbf!@)Znl^+3shn1={Dv!O9q$LW1^33RL_^L4W9LQ-|UHynPLevfsEOPW2k8K1mvM0c_ z&tHE7X)fbb(A_`QD!|p1R^%P3O-|g;o=O65$7v;KQ@9k(WtmC~@iv#JMHKf}22atF z1Tvnq#Mha4Bcwib)GntD4xVn?Rq3Vb9YbSUGrv8`mi#2?bI>#rTPkAR7KKrn{@@gf zh4<$8XHoJ-V^#wBP7K8OtY=o@e<7~8kpB&C`LkaG{Xdy5z@hN6wT4aHCj{1>w$z(O z`T&OQjgE`Ed4$L4`80~sKy;0F??kZX&pev&=BsYuNiopVMO oDpWkV_#m42|3Q|aa-@HdDxI^-7x7SJ06s4n3B_-fVxYkP0Lw^Q^Z)<= literal 0 HcmV?d00001 diff --git a/windows/deployment/update/images/outdated_outdated.png b/windows/deployment/update/images/outdated_outdated.png new file mode 100644 index 0000000000000000000000000000000000000000..761d9066c2f52ee906c9f086d1ca5d49f3ce94e8 GIT binary patch literal 61088 zcmb??Wl$Ym&?fE<0WMB(CtTbmxVt4dTqL-=yE_CA65N8jySux)bMfWP=T_~H zshK%*X8KG|pQoQb-4m{)Ac=}ZfCK>nfhsNaT?GOH67zG*LxB2h8Ro|;|J=cVMC3&v zAZlWfUkzbD&k^mUv>hQJ(0cycAivPc_FOr6Ns znOT|HzFm`9Btt-45KDg-QFGHf`w45Hrn#V3GV1bT>)Oh(7H$NKG=Hv9!fVS-}Sa11&hn?26mqq!lC8gvQ1S5SCNrk3u1zY^tXjJV5G$)Cct-B zf}};NWW-ILx7bjV$w)Z-L&N$B$iAbmp)mW%!#TICc#)Y`(_|eo)S5R`{+(XGf|0NW zKagmNB#wTE!QwjgDmuc=X_CXn)0@l?%D^Cnmc~B+rCf<6O-3pqxI=SRDoH9+!v4ZG zC5wfn(v>gDtUOYf7Nml*P0njh^Fw(Z0|9;U8$T4A-wTFvp_1jCLkR(vnkaSgeB3uW zG@^OSU?`Y5Vk2RaG*dkPgi$cPu#F5|rkEEKHNC&X&|Vr@P$K=DOt22}@enzG3aLUh z3a*wN%_~31q}ctyDpxT#|GSm_P^d1~5#%osbyZ`0MDu1OX{er6+!{IZkODu-gS5C@ zEG)cX5$|}>ID}%>+8BJSDT^NHLYWd3ih4V}f*vU;gErW0as)kp>~uMLuE-#SNk9Vk zoG7`bvkxn-U6y30T&Q9-CrlQFMA@65YtU^CmY%@qPqHvb zf;Uwes?S~4Ax3%esL+7coae>gNtVg=|6ZnaBD~D*!Eux+3dQAYS*TM1*P9209aJP) zx^Pl}6fMC#M{9zwpFeF`AIGMJRxbm2XeW~I&&v9+>sBSvLSL^Vr&==IyA@lfd|Dt= zp)-w^og^W4JZByR@pSXxw9cQnUehKjW!hYRox-M{h4E$eMr2qjP)1hsmeDXn ze~SuLk|oGPa7>V*b?B#u`L=NP0-Wm0^*;5v77UDtiHRZRbEymO;|(rXSK0^Q(j^XO z5@i+17?gYws~xvi382X^r{Uke##OaS!Yx`zlF%pnvG?Ba};qTG-u;B#7Zv6 zFDZ21{?k8Oq!1pnT)3$Gv{*?j5Wi4qsNI}fQcuNb1bUh;Ck0KW@q4eV1tZIp(sPyT za(Nz%Jw@VmueW8ci49Bc@%~O}jMRle&JtzTACDADTVlkr-l*Qruy8z_%t}sn=HPuV zh+wNZd1wlPPIuqu)t3DEbZ^b~&@e(*mx(*^pBnsuM{~J&l(tq@&Q4A?mX}k*ef9mY zw_LxlWKI9!F)`rH%_Se$IHS&&?r)PrO4CdXe`hkSw@wGeE^6xO9-e7#t|Y0d>=P5@ zPy7GGq9T^d6f}01cCS#;uz$0xY4mh!RoYNm+}S_Q@;O#9_5Nw@*7TzvVO3p)2Xz9g z;uixwowL(5)*PoxU48#~#4@3;6n#8zvnNLhDqQf^SaV(4dT3>)>}HNfn>eNQ#Zj?E zx#L=Gb74vIpN5Iv)%+5XYV-aR+-3z9i*fGcJ)GnuduAXlV_S2(_i4!emkO2e?+6-Z ziH9!nAu8b+AQr7!ri(B=D!$}QoO&AN0@Lo0-xZ!$eONJCtb=u z6@eDm<|MZDz_55a$9f+Ze(&Jls2TR1(dEXD38PrsUe@HhiK+YjeqEv@Th$N>HC3+$ zms&HQEv##0gZA0}@t=9lat8$NR9z?uhCUW4dSy@n2tL@>7O$bnR&OzHUPe1mWAI|R z`OrvD!%%sAz?pfXl0+v26*asqA(3Kni*nEi#Mne}(FMRaFs#<3FR<)JmRT%cDzl(Oreh;H`@y_C zEl(*N5m7fGXR7cqlr&cN5}F?v-*1ey(G1ZG-EL*LkPnO#-%;jy6q(QP=QAt3*hzKt!wOu{}M=uz&7?bELA15CBc$0S(^atA~sfqZoYXWcL|*$TXQul$-$ea+jVGB zv4%_K2wvuF?j|6ok?ly~+-`~C1{zhg3jF2LKnhyjH<@bo|7HdJn!R8keZJDrccZ-4 z3{YbAPxM_^<^4aX%=F=I2V)jC{^XuJShUeMC;g6y(sXR7)+(II2rDU7KlPP=HgE8y z6xBoe8^TgSRg}-qFME!|Dcx8LP3Wl6l(!`4?w=FqCzWy3Hb{sR1}bV|4ST(lroU+fPo%6BX(y#6#Y3s`Sy`;<`YZ@g2)l{TCR$x1=zf}-pp~K^4DZtmT z&omsA68%LbZc4coY^H`wdz;I3?H6^9fO?YnulAl| z>dk-4WSzZt2^OvAot^IkLjHkf8@MZ)e(Mt8w1no-#aCOjCxUE5l&!N2USfzD$CW(V zMGN5@O4Soi7n%8fIj0P%u@?$CnA>(;z%=WP(*Mqf_6C(ZF%?_nQ~t@Uo25&wIyR4( zv4WK!&-jsP(v$Fz^823ooe3#RM6;2P_x02QxhffP4ynJ{F}+)v&kvYAQMu)6L8ns{ zZxzI$yJ)Rb$Du@xt+{XN^L&5yX5mhsr3afy-YWR%ZTUWDLy0IN0dx`EyX=Z?WBF#a z`LRxH7ec*CK30S6N?VD-l4yhUo@KBam8Hv4lgstU_^k#H&K};vyt-$IHQul~fkl32 z6BnKhD112mg_c~b=Tf^th&hH5TvVoO>s@qKw4Xarkiqem)z(F0`VBr8ol~o zIS85YQeU1uB6v^gZ(^#e!-Dp9;k3OU`pfGH8zR1oCd(vdIlI5aWc9>6B+KHlXf=3j z|E|ERb-W{(?+y&@ZM;-3Wv_jB;5g;{f^cHW8Xv#8Hc;OcVAGUu3kQ+hJ;~+9i(mqq z^1R;F^?3)!4>&U)(iU)Y74gzf349%k~Zu}qfp?m^Qr7PR|M=KhsVp2abKA9 zIM*JQC|&C&#(kv@ehTZyN=9mv1v9{QOW6_n4<}&B+Q(u8M)e!J0{FK6a^I2${2JfI zti$$iL0#)QSInfu>^?-YL0~IG27ia}`qhIyWhOY!*GrVx<#ntx`fL zuwc(T?~0DB&CnlKD3oLirF5g>s140yIhm;uc*yLr!cn3hJCU>%6b2|j5XSd1nAGZ}&tRZ7-9_axf`;dQ{8Cx)G&c{e|^)l=Z{4L+GEktL{j@FeB zY*kHL8q0df=Txj1ko0)MH*xqiO^r-~yG95ayYQv~fhYI&2L9&21ZkEe?Ui^%YVEnw zy&^G9;wqWFQ=s?6W;6{05TGUFrTXlt_2e>#rDC!)8I9uMwcPB8K&;h4m{LSwMX){g z&vO)#)6-LF_C$ZbZvgTg^`z_WH6VZD_LM5P-9ChW!J_S2uKo#T zGFk%TCK*bviMjq6o#CO{-&XMm*WA$jhl3B-6_etuQ*4Y+r}ygyH}n>Fj1zu!55#hP zL&Mzs;^IQ%92e5+iYa?wWA3c4cRvXy2HF}BACCK0iR02X8OXgw>Y4Mw3aVF?k{3Izs#@xWd$oa+wNi7? zx4q=BTCDonX#e&sf4XR^*J(K0g32{vJ5t19#Z|t(qrJ(xK{E{8nG;tk2zB zLp1oCJLMYz{ubIOdO+QVurzZ4iPuYXxLCQwQk2)|$V0SYLlwHXyK&e#c)KeH6Z@U_ zCKUV7(Y%02*3z__1q!u;sUoiKi|^gLrv}AlHGpT@r;qS~f_kOv=?JkQpGGIPjgFIo z=JR1M^N6>jI^#Z9y+~8viXvbC40c~2gUF;~Oy%KzJHZ`veWO>H-|8@J&srZcY@mQ& zT}H1V1%Eg&jua{xc-%E4+1Q9dsinq0TX^L87L?$ znbTbWwYonpw=>P0F8Lwau{E`T&CQDn^8AfD65#edqOGFW;hXQ<>24!U+x@~R#hGOE z%V5}~qW(~x^jF-8R|hhXmb$F<26#F@WGMy!lL@#Uh{ME|T#6;+Fv?sXy5^)9aEbrM zNg;_!_$V(Q3H1hX^e1!<@_pP64x+JJ`9N-pkYIu~_F>i1ipwVs6~$pUbg6@{>%DhA z=AGv$SSC3lPb-D<*!j63Bx06ERS<0Evl7g}%lgSI){x_X64AM5YqYuj9KHPsb}T%L56Im}6$Pgo2#}1^jk2>subT1bhyAR6M!t)PL{G8U);LrlTmY zKm<{v5#BBr$~1?o2Tq2RcH?U;3?cUtn1>i@VNdW*3k%epzh-Qs0P46ip9w9p+HAVf z6GN7w>g#LHtsXaoer?3^Bt^8c!VIA#hJ$C_*yGjBnqKWH_U~YXU*xIfl@|>8tTMl$ zReOV$f=DC#b>N~9kV)9s8823yAnp3wLX8!64Et=ufs8W{9^&em$!s=3_hhZ#7C7@g zSG~C{E+k4M6nT*~bH}?8K`mjhk0{x|r@t;MI?LU2zJBMO6&slgXkOjx%tvUW_)e0q zA>7bj5XRjOa%HQ}$(#+JpEEw*cBio(i-{Y`B(qnbiEwyp!#DNZ7x@Cf$XR@%A{uvZ zSN3UKFUvms2l>G`@R|M@pBlpP0cJwdK!84|vpRSl+YxP1Y6!XdTud&fb9_6OVBL(^ zEXjFI*3uCa@#6>;A=aSXE@Om#vj`;l@#Iby@HP(m2AvNXavFQC`hL4Ut)D_=95c$5 zt}z_f9mRF(wjG+lAIAE}`RI1G<@;g>4SiM1+4l^kq3QRu`eZg+|HL~g!z!ZKuaEoMw@@k$ z`Aq5A6(wR^-1qI!#Aj5ZXO$|*s{2NQw}F=llDy?$RGpA{<8)Tkk+62;xBladNs`UR z)2{2E@GA7WR9gXdZ~}_x6U9k&a|1Lan;B^Y-mLA)1yCIV>`lQyB8G#g9S9nDhSNp( z)fi$UK9{EPQ*SsF&t}a|O%HUp=0~zqOl-3WeL(A_dE)mHF-5dY&X8ikzCmSNQg~L2 zRoEx^T~~1`Q{v&FLD*jfsNYn|Cxl1YRM0Mj>`V^3RcY96x4!O0%JLlC@G~~CWQtfB zD3$g|m_M!bSOXs#C6E6W?7nQlm8xaLido)vt3iwAPSKwL(`6pc3D1 zM(pAazlqH8M0od39FXdo_e~jLs|ALuSueJN%B(~7UkZbXFD`@^$Fi6 z9%a{s@uvKJwWgwhSTQ!MO&UCChl_{hBB}}I4tZK9H(q^8^c3x<08_A0A;!srkCLls zqz@xkh%C#Up07VRV|36-4Iv(bflJTjq6@$8H(p55{}Bp}xtuArHo~t)$1LIU{~BV| zeL?I>G<3-iUG1=e?ag~z>gF`A_$7(jNVq)c(NnC5m&z%9w@0pcghPbzC4ercW8SuJ zwF=FX;rNvUX)X|sC4fyy^peS{+*<$A>T%*I7PQdlgda85yGOe=0tn2^4@SltBentB zgsl_yo((K7MgME?^=={_S`ztmhxp$N{nnfO8;n0)3yBGz;cLNDArltC0GA_g!J^#n z@?A`q-e&=!gIm|XjL;Jp`T)25@^PWJhbBzuvkfon*Twko5{W>PHQTG`Jbd)kKWlH> zC}~a-3)6Ae1AVTc%kua(e3r%I#d!_+18ssn)o)Ec6dMF4w=L(zi-WPGwzj}uN$X0w z3}xH@xycv^$+ph>Rp275IgdhUHgLr^@sH5}4L00L=Y6c9EvcZZJo2Iz2Pm%Za>dNn zc60GPD?ZUobDk?u7yg$KsScm93VyxytncfzC3oG!5jp2WZ~1wMZgh2RZA}BoFJmi# zwTI~KzW1$J^G}>xlFzK0(~V5|F-Q}txJd^3;|FAkdf#au9`y%O+f77?TIf#4=6KCb z9%Q9TdY#}jL7Qa|2}&cp6XW#kWUNCz3g-BenBWjQ9}dX7SrxyzF|1-PaJuxCOFlGu zmTe9_;+1dcXlqBF{*a&$I|fciT*?SPyfr6!=u0lt+;I0a5_)NTiG62%QiB`+BP7Kga_`P9%>Dr9C`ZlO zc9Jqc9V}Wg+glK8Yd|5dS|4yy9CoFx>PsZ#P>>w`rbPHdi;&Ie*Ci%t$b}HBF$N-% zqc^v*J}<7RP{Ac~euvj(XrV_I+8SGa<+mZz{N(ivZwVh>iwWv*Tz(!nO|&Sp&9lnV zD~O$rPxPSIn4XT~ap}<&lW6<42FGnIG-UQ_^*|bQCO>U{zch@2Lh93F`mM0d;u-Iw z0akCh%?4!skuX09T!bs5J;I0xgcv!Y%W323de>*sZuh+E;aHG5rkq#p{P3uL(`}dV zIm2tuF*NVNt&??SS?YzrEqZ{tN<|>h<35>-Fn;-?-}tY#0U+Oj$?6gI2Cm5&w}>m2 zpYr44PV{C>I2>ygs+>AaB4XmjZS+o?FYd?}1bp-dXoQQxOYig?^cqjL?sj$q7&0(5 z8jL++!CNn1NLXdRvFa#UW7LtelGLIMme#61#NZ2>Sye4O0Aq}CrYbat4G9)(9EyiYhUcp`jF=0!q+{zdM#gxKqfY_X65We|Pz z&w+Y5ex3YbLF1F^1$gogO>|72CNkq9$-xm%6*7R{IiE*eeSQ=zN{>|LZ(>^(bG8^k^*9&@~f#8#EKug}p9>pZUSSz=7^5}Bb>Q3eH&K^O3#B!}sGS0Qkiof(Xr zfPUQvZEKx>fI{E8Pt&W1z(m1Y}V}TvaAO?%s-CzYpH*<^@&`<85;N*M`wym0{R#Z73%+yaN%x624tQVeWA?C(oHRf}+c}|lx#=OAB zs^%{SD}eNdJaU(l9ZFf z-IINmzx)aJhh8}!2H`)Xsy56TpV>FWR=H8r^x zw;tivM*Rj4zGKlCjg8u0Cx10K^Wl~iUv1LGLUCI#0@H7Ov<%tUSUa{Blc#O+ulJ+b z5xfF8L4No}3p1IH6b5Rwgj_=x=vrVB#wISOvA%RsN7F``-HOw3-b1kFK z7t}5`UJ8ojuu#W{=aYiJDHd^B;S^7dUBO7 z&-qf&LPSRKY2lo+Oz#Xkm>*myLUm$^Ecq<`)^!^$z4d2H`~0zZdI9_DvqI_IL+=%- zp`G?%QRZO19D1(vq0bOGWVL;H@_qLx&_d@m20`%9KV2wk3nij`HLwGG(i&9`b)=To zti+BiI?I>_XCNjnJ<+%+PhewhWz9FRa&a%hxvNib@BTV0yVWb=>wisVLXinrx%{y6 zH4D}YwJj<%`4U+qS6ff`=@i$$=`-4BBxZLDQtLsr1bAV7u4v(XrV_*3vy{EtK&QUrvc08kX$fNH_gp=Yk5C+(A zd@{YJMF}r4xfdVUfnH+Y=XFIRXcv8mu zFtx1_WOmMuPBa9u%=1u$$8aDweE%2RkR24AtWx`F&CBJbC@A><+`XYo6?#3PmB0yV zS-dR@DUW^F8==_tpYgPfhRgTf_t|5sHFX^(Nx8AM*re)c)g0>tvDOhj>WeH z8m(cpUVEPppw|GtjoF~2J*S=vR=+&T<$ag-AL#AsQyBsnfe=7&ZLBA&t~6CUoyZWg z;`t&j{1d(b>b?x0h#L)F;&4N^-nm1uW>+={H?LjzxY~MO23+Cdo6AaN1E;M~zl;`n zbBtKhx|w&yunf-@u~$YFqeE9d;}k{?HZY z)F=%(2o=0z56;!}y}7|P@q=g$#H*VwqAVHV24N|-HyCBwb?8%X5?=L0?11ekW(KMS zpQYRn!nbuk)rFJ0E`%F(>S}Rn>!#V8Zwnfq5yd0m{yHz}lwb(ElRJ7~{YO|R^k>jx zQUyT-d<`t`2HnxwMeQ0lL=$s3Y;}ofxa6NnME?u8w(V>3=QP&806kte-YWbY8w4;o zlmqSg^Y-sa+c=(|HhQzYO_#R+rSEzEX0_-aOyiO8*mhFc>i)3{yawkpao3QMJpv;OOiFYlQy1AE>m6m(#b4?WyhGRZ}K*XB@ zwRh*|(`znNDJta@y~)0K|6nZ9{q41@z0-P~{b-21ZX2$y*GBYp_ z3REzBTMITK*g_$R_Q+CE(^b`0)!kfML(za4puTe>=f4^=I5D@vL?|t_I<>SURHsK3 zY7zLAuZHdb2Vanbf#3t=N3mlaT1RRMfa=ytgJ1v6tqsElFMJZu0P#-oPIE|RSEjob z3SU46c4IY^)lhfx4@@-gZ!y|1{GbD8Wpn2GR4|02+A{gRz@>ayHQfbHyP^%!Ds* zk#1EzdaNGaK0C|dG3TaD2AH^*v?{sE7bp^WaUJjv} zBPr2w`$N1Ylk|CSqu}6kg98#GXncayB z;!W{9)OHln%v~=Bx|CY3ur2oJ=v?iWN&O^KZznR^oS^lZ&j*ObzS?xk1hBCV)G{vj zP|NhBRsp$Rx4Cbff9UR1Jz#i502?8qU<#1CDsc3oz;RfSgeFR)1dYll9ul!u+-`)? zD4iTdTm&mFB!ZbV<|b2xy{_}=xp5}yp#znHQwII!QWqUe(uT;z6_s%NOD#QwL=QlLx0BlO%a9SL~Q6 z&M6EWs{(MWl9d$XS9|K;#&dO$1Q-b+9>xJnbd(}eCu#~WpU& zMO28$d@U*w@gJkcBg~TJZ-v|qpC(UAA5D6n=0#JrZAFGT;#hsDuPt@ zTK~T05DxE`Gm?TXEbksy%!G~J4eA>qm_3C&4-qD(a=m1?qaia%E)b~E!ZB5!fmXy8 zj{x2o4Qj_6Rvum)ZocQIT(MvS1oE3d^6L?7F0-RV0Y)ASfLaRp)$s0*m3uSWD;zrp zA`i5B=tbXxC^ea)lKi;5s1BxMA2S&RG7&32CJbPd3`0@V@k5l+1OX8RF+o=eqMUNm zo-FqZJH2A4236MG`Kt#2hZHFgJ!@;#Zc0cb*x%A2X|8vcj+a?EJhPkS;|}LDccGLI zC@lVVnGevNo}D=zK7xM>5`Z?F9}=A{GaLI!zwqz-xc!F&dVJReKCD%yfZ|@#uIAe` z5A@q$quEBDbS&~G-# zOxX_m%U|IzQgVQE?I@%Zr6BZs&!*`v3RZ=V!0}*my@Qk}ydgOrExgKNuK33Q0#okI z-R)+_$I)dVu-Gw5WlaTqnQjB-(~asGGKZ;0-S+Ru?l7cb-eXJRTSzXL(kcaL%u>PyVMkvahn11(S+I1fAHxDzrFA(>Lg<>nQRgeBtrH3vCp;V;ElHf1;h$u9bSik* z(9rLFE@6~Yqj)p3lllw~H%Kcr0u99ll$1j(Wc+&h#&^6=d15ar6PXX_2#$~I)S9P& zVD{}H!`E|y1tohrhR$m6(M6nej+_pjlM=Iy>Ja60cgMRRq%_D8C4^JNRQjRtb!lj7 zA*8gfj{VXvF83;Hir)Z(JAbIJ_^V5nO6ir#`yHp&8q0c}$F{YVm zfaMN`v3*%wj3h8&mpoOOEP4qE862RJGGJvdp=THs4TRbWAkwt9i&^n~ee4Dhm1@^F z)n5gsXS1?9mKXogVcmYaq(Va7YxKIli40bsqL{^FhICDuDgDPn)Z1LvU2TvB)Cx3J z*eFSjysj^%CLXl7K_1=kxl|=sqnVgnnK`>8^k6(@KazDh>9z$iO_`TWRajA1J^Jzg zmCq3Hy|%=kX){LW;r(T*zVg_q=R@}wAL_G=i4Y5)40E2@MR6+duMLK{^{OvVnJ^{h z`0rMT5b3Rxv3&)a85Xgv;Y6C$)YMBMud`57G)wTB@(vLZnr~U@h%8jMP!rB2sG5Cp}1rJYM~5f@uar2V&&!`ix;2PR$OB#fS7 zSLd|^@BOctK3wh!+85Wi$LYwpm7$z?^ZOMJ=mBG=FdVrMN7SrLa9LM_?v*OdQM+@X ziGpC5L42+8I$JYS(193IO}wWobziu60=nR{+#j{>WbN4lQdu4bY*(+l1-||L!iMl+xBIdw8|OtGu6^HerzaCB>D*FAI_?%APYd$PAfKU9OQEfDS=U-DS1+>%XLp z5&LZRr=g?@D;*z8pEKOt9ED!l@xAq*mx0d!U}YDLNHBdfudnK?F-K1N#|eS4l8kRA zXO%K!ZxkETtx9f{mD~3{E>#dTNQ2uwr^zeJze|E+ki7-mXM)F(fg%%wSz=O)P9u+P zf$EVPC&K2~9WkIGUe~G{sPLELr1z@}B{g;W(n`|UpLtn4fce{8@;k2pG`4V|Os(m; zXpLH1-#3!lt*Bb-ycg!5jFr}wV6zpJWI4IvN?!rbrwMT1dg~*z?y1}RT#Z<0;v;oV z;KrYQj!})V&3c-=LiGY@bjWsu9rt{(k51_4!mUGE`Vr(e(Vc0=e45GbHhGr#Xu=N{ zY;ngHGfrmRekRNH-}_dpCJu=mS@TYE z`Yj}8=(1ckuVx{@8Yp8>* zf5ds@(K=mPVCTbfG1$DsfWdEU&CeMuz8ID`aDhc_e^$6y@8TwZvlQ7VNpWoGY8(n@ z(S}PDX5YNA%X_|+!;Ut1d=|IWkB$lroxG(Z!lQwMLjZu^vrcYq&HY4D)K(A#PA&EX z3(#WgZ#6(}MAe9lTfww*V^P>IG@n_mZI4g_-!_qq1P7yST;Kds@0+pUb6yRlte5FK zRN@^Md~priHA~hLO1M@oIVR>*gWp1;EP$;c9z37vzbfT%Kp9bi|-I z_)ud09QB2zIq-Phu}Wc@O3IklMS`wMMusERhexx*jN7aENy(UzovQ&BV|)V$l$p)r z?2-kQGYJ(-#2r{B{=pY#Tj94`nJT@iS+!A`AHCJmB_z;fw$l=hy=mz;3_Cvo*pED@ zs>EUs{vMjj*%*K*vxbRT&G#kB&BtuQb@l)$IRceIbAA|yT0(S~Z-Ey^xL**26XR=K0~R5E+aOzx?bV(*FwUk|KNlebXU%GGrkX$~rgWR#e?h}md# z-NY=ByI*gdEv&-{83L%{nc*ebXAW^}<;oOXuh;Tw!l}~KNKoalIj5*C@!L+fEcO2V z=g9JNv^7bSf;XjlRfrKQy1HX|9Qgn^$UX!hR&WV$!KTKiNp-?ra)%mHZyL)hv>UM-6=d6&){m(M8OhYo%^Ci-mw>^FtxBaxM z8#*)Zekr&oS@sa9GtZ~bGD=svgJKEdicM>WpSK(y1IPx+qpC;`wvtZryOw;PnSR(F z%xMUtf@|>Z9$~`!S0xI~#aVAj8BI5+qNv9hkX>HJm>~0=u|m7vMBSOs7zz)8Z|kDy zp#z#A9qy4BuYd04;bQ&hh)%u4ux(_hLqk(_Yx|;Q*MMH`fekoO`J+XmY&uk2Qlp`+ zhls^+F($5k(2$mPsD;h@fhb&t^C@F8_GgC?yUIp(2f6Y~7io5@n|P#B5stLr%U0y> zp~L*AQ*|_(56fL}SgarfPX6>e`cf}1W3N5%v^M9spDP|v`U%6>7^dgA=sd6_jHOIz z#*gx+RX8ap$q7{*Sv$Bj8K(96iof;LRbcn*ZxDrC4xCi2&+AA*9QEPyNe(0E$k+*! zGW#RLo1bf4G9|xm7H2I9bew7;d5~ih*kt?G;55@ANh#G08$7%Y^ z*`$(Z$`&ItMjV7bc1}~!;)^Rz@+UiE<++Q*C#DQQ!n2+Qqn{jks3%;Hyu|)~0}fzE zEdZKxVqciZtl3&6JSIAw zS)5^KGzzHKWG<4=5`6hL{Esk0S6kw8_gK(*KrXdQ%4;Z{gIIyTpon(BfIr27cUKe+ z6nB8DE&=P#rt>tXzM)6*o(N(@Tf#LpaV9Do;dk^JsiP}vXrlR>&BDxl7&UisM4Sk! zzz8T*;i%B6*?R#*{%jAxm-+2T^%lOlZq)cU)_9XYN9LmzB6-n ztCX=4F2R{fM?*V>%kf~0?%#oTtATqN4r72I+ZgC1GdP1^)XsXmK+ub^P@R&q_POrg z-$X@F_g-FG)7<#1?jMaxz521)QTv;_<&ExDZT77MD@|rEKI`q$`->;QajK&%S+E$Q zy();Q9Jhg${(2^TwrD)Fb7Wp$a<~dF<={YF7>GoOd^q`&-Sl9lZ!U3all>z>L}Ga@ zt25mh1vt`dvu;9ay2La)_*aAlsqM%-Log*F@mAs1%Hapbp0|w>$&^AZ9ptavdz^~E zlmT`7DXwB_`9O@|?)QMssWe7hLI!wWx{!pjq|wE4ypeqzSwiz-3Yh*1m9TLo-mA1+ zNV{`ftUpdo8b$>ccDeQdUqBI@O1uI~o@-7)Awhb*9bCe^acl+fCBwOD z7tG|`7h;~GfBjOfOb6inU|9u4|6=A;Lm7>LSAiC!)S^Lw@QWy!CxEBHOaB20$;umr zI0d^GMHzHT4ECptUYD4mLiIckdB?UL#h zW^<5$`L>+mu1zMnFrVXYUw~(quRqYQG7BC`j{sH9-|?>3?zhiJ?FA-(+$Y!y!I(o& zroTkkyup`m(J<{bBgJicguavT82iJ1$ZBza?jGU(ubSHbT`(K?S%0f#XIpJI@L6w+ z`dJNY(B0nsKNYxK|DSJyrWNutH2-8fd43;eHfw(WBN$ouLp!DBKjA)f|8E1jBDE`8 zdky4!ts)e~Iw<%o2^I+%_Ukl}^J&3W0MtnRQ7irYhp(B)-0_x&pa&3Kr%F#h62~0% zbSU~MXp0>3=?fjVLuR-!puJe^PL@YiPtTGKAjfFjqkjQ=ur=9SBg6!D^alUqcTH&> zgnde$W}4Z(={%pZ*>06?>{{Qu(8l)H9#lk*fz9x%$zOxdXn6AD=#o_SqC^XD%;*$QT)f`D97^gtdYr|~ zj2_o)#KgMFu>2j=xA!^wyQhA5G2J>`rm&vx^rdO_Q~a?;0^cyU>lXwFy4N~x0gv5G z#nRD=&40qJ&Q`;fH$Z`#f5aZTNtF(dXt2k)9T`r@Yx2+B{E#;UbJN=;8)&he2Vev# z(!s$O9{%Oc>*0uIf`1L1YUaN41>uGSMLk?e^C)j3& z>8b+C18kySHTdEw07?4dA+Rv`GWpg8Cw1h!@AY3t$!ND?COhe$4zPkaI%4PQM`E zB7R9NG%MElX>98<4jBeWLQEK2!>uE`pFPNEyi|VLzQq*k61rd)TQq)}f?eaMq0TUQ zaW#A1wSrLpJL+B`|3-3odQZy=s$K+&{rKQrsQ=KN=%r~v0USS^7(5=rxqYg6ciKN& z5$(s`cih?2&#Ytj9if))?FX}2`ry%+;k}~|lbO#m(0ntPCJvFnrp7N1?N@b}} zh$;2~7^_Hz(Q*5HsT=0-S^)b#FW~Th2JmVPmFZqy#ig_p9$(24y~=A~(~}y1e?ha< z9y&iAKYy_)(E&PrKvE-ZNhZ3SVhjTMl4m|y@CC9UDU}u?m8evnDb<1K6jyU?T_h)j z#d@1w%5kwK%6RUlj z&VzbEyLT@|r@m(_K$Pz8nj*cq@q#Mo9Q^#y*(5NMibHtD{)BL@(j6Ei0||$4?!vrg zHi3;0%a}God>Er$tEL^iil}#9CT~@2*fo zPqaV$4dSRVJJc}1EK2mWz^Ggkj9{&}Ip7h6yMX8q%#I*COvg}0I8R|5eDgd?Gx9M> zaw_*IC&*0}*SJ;&=FM=|_)o|iUeDhYu!{RULS}Dz%*pGnSj+wx^ZoThJk09hCbl7# z=zP=jhtdbjpUtbWAEarQzxJP0Y=2pvHFEwoWCCa zmL39pFiz`-_EWp$7n5jqzAcT5js>M!)LUONAG>=5c>8waMQpar1?MLZ0cymtgYX{w zGn>2p{>;9FCrI?~_%NR1r|FvQ?=zE!A8_t%tSDCC!Ns-S0)^gu0=*oOxnkLttC(3VcK^BJq4*+>@~-(Xhnwrs+k>saLpU%=LNZ1+X`*}5Ll z$<1HQ_8g+UcXYx<&5ECTL>FK@2FkJ9-gSMV^Vdf5O7CBp`ozc2kA~TkZD;o*WQ}-| zEo~-;H@;%R+iN+1t%r#E)6KKB?4#Xl-$4Eki&O9k?Vx7)dNyG19&A}gxsQZ{&{v(^<d?5IKO3;KJh^huVKpiA zDGXP}{PONk`>A7KTW;+niv6*`g!>dem-#jg9Qd^mJ;rqE%%so#3Ra?5Qsh#S=OL!z z>fPldD0Pjr=GN`FckA0O^fUTrQrdIvBhy&8#?co)%bSe94khNy94TPB!S5M+a z2ItGZNrRj4Zd%>|ZhP%DzFq-??=a8r&S5XNz3tiXfvi)f!~PqrP4CuCnpM*z?Gnv_ z4*U3PATELTtB6M+G{1*;+b#6sugRk|+RNEliKf@+x4SpZlkK|D~~W z_Sfu>&T;q4m<&Gm8@}J{$%)yWv)Ib@4_4k!yyj~))??i9vLKgpUi(Vc*l&D!Zp!i_ zMIp)8{T)w!W(xxZ8tp&7?A>Ry(`VPDsq=R}+t>4-qn+L>Y&#Wx=IdczfBJ{_KSpl; z;8Nw;EeA(fyFU)$fiPt7?$oLWS-`ZyFlyuc58pFeHe8v}$Mf+~ZUeSo@!nM$e6V5X zilpiNT%Q>3`9gG2;HP14zU24ke%|2S^blvP2xnlhyd!4@yS%%tc>kOTbeZ~i{(W?y z%?BZGe-maq#$(tBSF1^ZcHacq+W5V_asPtkf~~LnzT6+26OUI%x(|IXX!t)&yI#m0TWM`07c3>iDxZ@@730TaANO$r+~KYCrU@#uSAe|QatjsLR- zl5DmA%I~u?>VUC6kK1}$&po(gSLNh!VH36q5>ut&-);MQe;2#eXV-2_nmu;oD^@OG z-~K$@Wu$Mehr^k%_Q9|9akL)e@OqLU=zB-I{S8}R+Bo#vggNW{}Gh@B02@qVLy%SA9d$KOMBW z-+}z#`B4kD)rEfT`@-kWqfbj>#`^xFzc;AGAN#nDns;==vATey@|6RuxeL1OW=X(*udwV_h zM)2^2#t?g#SKr!fzrDf_oZfyO&o0aJgWavNodH=Dm`=EaZ{(DE2+Yq-G*Y0|EN7MGHduP|vNk8uWV9g1~y|s~(gNIyK z?fYi$Y>%vs2{rD0HofeWJ^RPdIjNHPDch}A9STbyBdBDx~*Gw(53ic>2NO&k;W$ZI}*hx$#*6mNRn`_KJd$Ay>f{nGVM z!`y7&^OzJ>uzrZ^6KgWw_b-S`ZcbR4&}V?hvq2d?0jKu_mAOrH`{Ve{0}_N$V|`xf z@AvqtK2N;i{z+rLc~giQ~#@9Q~W{`NPca%cU+8@&8K^mDiR$nUebD!%~^|J=O& zo!yPQXYZa>-t27`_>VDuGt$&~J1@_Qzx3^3FZ(wGN5@t;4q7{8*7i5O&+fS*KfZo{ z|8IA1jx7Gcdgb$n+S9{N&+GIcnp6TQBfBhXt#x`yHChUcgn}(*!V?T-c!p>!42fcG* z*vHeN-V3-m>95{@>FaJaJ^HI8VZcW*!{&wldq?@Ar=15{g?&{i-)0x|_rH3N_sDbh zPafCLW8n8Yz6z_13@G%Cy*z)6$8$LCcJF27@}A4FHQTZx&q;TG>hh0c+Wp_e4I1YA z$KF1DtbIRBlQ@j_cyh4IxX8+#UkChYfcwCAeLjuJUv2C9hoSC|4BhgtLoM-3_x2v- z@tp5j_u%sh0VSSqyZrHuP5lqFM~?SGdoNZ)l=uLn}VHyiBz^l0~2j|z5;_v`nH z*B=LYKRLwxnb|R4rONhBjOaJe?a{$*&;J-QDWcl@ug-Vm4DRp{&V2T>oFR4w*UdVz zlxJ?^3={~a;JiFC!1cZ0;@DYHkN5X~#maMHa{Ga0abM2#_-@zbwYHm|7#BM6h$MS% z>f$wF@9elT_n)4B>hBKokm2unzQ4P|zptCMYxIYS%{yo9otoF^IxP6v5$@lntBSW@ zT^xA)t$}W@zvJ`zp)%i3{HG+#JlaV$#|hE(KKA~0 zePafB|7nPumCv=rjVGtR@ATnG>HZHLUpgf_^j+-G;XZ$O-mlL~-k)3-?-=9ps*SU4 zTv^~?k3S9Yw1408qlo-9!<_zTyY1t#9BYu+Z%cf$6#Ku9$@M3_1GZK$8B9++*=a$aqPI4T>k*0&tQkYE=c?8 z>!WYNEMt(z)5BcHbF&1qT$qar%;m!j)Lp=YI71{8w@Y_{S3l1SThA zg3AwhotQG~z&GFR`tYDAdc)!QiA5e!Ia{VDe7*SaJnz$MS7-kCWyHS^*M@%@)pvl` zBfY#|9=z2mu`zM>_8-%#og*8=ChuQZrA}UY_y^C6tKF}y{Al|dnQY3ughf#$TjFXQ z-t&KNdzt^Tgbmr+xcP^Myt{K@azo%Z!8Ys8t=dzvZN>gi7G+Ex6Fg>5{kEmaQvxpf zz?}ND=z&uU3PLg@38XV^b_*nH$q?T>-oolZm&9C30{48 zeqff@aA_Vs=0Rj)o?*)D!pJvW~D(Kr8xS8-i?$UB}RLrPW+ zaDICAk@q)USTyy(m;37i<|WLDu3kG}=3yx3s-`wX^!;WvlChnAbkMn$G!_j3YB;K~J{nlP^-FWKl;qH$QfN>O@jfaLa zptMlmAui7>KKMgufy;2`7kYX9d62`i-|U|-F=}9M&qoJ)Kl7o(>pLpFCvF=^EU-D^ zujNd(8hx|Ao{!@;$Q?NISYMCV-UxepR^n$f4t@OTu2B;L2G2h9*(YH`-ixpu;WKRN z!B1!Idvmz^(?i_)PTD!~v)DcZydUr5^_Tu`ue=>LZo#3izYXg|L0! z4fc5PtEji;9sF|U!GC>sU|et4|FicVG&TO6FJrCyx;)y~^Ql+8UmU+}(0joz{?p_6 zey+Wz?E84uzIVs^zSQ6KiNStP4)lD^#&gir1D|~vJN|?1{Rg`}YwJ7uyZvvB4gBjs z-$(j;Kh@9Sl`r=E`2Cv~vIFgs?t+U7vZ&_m#K9dk=K_+rPGrpLO_? zF##`tOFYp1)gR(M{&vr(AcqP5o3J&zPoFf zmB(Mkc)j|@wwL>R{%v%q^?Ttj4fA|r5O^K9^MI=GFbJsrK+h)zxIQ}6;jb~}zAFz+ zx7+&iNat7IkFfbyl+{>|zT-Cyj;q!GmnF-*4yo=-fn;C>-J@KRMX_sR15O_VswCuj|uL zf&QNSZW@N{>-O{@_dmVp(f5mlZ!a{v4)yxWAonK*xIO-w#}l}};rgfEu8;JF^dVE% zr~A1)*4OpVy*(c91J(0*jL4I{U7qOU@?>9EIDZ@p*2fJpeGGE%gT6a@rM=ys>E-q~ zl;lO%m%iHn`n!>@^>=?9H!HDSa8|}|nD+C07B@QGo_g8!)dff28|n2IT3 zFxGtZ!7>Qw%0R*JRnV|3j}_uFP7oazOGLU^uR12{XXW@u*!TevJ;9r@xTkz z7dQj;?eG2gSnojrmz`p+`^<=&^g-C@&tt}|NuH5Zx^rp9ltJGANA^E%Hp_p)8JR*Y zmP=(aTx(93rVjV|XK(K(KvQoBzXNR+vX}fg+8?i{AQ(tLpQro#JUbXy`kox<_0&KQ z(6dKD)ga6ud?fCX{$773u}H~qgYWTP9*?}_{-?e`Cl7oMa-a{)z>tlg2cSv)Jf8!d zCaMNCA)BF4Ll4l`XTbUm#z%&3JXdG7usCc$EA$5LA<3T|0P5(2cL#Vs-On4cz~+Fa z!AJD)$xD1tVjw6q1onD*kk9k|-Twlk@?eig;1;OwVBBSY8qx=Y-pBJ1AUvoe@(uTi zaU}|v04KfNAMFR6_k4OF%%iXvPe1@LAeaJ{4dl--USQUq&-C?r_Eo4R`b(r^P_se5 zpY26v9iZhz>7N+r^W-4h?!*VfkQH7}yyo)=Nda?&6A)-s5cmjblE*KwFM9br(i@*S zcp8R}*L*sk8!*@XVGvLxXa{U1pC|kJJOxTME~Ix@nOlbZ$ia@tjk(iog76u$KJE}0 zTK;CUbm0tnw8hLBd=B7_qyf&zWeSBviTg8Rr7%mDYVG-tK0N2h$OG=ATUTDPaLHA05=~hA;E~?gQfj^h^q||K^@6?mjED7!Yw`|eC*?e3F5$y zIfA<2Iexqm-W-?|1`;F}N#HJtm@nRto9SRItR|Kpuk%$Psqu0nI!Wz@KMO)Bxwde(&{_L?=;7R7$xDAIFp{ z73hwc!E;6qoKY%N5=Cpa{DigVi~Mr{H{@m^x`~;f7O_ZA2+_1ot?N1Qx9d)HS{++Mzm*txxI>uwQ?^nlp8gGRm9Q)1`#nr&Bc zf3;h7-NerQB`AQ6`#(oG^qT8FQ=wHTC1%3hfinQ0jT~P;BPnYt+7P~CMacY>Aq&hB z`jfJX99LMxB0V81!xr|Gth((AFWqwNDxl1(Ll>?NTd*d0QCNJC9KVODP$6MpKBKq; zXF5?=S9kW@nbb4KJLLq(X>z<>$n_M9Sfr=q^nDai=I+^b6+Refby{jsMUg}zR!G75 zy6vqqT{*+AMN6g9=Emlx`lc?@+-wnx+<$4R18M4Zv8Mzz`L2mK);BfOH-a=aG>JPT z@-Bq=NzULa&{aycTCG$lR9yrADC->FB$N-Xa$1A-P5GdRn^W)lE?A^^{hxhoeTTg9*%?-w4=kJ_Cdk ziA3giNq4>(nl;{C$WI4Y#3H{|Kl=I zBM8a{HIDE#W;Ub1L zXKcam7BKdqX7EEHm<#B87Wx%`9E|0s5cnUI1oZ^M-OwelDi8rrL194k;1f{^3`Hn{ z%GO1CKvl3H_rw{HpS3fLk!7LAM9;AbP*)RU;saz+Mh2GkwM1m~QA;!HGBfYg%b z1G2`*um&1R2fQJ-ut|V0a2>0TRANY@KbI1}ualLnsU5v4KTJ;B^PXz<&s4B&%S*8P1qv-x)@Zk#h!Ft3+H}-7FC4pdM0T ztq@paP?!wT>UR9zK}BU*}Bx1nn9X6o_fmv-(=GK`D`T&~l|* zRaaJ5T2U#MD_X=ljy14qRYjW){^}`HL$ln%nFj#G&Jdm$*}A5->$M{AX`pANVqs;q zKp=*}Qmv%ub}Mm z&Optv@YcW&P75WoMBs6*nt zc9nlrth>`jKVQFI2q;Zfm-jweS&N2i@lQ>rxvN*B3x zc|mp6;S*`ASFAmsdFiv63ynr+bsi9q0EnB2kcQ|^7 z%vs`HQ+PIX*Wr|FO%~2P0KlP^ly@+pQc zHXS~mGG}u@USWCa-iXDU-76$YbZ0I2{Qz~Pi|~JuGbUqf#QEv)8RCZKnd=0ys{gl1YB}dU9Js^Q@V(N~@c_H!nVLPf4E%-g5s|thQkM^VTu$)nM z{#4SG*^8RRGL>4b71gX*y!2ZBb+uYnSyZ{g!K1cCv}yGk(7@dM!l~0|v%~_z) zYLlbA7c5!pyz`{dDD(F4KYH{O%TflTo;>H$Ew`TG3>?9q`bC`K@e_82a0b`6U>2vZ zD=XNrV##+?r!U>$)Yu~A3~EN*_Su)yFBb}6JlP%L`^~rCPF=M2WLlQLhkIp1yQsbG zh| z-y~#p>X=Z!@4o%vyICu)Ey#+5|0nHbP$LcvJr$r5u%!a^{UiG}}g3FrlG zDF(s}F#v{x^k7V);1i#Qg*Cq~bX8#x!WryA7;CX}S=^6-KE=KTErK3LT`)056U#6r z&>aBYf$*RkxNX6iXuJmgk^yv#2VCHDL(S|WJ)kO`N%sI}c)_xRrsIwbT!-XI%`pVj z5t;*)AF5`c!MFh^hM^%C?$(e*P0&gp&}0~qL}!f<*ucQB!I1TKmIFZ-5L32HW`1`t zE6NS&syxUR91`&XX7qmW>3JAM!G$-%InA0_&=XV-R2UpNVQ@taA-jDT6M58`+MT4E z-u@@JUz~y3!&MrXbE6u(x|2XK>4AK4ut4FXk`!>@z#zE!33o`!5P%PgkzwwFUp&B5 zpbC5fVp=%!I|I>yn*!a89Ko>>1wP{%G1A9GI78ILh)c!{i`E9nfmQ^rfs%kCVIoKy z5YQ{4G`vdPQOrv9Yrrc%%d%pz_}6geCZMuFn!5zJR{$q~8J%LGhz0*!0Aa!T11tEe zI0JgzDQI2MNZ`{yzfkTD7=&PS=@fLzdV1ur;J=A(y??KAcXSKfO?nFVz!@cZMw90Z zdSLi;LU-`aS&!No3ui3&Z2{Dqrs;d&OhrXSCuh*FB*K5}6m!}=0m7M^0v`!ax{3wA zW5DRzO?i4ydT{IpKx#zWA!UxDD3M6?i+nSgOjcD@Reb}swY36)phh65CP!YXYijOE z?vCmjNU*k3YPyTS9L|E@3A*(@N*Cq%S-Cs91@4y7uYp1r|JnuyDo#3+@d)!WqV3pve)F4VGigPX)jc&oCqNmd%YvD)12- z6BY~-!zVLHVR*r?Hv*uLB7xjUfe6XSf(IL@Limab)DMQ&YkYhSbp?b!#ml@N^5_xH zK!W%TB?!{R#L;?&($jjH)zSDUCg#k77)|()HmEpo1Rp^on0H%^GPqgH$0|_{ejE)RQwpserZkfq#gP+##We4di1{ zq%imdD8?a=8(=649(?e7@N8yQcKqIi+J+{LT2q*x4+a4A@O)-A&iygKO?3c$=`qe2 zj1(v+SQ1LE$~=Dh#I>SUmCnfEi$WO2q(Zk#&6zYC9Q_(Zav+$ARcVpiU=!(8D>oLE zG#HF}U>;}Gb4IO}F=@eCa5~ng)w7%mOo9pi>kJG{8#o>ChXpGJ(P1QjdV`r_S=PuP zuXGGPJ%DvJQb15yQ==gM;Ay;IqJTSUn$zL8HH=U&9c$77{b&irGHR0vr~`E)#>#>R zA4HQuVT@OEt{h4_s@EFy24h=OtG|yI-1YbJPd=6olMK#CfhLi0)*P!R<};WgnK{5< z4Yq(`@=l+L(&%D##U~^r`UQvP7ncPE zMIAhF9CZHLrHqrQM*<@vLn2}*z2s8Pwc@He;LP!3>6OLV&JLUAF4}l1JwvD0#zaMV z`Ua+5y23HqJ@E&2#qP+vd@=gKac>`=V<(U6Zg2*GlP3!vT!5aU-(_OuQfXLNSWR7H zhe!$PD{8EZ3=T^+-i+f{B)5?__3rZVk82(vNTYJYwk6|pGvr(y5RF##i zSnHx^4HdNlo-V`|TR8K81380}1#x3T>$-K$&W_IOS1i3$R4Hj`TQzrXU{t)8XaLM| zVVVq+a6T5GM>ul}U}C{@=3;S))lr!&$rvS=1uDQ;&}kXWT%?dA{X zCsWTIJCZ=B45ijX{@o z^5nk#Nd{KZB$O^)IFHfF7OxK!3abk8OH)r?rD%GSr=Os)e$}dt#bphYf#FQzYXyaS zlGA}RDz)b7rHk=<4=GGiA^2c8W?ol$?C@sETDP zDk`(nl1`nwoN+ae(zUPJ5}AKJufCxs;Xn$@GG0F3bBLqKZw0;~nkFl3xEg1!k_8VY_ys6d(%!Mf#Y3WyNu^ERyOTOvTSI)@8X6nduG?5I z6zgz4gA1yi=y}e7t{F|H>@#Px3kxX&&C=@VZ6ULlZCtUzv9+azGctRkw#{C)p`pHU z>7peows_87vaGtcX5NA&h1c)hqaj+Umnd2{Bk-r_uW;ks*i z1&mt0eDSi~NoO0XixJ3m!}`MwTW^vz&ptdg1KCWvgZ{-%?fE*xKCW;pqWW13`J|jD^cp489un{&EJV zRS<$Kc0>9&$zt^i+MuR!V+JiEW723bpiWPzC{}NP8wQHPO&1g4GY8e7DUFU%Qs62X zOf0R@v1)w3A|!0mVMRFxcT;fb%b;hC9C!FoQtH_>n8E32xJpCLdYVz{^g4!PSSW#! z(laVteb?*tTD6X$7<>zZ9s=SzG^5whI$Vjvb$ZOt$U=i!e6t4|xXp)77j!w=8}eJ3 z z-Ee!37Cb!QyB;-wobXBl=XcZ=xPD(a^Irzk4NVfirE7r&_Y)5YXDo!V;J=0kgfkXc z@L$8daR$QhoB?0RA{KeD%gb;OW$!0VMWX1-&)9ZgO{6JlNly+_gi0fg+m$Jxfvgj*gCB>YD*)AR4%IECHX21s44N@k=?w zaU9HN?twGloAEI_2?Kvv+&DK2KHG>VMsn=@c=O~I;gk4j+?qIkkMb5Vhw3pvv*9>G zjyJN#OiAIfMx9l#;CF{^iptAPoxD$+Q7RRkoZ-P|*%f^DCj8zp7LvaL8S?u5Yn07s zehtR`0^fA_XpMp4zp05;!FMXaxe>p&O_~@!aOA}U7W}S(JRm>R3O$J(jMuPl&8K+M z$rfJB0N)G@#xLazg!x&{KaBy;S%|p8@Yh5upqC|FtBif-%KDWn1z(L zYcU}_iGpbmb?pX{Bz{GdKlxRP%qIbd8%GqHJjMq_1-{^eome|47=BqCLs{^92Cp%^ zVvz$V8c!Ae9J?NlH*T2$oPp!L?a%NrdECw!bI$x~HhJ<9Kpu2Mg@)|0MC55re1wub zf(ZdhR7AIl8VSa6EWQhhJjaaBV48zsF603Kd?yEn?R*-b^Q03$b){1vSx6VMG@LlxEas8=v5^N)?1wGdU3U(Fy&YQiHSG~6Yn!V;5n z6URb=I{1LE=Rn=WT);RY75Qr6^T;G`jEJe-fcdI9Bl5EiBoMA)U|a&YMb1eC1hJBs z4z?EFF)CU+#LXfFJ~R%d5pH4#49>?YEiKh*wQ$a7XTk3Rpd293ozUw=*RSt8aB%;D zBVv(6r_vS|6@iU`zRk+If+_}j-h-ThEW2~YpptbotlO~ZYR;9bc_k;)vyr^CQpYfQ z%$X=Pqt#Iq`4%*7putHade0(ZXa+8TO9$6b)A7Az__NRY(&EDOtUNtX65`PKMkpvc zs5AbQEe-XdSeDZ3(GP^=(SmU%xWg9-0D<{M3%E!kB0Wd|@&-0chsJ{7>&~<)y@3L& zX3}v+D7AspHl<(6JAS#CW7I}Qucs&-O~wFxRGeX0HZVB2y}jMSnco-q-lA|=GzIv2 zpFW>iSSrwJ_3cfquCC6YEm7gy_QWS5XYku;H(y3{51dgd6}PVebOo=MMgtWT=wI2= z0k#090R~pfvFbDDv$ky7>JzX{p<$#gt%pyX+3e_;a4<2av~0tMb=R)uL&;92oV-@v zwtn4~GpElpMlSX28If4bQPQNO#N6W2jVtC%S-A4_#Vbms%-z##ql1S;(yWkm?A~{D z-KMRz)g@8ex3AdXRFGFlAp_-7SzGLp(>m55?vO?7h-hqTKD_s2WO(FOH;;CS)X1u9 z>wwrRfzl^WW*g}C=>10y96xjEd`4YWg`s=9XqXe&dkqXsrtl^f{e% zH96%XL+PPcVFbrPoPa0HFMW0f2m`37sNf@a15X$jvniU6*uIOnImE3psxIf|IfTY@ z26b+3PT0OwNuzM)T4!1>-LQ6vOT=DUEAeu0hjH7-H!NiT8E}Mry!>)28$x&OZf!gyVE4kNwz4oyBrtemH zUASJ!8R^{1mo#!&!r`RC%KGFJ7vmGpaz^bIkHEBR6|H3#0wa?YTH4LUweV`e78mdI z%u5=ES-N(;M5eZI=J$(z`{FmO-?)0kx;hakMf18Pi@l;^)iCJ8SPo_Y9H1NC6nHUk zq$sKfIKu-t1FnmgUm$HVf{Vq`D$YdhOgNNTr{X9Pqmz2YCW%|60r5wS2GQ==@Z(o% zOq_bVe=w^y_y$LIpf@H;PfI^tTpzv@IMWK8@%Hn*TG5zy`NF9)=_0ve`n-9I*KS?D zVvYO81&y_hE=!mX~p7mKSS;tq30F?eNR;YV0~{cNWl447$FUR;>(v}W&IL1?Su_OOR~~_PtV319JrZl1`n!R#BCH;PAOiCXUnVbaHXW_j8uFizQ&(oqU6( z61jylzf*vFq|@n4EL~DudhkS+uvHlB8&E9}IJ&yGh$J-hH;jwsu=l~v0ATK|ku-&Q zI;>o`Y3U}nQ)e^O3el>i3)XLPo4eAnT+q~3+2pk?hB4{_Ljz7-Dgf>GcXMNP8s7k4 z|L6k?Rya6$2Wcs7d1>CfMJt?~oxY#FAh*1h5m(Jyu;|o<3m49vo;LZ1r5oK-k`si@ z4eOmkfUVcEPAyuxeBN5;^Z7Zr@rdgHT%fQ2k`Fa`MPy(ep41LZ*G(Fo~{MIJG8e8mn~bm$-!y8 zlebu=0`F$4vlFOgb#dvBvzALJ4roPwhXQe5IAg@kO7PKijm<3$&21Eo`xt7avazYP zT?~UUXJm{DwbsNLR4SF0g1f9nWTN#Nd{mn_NJMwh>`{8EsadE{s3elQii#3vhv?R3 zVRM@hYR_?uPOGb{t0^k4iQRL+z^cRw4O|6iHJaw;7MVh;$Fgx^v81`FS;v|*6xbnF ztx`2Lx3qPLfs=qXp{Th{Bv)%`d{MN;&ipO`y3*0n(b&|i1hvFBw6Jo80%tPdu88F@ z!+-$y*UoeTGJ;%*bOl~9hai9tKp4(Q`2~jRfIzrXjCyYleM1rXj|5#4nOMg`BG#9)4m4P9zy&XKsL z7X1D|oDzijGr^7i1@NP=8TXenJV@SzsbmwAFNFD?8K7&R+`w-GDWh2tyB4(b6jC5H zgadzKCKUuGSGsF0xrWm?QUG(x1Y~1}H2^Va;0D;8E^OhY3upMhw}8LcwU8G4P6670 zdPlU>e2MfdQ9@9S|2k(-XKxI~{0X0H7npFX6H5#h2Bt%(+IQDQo*P|{d=2?rx`MO@ zUwLd9(mL>w4~&~x@R#I;5rHIKIRk-iPtbw~4>#!1eat1=(p{-|?Y+O8`2{fIqbj%u z&p#4(OSyj?ASp1nN<5R}He{$Y=1%P3?ai-JGSYSaX{u9oWmzU#aKR$HTV*>OB zmIKd;0B*VaD+B;$1T6`W^2SB}gwKdS0=k}b3V@Gd5sP#RLa*0LB)^O^DwVRVtPE!Y z7Fh7Gg6E7>`U~C%z=r@kQ)__*4=)6Oy1Kew^xm0H-wb%h&y9HLHgmdHbWQ3%5OXT` z2i@}eZwllN4cqOaMScT<0BiG$<}*AhDk^|8yh`zauKigt2fY(+E7Ltox4iB}eui@0 zGWzdJx2Cq>w*csrU(1e>@M#ug z5I=z~>r`-#Keq(w|3culJye*5+@WTSiKWbi_+>Dc;3oho3t4p4;Qyvjlpc=eqF8Vr zK)x-BuciQjk0t|cGU$zXWchstLKReX(CPcanJ$35kgq2E4jdHXXE;MR3t#PW-f;X_W|8FLlhNXjlwGuuT^jk$8I}yJ!}l%CQfC>;f( zB^2S7@Zc1Y;^9R|iNiOAQ4GWXKp^uAl(`c|&Y&|Ibd-t1??3>6K;~QB(U~3SA}PQ< zWb@w#v@p*Z5c4GqdJdp`paV36OaPSut>D!aU-iH+=DXxwVh{$WI`|L?bc9)FdYChi znMR`x4-9eHuyuo*w|7XmQmuy2{GtHl4FhOhqgYEp5kPH`%M8w8^uAufHPx*^9-tgD z9{{(=^qv$N;^IXT$NU+qZd7NTIdY{+mVfnXM%qal2M97wU`P^*eB?}wMAR-;Lle+@ z_w15LBxD3fA>oiw{6`RM6Buo9$boyEHHDL(to8kXg)==4bj9#5^fGjAQaE9+-GA?rXXg$po zre|C#D%P7Aj@E?u2OT}0>KPfAd?K~6wqp96b-RvcsimSlks)!%)7N_kD>TaWtJam3 z*3kwXYoN7i)zN(s$%o_TJI8R8!q3-hjaSU2a~E9vyyYz88yxQF=yonGWs7H!Owyiq zB=%H+A>;yeTNcMs*c?|Vlqyh^o)q6^a_9HO@4cl#R`?->#@I-OSB(ij{N91T~DMPG9Ju>}cKS?3$ES${D5c`*x&V&T|clO*wU% zGs==qUCgRqTcO5=?=IGHheD@%$HZZy>K}~l0iA@1fz~mE&J2NXp zFrK)tS=Q0mwBFT6DpztwWpGeXN?w(_r)O4HmR_gv_6evIs@)wom6Vq&w8WRiX`zKP z4+1(l18xRqRDhmri;UH>xVFm~se_40Co^-w5$kAbo<421f6QJr4F5O-z&TAMXy=DN-Gns*bpG>5H>fqI64Kiw2L-- zc+@r2tY5vkq^yyqG@P-czFx4^+e;`CtX&_WY;ARLaXnX9&*?-dCyu3Ey6P9c^ICop z$8=;|DapyXmUd|S*&_9Y6UPo6-W$9tuD)JG8DVtLgpwKZ}f~g2%JgX7j?E+ z2!5m6+SMI(EiT@nT0L!Klt+#nK6D}9$oBR5ZIMwsT)o1eIxri& z@dZ8$XC44RCxWZRat1k!^ARz7m8^kb6iHq_0S>#S&Pa&~dtaX4KeSA|4Ji)0di zKmWL02V`PVaP;2RriQbJVo&8ZrKcW`-?u9}C&%Bzr$H!gsx3c}ba3y%6T+6N#g4wf znd5Phhtu;Y*05pCMp3gUGA!~+PF{0s+eSyX^15bMAHVB`1+-q~;Otr0tgWudt!r#q zw$?==mNE=YD#(ikzhju^GsqbOXHWrWLLy^Eep+N=5jZSkaJ;E6P@0;=9&&$crZjz5&QBld7)$2k-!{Ho?RbF1Xal>YbSmx{F z@8;^Bay&&SY}>ncZ)0OK%i;=xUat=e3){S9OI%z$Efcuh00n4J_m1=kMUKIV1fXTyJY@ zUA%Z{ZEbC0Vj|Q+tJS)=IImr^PAbLMdZeVBXsB-hdL$(s5sQ_+zFuqBu4`&)#o1z) z;lP3i1~~KPxb(AU!0m?q6}B{AFD(Pz14yOPlP6DN7?UY9G!*E;N9jZla0Wi1H%6=t zWCM5k06ckcSr3>E_rWp5m$PtWz5}1|tC4U{3TlqapFnIr5dg<1HaR(5$S(&ci99I4 z1Oxb0g4^ajE0PPIfw$Lx01?PTk;D5k3+F-Ai10QL62udXVZnnAv@>`_`Go+z=>g8%6%g30 znm-``UYqZbEH3w=wSiLz34hFb&x3Hre1+fTC4uk>8W5xqUgMMHZ*~LR;>*w}eBjO# z3m#k;!DVN0V}hs<{|NIhftfQRvGNykrnIya$7f=^c!4qbt^&@{&q`;ot`SlA!T;8f zca|HL0t>|l?mW3wy2k2utDAHUX^{s|cn#^IC*1>d5!7^E05r`?L}IlB^ov za0Z+nbL>v(o`FRy@_-4M8{e4pf}N3wCBKL>;J}ram(vW(u*Ob-$vtt5EMk!dRzS&V zgOMU{UDdM&t)7xfq(9FY@ZLbm$}36)O@%d0*KbG>NVP>Q@?cA2QBD2zn);%ehT@ur zs`_S$L`FEH;N>ScBbTd`s-m)*N{Oya%9KlKUMeJXrPLx8d4Pq1W0gc#Ez#CUbhToA zqgW-D;tT(7n3-EF%`Kc!$dyIqb=6|3Lc#!5c&W6AMILMsW8Zp%@QcGki3ui21kvofpGZwMP zJqque;ne*eIRoyST%jzisDo%-=Q9?u$U`GwEhw-VgfmJ2p$acIaVuw(gfkMV{4Si4 zvei;uy;NB#(w26xr4mEA3@!rAs4A(UTEbRJ^p#S!LTadzG9VD8Qo_P5T%7s z3P}wDS4-(CDO)Kul)+J^uaao1BycomM^b>)AO(z0qQH?QC%OuW4k`&LmqV!}hDs5f zLttaIlxdR4D#hAzsS&bpoW(QXw zOa(5j;0a`b6_GLJG7JC>MOIx*wGvI4lqr#!ppbl&Y6(*VwU$8cOpOe3;X{%W$X5() z$U-93QhlvNUm=Ey8zFFwn1wkgDF$63Gn7MnqEJwPaydkYwt|5W8>IY3`#h+^SCI5I zXc4bGIRWud#kv;P1@0*Yprb%>&hiYP@!_vD26NpbaF<4jJOl-fiqBU zNLL_L3B>Z_mx^bvcA2u=Wm{54r2@1^TP~t2L5YOx+WRcgd25`Ae0RROjS{5_E# z6sSr>m3L_2I#{zx2n?K&=m3O3d%vp0n$l*;)fQc;n6444DkRzpAOPG&Rbz@p3@8ma zofTqe7gRgKA5__DsRrFh&_9t5)P18*paK0VMRt1R&wYiPz0-3QEDAcYi>CjcmaWKNVKOCItBG4el zYB^mmX)~4`$_rT9kaark()q*tqOR_7x*D-QBYvj<25t!}6t__|7cYdZuep+(x7+FB z4zC08ahI-T>dVtE2hX~+ZDr}1qik(j%I>K0l9Gx`hpvXMZf_7)%Q?uUOakf(4SPR0 zBV`&T9SNx?miZ;tOSDaL-TCsSY6Vr*p}Zz&$!(B;ehAvNMQ!S<^}_3IvNDk(N6-RY zE|5~?&9agXeNI(#X^XlBn9w4x649VrMXi!5v10$BM7OwNLt$m&kx0Tf zY-yX~s-QWyQCcZeXJq7lvDoQihq6hkDG{_?6$ndlqyWQ(Q%&B?KJWtLLMa)h!IBFk zN>xXmdhaZu^B0Zjr;8}ARIlTNS$W~BiY{hVO1WZ*Q7_D|IN(~aFP>?3Uj`Nf@(?RZT14}=_-^*_|8Awz;q02ct3_Wg*|NdIf98Uv?on}zHact#-rpiM zt#|g`7=B>$R_|q-{0l{z4FRE-D;jItn-{rw?>%3zSGnvxpPP8YC_` zELnp&wY^ev<$w|ukrq($B*iduj(wPK}MBlis5vu>;J2DgxJR{J$5=)jnr8@wWBuJ`;1gL@jSY^Desebkg`di+P#6RfodArL*zCGI*aAvehNA;jA)`7v8rZzpiXH2k zLs!+GP082L5>c)!Gx}7pQ(2?9967^r4QC3sExdlES}DlRcK^C%&xVHV6Ed}~Ei>`F z*Nl?TS#9AnGX2&F>zm5Nnht4m(?RE)oqi&T>beYUIIx9xD0-ALRdTR^biJH%3Elw% zKneKn5>>NI5teW)ETdAYkrdQ5ZQXXfs-$&U$lhkT#L?5w=g1|wLGS1i(j;V8c}67` zw&--S;F$gUFV(tk+m#KRX=_;N<$tQQF(v)n-jnHN?aDc8Tn?PdOgwgB=CWlO#nrPm zM>MH5C(_TYa}Nf?RVdVy$xQ81QFdX`y5Rkw(2LgkoX*IJh&z~AC|czam{wXDaq3b` z(kY|5ev@C+;j85hO3l~v9kMFgD#R**Onp2vKVr|3qZh8t-r_0HvY`p5k`C>PNy!L1 zThOM)*+qCl%8p|hje6r1fp}Yxt3W7QN6XDAn+fIN|Aoo{SD{IJHoOsu!fk(yvM zFOhJ@+9QP_Q%lN}m11>4W3{yGOhNGcs$+=_B6UG+nYtudvVC#u0bgOx@s{hCRBZxz z#te0wuBw6 zye?cDbELMt$uD$U?B)7)z0%inTT?T&+9xJoX_Cm>2rCzh8W^u%%MQRf}cq zYV}s%$TfcZ5|5;<+~B$?BwnCrm%8|zE~yGnxe#^mq(M>Z61wwjRY#RfIb*qNW@%G} zSY0Dg9=mWYDlRqY+_iOqv2_d=oqT40!j27okw;5f%Y>>XwZSJg{%n2~xVeR`x{x5} zI*Dd^@bOxODQsU-!ilqLz1}A%h$kis5v96){`?a2h z&9Z509gm&58XUUsc%$Otm6Cbu+{M z@-nF@?Mik|dEIi4c!7+$Tv}NmXgQcsu*z>&wai#1V_Vd^kf@kX7J60IHT}3~^`_|K zEm~%YlTTW4WmL)qkJ!U1Ws_q_Oh#3EwM;u@sZ(ZIQ@Kb}BUTeaSbWmH)O4wq zatjE_X;*Iy*naTrxq>#u5})|evSO!*_ydG~Cc zY?W(xL8G*wQJr4U07F`>R8v{kxW+5Gv_Tqw^z2tFJuY0YUg6;<5bE5#ccj#cE?g^` zvSd@0+OXNlL;IL)Bz#LC9@4xzBoC`hde zT-bCbu}$70IT@I_-LGA&E0M6(5(+}nO&1EbEor=zBdN`<$k=JBJCnb|;oRZlZ4wbx zbN*WRDq+sas(^WljF8OGjgs?8O^2N??2KyZ&=<+rQi+l1{C(jJF6@88^<8H47+OwW$@7UnRo$-e*_9Z7si;z{^V*S+UD;65uKs%Q zhUE0L$U|qc1fpuWexrZP<(l>iF;y+4((|h0j;EivQsy6btU+%|Jb!uD>GRbc(txO) zAI@0jy*If*qYvB}_sR6-vmFB3RGN}zQNaF_6*4C7RMzpV{C2G=GX7A7Nb3+98+jz{ zU(=RE9?j@bQ!$6mo-Pnnio{E{_crERKAXBIH162e(7ml1DrjfIhu_T(-h2FNqpG@1zScd|C31gBW9zg< z>y|o)J8wTK(4Z4iCDA`5oaq!W0;MvpOm1or3Qrw5m|IXNP-w57IdU%jOodoqA~jTt zwN+wD+Fn(Y;2_%T&|I0Dx;r2x((Qceu{OD}O)9yRo|<;zOr1z|{rr)GyMoRfiZ#}p zFAJQXefC_bge#Nk?$^564Kct-UoF+u$o04iB*UGP8aY*~WNMUb6^sfJrcOpf#x=Mu zOjk;ctx{dHRJ+1`TZw|Jk<&FYTr$R~u!5~qKwM0rRz}q+nOgWLr5Y4)3%5tA=>kU@NgChH3=^A#oc-LDk5p8ilDsW`G$a z%)~0B#xhhmre11<0#r!!RdRimL|3PvYm|__4s%ztHF6lpH3GS|4n)nCi=ni1y#jZW zs<8l&8Y_^qt!iey_qJjYT`i|;6;MK2AZMy&P&Q~2D7>y(3W>AjQbWB`Cy-GPrBTH; zsMt!ep-N(eaR*n}3TJ`VKwenLE$MVTa{E>r_|T0*jfcdgj(a$ zAK6dn)+s$KKu(a(bMtkwaC-COe@lQfB~nv~)CfIG)PSjyfx;M|v!G9jTLt5YzD6pq z6%-%c6PZ;~3(WFlpGaS(=0EQLXYdJ#HepQ zIiKMlE-;H2R2+9O;G9qbH-jo=I;cja6#5mkffkrgz-U7Eb1-eKl^Tv@mzT>;)u7pA zyAbzkaEp+^9TG86g|3!@A;y$(Uk~>OF(aT{mCS%7!39C4Oa|p)Neyw=1-lk9!lWpm zD`+8Z=|K6Rb%59s@N{tvkrWc5LqtQ37&Ve?FG6c-swpp6lj15wIw zT?nd!C5QBZNRUOfjIG1U;x1kdZWFT=Ff@QWC!%Xa<}Tnn<^Bn_>J5Q1BZv80H#T#- z2L3My_Pc~7+<+tU1eCi>f|HOkDLy9#VW5OqREb`wH`S?(6*4khN_Awf5A+%0LNns- zcBRB9kQy81tXRXL%7J#_FvMqsoB@;dOE`n~l=#&eHQ@}f7W?nc!t;mM05P8v9QAOK zS5PcEF+Qlu*zQI`0KN`;jN=K|Sb888KWD3FAN zU^OsmqCgZfWXPe`a1lonP!R|q08-&|fLNaUZDdGe@`5|9H4?T##ml=!eY<+SMpli|@)A1>BY5K|wep0J4Ir^;9eHx(LFbcfIvnlg^^vrJS92 zJ41H6(luD;$DfkUV0RQgK-cj1TlkI!t-8q>a3)*T8y&n>ZFJ7BZHMxJdejixjw%b~ zghF-^UWv8Q<8e{gEQDCCQ7L?a4nzwXM zT*9GKS(W%~p^Et76dY^71-jLZ|NRPa5XhVjCgdU|aOTd8xrHu*j4^J=;RD}AHW^ZeGQQtkDKK%7Y^~Wv2K7UjrsgWv^$jvE_AzQ4t28zok`&(a?yMPf!D}o^XK0Z2m?_6 zfi_teE`Q%I#Ll2^MuOr2y&7bU+2HhuV6&l^8;r%DD&ob^ zc}{*tv+KK;JHznO^-8z9=7@X>ow#St+|kZ-1^J~w{OJLPF))nY$kH$%G0?*JlTrLn zEU}c)NTIn#?Es_AlGm=|{LuV+AVwOl8#uTPO$?@;Myt;;_-pMP3~9Rh+T$7z`MkGhU;*|q@lBDqd|`^WyiA7CYCX948!7&CBn#vlRQ2O%i-)6l7MU= z9h_*w+!f+dWYS3zgfcPE7oY)HT~bI$pD}W@k%MGWZSa@Uup;=2rzTEs;%MTr@ajfG z^87Cu!qLQ03;M)T z1Sb_R*@0Vvn!1F9L_Q>3#-=2K9o0jCq@c4nmgbfrCr zLK*m}Jn9+8@!d^90MtDE6=yt0-GWF^4BT~!7>i4aLfCU_9kSXOdp+p5P337%EsZb_pWZ-}v zstq+V-smPs6{4^vrA*!~66r|Ap<$X^I#g<C#`n34nz}CZN&40m9YQ^ZNB-=mWe0)x~ke6cQX(Sy_$!ik!hF;iYE*3F3%r(n{nt zm&?+#%TJ!KI-Ff|K}d<}q^HsaM=}ICLajrnf4FJyQVAz3}@E^(r+5tsn@z<_tAeBs5AG0q>0UU!G zA<3lKSFavDR|K&s#-wJ!XwaNNd-%YrE&d8&b+ErzYGz?gX;J9T!%!h;PoVK{5Tw0uwCm^)fA!^eSFYq> zFG6{Z#-N~(4I4HRYT-w7g!=%bD72wLtI;==i>{U_4*TUgd>1yQQl2wE>|>X-g`aqQ z7I5-_iWGx0Ri7>0{-O7jQqhGakze}dIn0UrF(lb>cUj!0j)OwdmwfKG^kiMccTRIl zMNJK&Gn3p$C0tJjO@ndmzHo*#5Dq9tS{oD+T+%2)2L^pJ3QWPZYdHrGAKjmPMy}AQ zJEZ5%UpjQ`R9Z$_S!Ln=ghRz8)zAS~vNMaT8xJKOxpF0sW=uKx`ErHA#40XcI$zz` z6zT80(JQ2&N+6fDBqt}u9y-w~Zc`}bC(;`plL7t#l z$QjkA&SldkQ)9j0Vqxv2%uHc(jeAh&Mt6T@^R?YOV$VQHl8>epRMBAF4Gb7&qd}K@ z`SQU-M-Cl7Ez?q!wN2N{t2l$Iy1FR4xcdCjy$e=uOv%b)Xln5uqaO^YIIn)&OK;Hvq&jyu1<`PJ#Z{tu2h<6?bV!XiHXPK;}0G_mI8!g zV2osqaXZ4VivvIRytsX~&*w+3Zu->wo$q63#GE+- zGc<#-I{4(=C2?*YzIRjU@yU*orzVHK`hT_6Q_pKynW!vlKXnCt7~nYw!l@V(_cD$A};!u@sZ3!y_OneETk)R{PFZt0i(h$AA~9E2^w< zjyz>x>8lscgzimFyIgoM`50#ur)L}sIdsM-YY5#QLm7sPNXcHaTkYEMke(NpL390$%D z$Lix^b}U@JzNDc|k7lRM&)YffSk~_7T?uC|LT95p4VL&f=AQ9DZ6yNEG)?2g5&)XO zpAer6wSxb69{?F48Q=`&F_f_*t=Zwjtv^&tG&(wO-R^(SKk@Nchc^#i%|!dhaw6*3 zoS=7hXV+3(txxi#O<9va44)C5l`U0Oxkb*N7x<3rsqdzQILL9j0G>ztp)%huLKjFN zG6mDoo9*9&oWaI|BSldG!4cp?L07|g583bDpLn@VWze@XdS%d#qmo8xXu>fAE8e>^ zGWBW=@G3Sag4G&4L!w$?WMXCMXV0E1u8ZEeqq(Jp(@A{%0`n?ca?YPTdHO`VM6ztv zhHbl(qqippd2DH@YjyQI#2R#sf+AmUzl5YyaxJ*kpok)syv;8lHtj;*j>woJd*b%) zO{`Zk?%uw|wY3M+FUB7_!f~yk(YpmgIXHW(Hu%-lHgYtaQ+xLAx>VP~QZh!_9<=Ak z`73$*4;=$n_{^E3LHke28Y}#Q!ZoyE*Y5Zxjm|{37hcUicD|6Jqcp^ zF|#Ye?_%b8u}ZgW-KK4^`vbxbM0-2yv13TmA85VcqeEQj#eTU_G8s>+n62D2HdqzwRc08Gm0(domYao2E`v;s7gFB71 zRnew`Mac^s;=^cKRv|n1L*%mf%ide}&);->8%!NxCM?pYEC?8Xyr`l=vU6U{;vJWF zg&do^Ce^oX6vWY{oH%u@tS&hrzNw{^(MX+~T??yP^0LmJI(7lU-GYa+zdXvdqjVuvoH~!LnqrWXoc(#TGMz#mw+A zBdf-e}W@_8$1jm^4YE@)v_RGPZ?EF%RH5V4;#blLhXGemc78zY)THe(B3iKjSUDBui5+M@;Nq zMEZ#VDhKmdSgvS{T*da#Q_uUmC28exqwB7aGxIRPH<#`4zpTQ4W+@q%$}>Ul$91$n zYjHUeaHNyzYMy%ZzVm_Z$x)*;5m|igLfFZVLq5(J3cC0Bj@$E)l417)K^N3e8xEGr zKgl>_6%nj@7v{$AheQX4gaw6!SJ%}nuP)tnaSIKNa=#zkH88p~Iu{v=fv=~)Ulz#fU4{z4ox#t+0UBYp^ zldI>*#6lsDOpP=}#>7s{uR^geUcNgvJ_++mNubs0Wmk8f@X$zi&%mDHNtROG zadZs}4RdsIdYDnj8dh%HaeR_fFg`kT>yA@wbg;9#S9VGL%)}(j<6|NtE?&Gow`#7h zdVce+6x+Hu09bF(H`zT*+tKwsd0anXQLh_4h)ZJwbQ4r zIhL0edU&`yxCI6H2RwN6n1+=MO7#~y&TL?VBxJ}zSUrAXfLtsvSi_`7)Q-;Q?sB~{ zqc=-}Ze+FQu&>R%^ecAWw&BH(DGTnd31Y8D+R5uhNmJ^EYr#ic({EmkI1yU#*u<{Y z3>KX5wVhuYba>)$E#mm`dx!D{vV)!*S2}O12p!Rt@U}9c7_$ zmyDtrorV?+Fg+(d5rezBEOfoN?F;vmLE_lJkcVm*Kn=iX5I+p@teLi$X@=%_3Px6m zp&5aqcni#=b#J2OZ}J}hBa_SXCUJJjGBOVeg{r7CiCR6;8(y4R6K2)I^0cb`E8ovEJ6{-apBh`p zn&oTc%mz5Qjo}9$Y=BZgA0RTI5O9OfG(qKH#fV#k@?!_GQvfP$iA=~a<1h#$!rc(? zgdaQ-i)Q{l|_0iR8*KVv0r zfI>ypLJP;j%mJSg;G;{BFi6@g7zU?$=hsxwpr8&QZt}2>JSrqAi()SAV2&ib;Rne1MJXagVsPiumi8q zk%UEcl!bz#fRGqXo+`sVTEL3IAUo78R51d$NA#Jad-7w|;gAPqvA8idWTNGs3)qG-@EsA(HA2lWCk4rV75 zI1!aY&vn88UO#8P59=!QHGt!W*}yk$WymhF*Jks#<2#djU5Woid?WXtC)3{^z9B{# z-@e@(>>Iut*zCR$cr&)Z8TnlEH#kE&dIbvJAZ&p%^7}IzoPjY7Coqap%o}6~w!|4Q zoA&^|m7-!4^P4wYPK=$xA6@P#VF=YHfpu{M{!1@(Ew+@ zZ^J=>f;Ry$J7ZZ^t^N_?jJ$6KoUuk#px}*!D2l+DEj*ur^^7vkD0q|c`Z*(#$L(O@ z*FQdhPvEUyc%Wq?HdychEIL>p#DW!mcs%5?;Yf}`SQC)(Dm>UWdAy1upN3fXl-<$( zDg-eKe&HZb6rs`Z89cU~h^i$Yzp%EbfUow-z65wDYsFagBJuSLKW3TGi7ufPL8 zqJ@Rx;JeBKgU9625f6RA6$4_fq}pJ?`m7&6!4qO6XK<0o8%PqK(ZaKLU@*LVWDCk; zjk#_xzJgycpvACJEqFQ%R0vf;l6a(!eB6ZMsX&vK{<*vNQr7qtb{KyG9R z0KO0g&nMD&6cE%9wF2T2wIN5EAPk1Lat7QnLr8_#Ny-R$J+lSQ3=a>ZVt+p@5)=?m zCql)bx{wj6umF5u$Y)uIPJW&9dEfRxWiWw4sA3`%Ix0N$82Z*Hb zdmR#<4#HR@ajc$fz+d8N7T>N$cliZXnJu#Up=v1j1%OOUpdsXVi-K5 z3%xMWF&aR01iH2(1IU<0uLk!rb9X=pd3#UA%KAnYl$a2 z$>6SV=GOx}Ln&&eHMw20BQzeKoElxN>{(mF7h2^eCPNOW6lw|f%^LhJ0Qiy*o{)(K zjuogAsPs6sgL}a;(>T{TMC*Wu5P&EXByQrRd58|mMl=bP4M~dg9+>C+q~i?Bdb_w! z&^*r@jJgGPZ|^w+)KJgR90gM@R8|wkFeZElndey}p2xKFf7i`JxEB)%*`qF}=;N{CIwAVnRh!VrA;Ib{UpJEDlNY)0*1Y zlCUR@UY~^9rHnN$s{5aoyFVy5;if`mVnI%AAKM zy^~@1fno?E%TlU)Zr;lVuD_#pZMx$lyW3^8Ev*d=A(1K2mGpJh8_l$XgDb=6&bvi; zg+;@p%-PwA=Z#Jg$paHp%QK@#Y%i>=X%e!_26{Rt#s*F~g_kuqM@EFMsZ~w=eIPfO zGAf+;wE*Wv++s|_`*smdCY*@%_~svRtME;n2-xNLPF8)owbYi@S;c;x#|?<7sv*Y;KyKMTwp z4Eey}%TZOEf6?!P^NZKmj$ ziM(gTEr4#H!b9%mfyv_!4*J-SQQ85M%VGb0{W=}!F*JWh*X14VU-lX%PDj1(SKUBc zhC7#2c86Tjg7%2o5o7vSzVEkAX|-(iuF$U%r?W=1MR!sU+Gg(hzGtcEz;cCg~La|V=B7ZV-cJfq_|TB~03_6uDyz??`Z zuWPw@_GE2YesFviuG|1T(_EZd*gOHg7SUjln8|^`%^B^G}7W!df5v+FRyhl*afnKkAe4t&3AZg!R}-4*!h z6#`mBR@_t+dvaqoM2 zF$|OXI5)u8KOrIE#6^ddRW&SjT-|-5A|F1<&2MRGdJq-q;~Sh;(n5--aOPJ8P*_G! zH{6K7cK6{m|CBrXJP(d8wdRh5z3cq1SL1Kn`0fkMkH;^ika4DIH1@+wZ%02*DeX<) z>AWi_@1CujO?q89syQz){Ge;%$wU5^{hr?3cJuw5vD|>{dsl+&ZzrC9@4~L0#opwq z3%1@@p10= z<>-WpfoUZ#7?;LJ#|I`CDPA<{H5v+582Eu@+~X3>v}vt(aAJIRh38CjD@Gs_3>0f? zYDu!p&rFX_%rC8KMcy>KrZ>R6&0{w8H)=LM|3nX~x}sWw zzR2kyK*4aq1e!+_lqfA3v51$*fjc`z0e1PgfVdU#(Y`A~JfYhup75oZ; z9V;{=&XZW61Nj&c;8pvAu?GDq0jec)<}d$mKpDR@&cKx?-!B7T-(eM^JVTJ zDs+`FCzDTLB9S&Xu^jNH1!VIp=8S?j3NSar^Ix(7yVd#U#uhjue-B`2Xo$yi#4sI_ z&94dMe?9!l%B zH`@wl6exIOv1QJ{-0X+9&B%jO3l2qOe*Z3FB_-X^Ok#%{ z{C`;la#%UAyv2ntY?6$uDa+viGG~75+zi6}2+oj9Fdv08zbrug<=2M@z={T#gYUu1 z8iT|D+ommDqFzJ=L9Mx0ocSIjYuF|O$;v7yD?KEH*H;WCOm|x7(K``Qox#J_7uNnO2#KtY8AZIP%7X^q#{xS?a41g$`>aA~G=F9}NM% z*6?x^Vv#e03vrPhzvlJEfrtZ?4TS(g0X=5$pS?kE4-EuAEGP2~LozTB4Dva@VYpIXCk4>c$8rs7VI*}DF=Ls1shAgZr(f~ z2VTJ7X&1bOA`*##8`PBeSR=|t4z><*0EvXeUIdaQ|HF@D4!}2OphR+Nc!k@I4(^Qs zh)l9@lB8xN#t6d1Z;GfG$zqm3UyK$>Z;+-ml1eXGjH1L!3=cX69Wk~8F%| zXin0a;8v74ff6K*C>c!_@@ga~C!q=igDZq*C4q(FBaN3#(wa#Up+=zH05YmT$)TA+ zZ}7+fClNYz`emDnW5Iaw4j&9*Q80Eq*CEW#Uw^rF-o%F9;)B!}xKXyej>)=8TsmfUZHkIVJ59pzh z3(`PVXIy$)6(?!d*yJmP-aVR0(K3+ObSt6rMb?Y5wvJXL7l;eA94H1FhyPg=q`z3y zl^9g}2pSS+O)MUgByT+7H-AL(4Lf8FOk?oaKDG#H3#2Njv1FN9g4A`= zNJ^uh&od{7Jm*2fiW!QM9$EefA{)B^ovJJO#RX5e@h>#rg)kY zX}xID3X5iLLeJ3@bkE{~K~R~wp`bFS6Ulcq{3;{r%-pJpGiXJQ7UyUl1}-Bb%GmqwcRMXe4UHhE zdS>4Yq8CjDKMign)EG*~+otZUL;@TRgqd7ApYRv)# z4Npl6Mq$aona!NqB;Y4wSYbxbtDp=zfoE|30wW1GHQ#X9`M-ST`@U~g8^@WUWEN?$ ze&XpKw=?aUr2XD|)4Otp)zRB-(68z)7xi+GPByGhY_)9ABM)JXXX?Qj|`tYe>Fa%P)Ein-fWJKihK$|maT~}gX)ZxU7oHP?t z?|dTMV}V^LA3we?;Nm=k1DTo|*d6!}4{9=0{N$;~Pdy5w>z9hJ#O`u=aqD2L{j93y zcF`%jJPlIA426?e0eWrotUAXoe7k#9D~q$S6_e%V^|aIRg=uYTY46_J);8a(GG@IO zY3KRk*a7E1)U3=5QW+olf7QzwU>xJf%t*%T3=0^s93-v-AE@(a_&{ z_=mN14#F(-%5CQvl>utv=yG>%rvJ>@3*Cb=Gt<)^!Epwfy&oK^g>C}ZU(i!94?7He_u`!9QP2KZzv-hKu2iNq@F89o49V7q|H;3`^`Guv zj;cFmlAgK3OjLDCocMO|Xq?y1mQg-!2v1v`s$RZ&;aE znaSD!hIZi1R7zLWk)#W(H057$^=!=jRdK#*^w>79<6~x6kHD;IDYfy;(Uc37hKhsk z?{;Wn&~{ zx}8#+7U%Q{9|i1xx)8a~;diNRCG~U3pZnO1(q`n0g#iKR`5OE1&)ln8I9T%vQysdT zg8}*owE zxj5uZZEv61!c7c~`1wUQG`0H%dH`oaq7x=&7A4cd^}CKsEDQ#$r;q#0SoiMzw$JOk z+FD!MI=b~H$~Q1@RRf%Xc^f53nzHBFb&cZ>9>y><<>u;JT3*}H*4EPA0qk=34}cXW zxOaAT`}^F7kj;J5zV2Qn1qCSul`zGX%qtf!TyLFW&RxEu)6A@{t~vUIQ@|PAS9~J? zLp8p?h-;9Sp~auQ7y7^7@o^v1C4J`efBZh;s~eedW})(O^p4=xJ0Xn@`~7{?RK4Tl zv$mOsF2(-0(26ov(#DotwN2UWUE^RE>mfi*20A|e{809(Bgq%{MgHgg zkKS|2ikeW5mo{GC9`RLNTZx%$qrn10lBSZo!VV{%w@7OV_4iJMT%BSk3ny+J@V`3G zQaDSpXjgO@+aLbB-SdmL6C5=Bz|r^v=M$Z32irOZUrbJA*=C?VFt^&{k#p=q z_U^+c|Pgge{gswr)OA@S}sR^72fO? zTH|`q+jGs_?C|)~`HU-ZIfsrsxcJi0bS`$kZNizl*~|m?cQ>!)lukYUqwAT`+2-Wt z8*e-RDWR?0A>*BQ9RKiQxvOO&uS*;6S{HJ_=eB{SkubOoGnd{GZ6AM=x3D!ssRum& zSUR77wa6)=@Cl6rKCC^Va~nIK`u@K;y_4QlEeNZj#aC>@_q7;@OQ)afw52B=U%8SV zLR(a&gJEsDO222<9WqYeD0Fa6_e|*U|Mc#A^~()K(_yy37ps@E_Bgy-H9gwBnE9Fe z-d@TG=|j&8R|DU2DtxbJRWlwIqpA-F?Fp+Y;7yXoTy5*OEwnYXb~64@u=66dsAu{I zsmALWr=63-&A8&i6_Hh%KM7}`LlgLsj?UhR2}Tqsqb@ig(9ta*H76f(&(0}cTwVpr zPEAjHdU}OMgx|g&J~1;-ne^d-0gm^4N^6=0maZr(yLUfKqtio33r|bDIXO0>z5Aua z^R!77@!;V-ci)u9*{mR@JbnVJ|J8*tPj|PwPOkH_Bco#rNr~wK%QZK(I6J#~hD57% zI=xmM8S}uTUx9iiras0p0%xq{|BVC28894nW(FyrdUk znUUlFtS`H;^Jzd@s-Brnsz``0P1WcJTpqi5KE50EJUqNO*(l5wx1_ivU2}YNuWG1Y z;OO0*)l;3n8|^plQrumOI~%9CySux)yA`+Mu#o~^+})kx4#i<(#ogiXJGbXQIJwI^ zlT0q&Nir+X`YZ&GZl#9Np^BC+%6^umpe((B<;>%3-)qS(zuPBxPU0R4Saa-qkFa#| z=NJ$Gt2J!_9h~X9NiOKCQ#P!aEAU_Vvxr5|{K1vpAj5a<-SXoe5K$|?&9vi54d1@8 zy@cuy8E!KjIYyWEoHKCFF|cPfPdhb5Rkh?uk_7z1OV!a)vT=cTo;Q!?E9C6o-o)Cy ze37-oucXEchpT<;haX5o!NA&CEd}Oe`0H3JRYR<1hLib?2TG_#TpYdb(&QRp&DNKh6jCSyw>*Tf>nJmS`f%Kx3y(xsB%I` zA~DAp_$!wYZ(KV56uFIJ43pU(Pi~{|VTaalH+?mxA0Mz5LDplOOo_o?RlAeOg?C6H z6~1Q@vP~q?Y~f?C&jSS=-6?Yn6Es(Mv)stY!J4~7e0E&llc*FfPjvnBRh`a;mCVdu zgA)(w$AA&h=A1F)6DbpwwQa6Ya#wVS=(mYrPasm9q$*ka7_1a4(2GcTMXYB1K+iQI z>FHXX6U;_j;?&>m3Ln$DoQ!?}W=ELKDH_&=d^SM~q$B@M(j0IPjQ1y)DIb{PWWjN`c{Wm ziGmA;m!$ISI=CLcs>C9*a_$Fc!*YUwON5dH+GKl%!pB0=co#{~WYCNHNl|^Gm!SmV zGZrAGD4}I&9|HS87c}fVtt?6iNIDa~i53rard=de zufS{|os)4xq<HVIoQ}&Y!-JA@nf%Zj_0H%`Zl*N0e5Jd-THL%tiu=!0BW$4#3cW~zVo@w1&wisK>0l?iPUS%5+N3e?8|FLNEUNF zg0H_GqLI1_ju=W_!b6xq!v;JmphWYCkM=S9LBPL~@l=X7i%gL{g91&pP%Y1}*Z%^trekamFieka^Mvt=aQP&? zPy-IhmTNRZLJMF(9-InLRv$OKw@6@QbpY%ir^!R?;>?2iokPy&$dSbTuW+iUs34X7 zI7k>_4p7n5`M zHAXM&>mytZ6#sIxf0g6_Bx=GHWqWEVPy7IvdQ71t*pI@LtsCJB18YQ=8lGO^_@@3s#+!GrrN- zL!zpfZo6RzGKBjpKpOC0VNHtc_3F0$6vV6oGgS;~P<2ddpD-<0 zRm6r(uZq?dciG?}#oHWSyDn7PMsbfmW>zv(QBQH-Pee70078tnJ%OFU95;y~kv=Rc zog<|Wy*|vG%*B)PdSw8AUL8j!{KXhbv`AS=RfDmFYxNN#$00TORYE!fGlu4^o19_A z2qKmU%?_eEbbM##k%sz5tP4>TO6(FW)SYqR8g%}F_f?4x(u5vfe%TJ%PoggIkceNy zG;rt1WFG1e$r8TC7~(0JZB=eN(H~TJsz?ITIE?>bDp1Q|5^V6W{p+#GuY3u1WdD4= zYpfFV(9$!e2WtS3Jcn|lxzeO@AuOP%CDAaXOFP6R5y~O81KX^{n>43)1nb4_RV>4S z$C7^}7?a2jVS-J^DAKP9c%h~ozTuOVMu-f>hQ~v&M_sG^@Uk1bgnZHwVa8BKU3Dld zoGLV%Ew+8X&A7Hn10@o^C^?i7T|nUWQWW{THILL zQlJEiTI64hfGe8%&%1&Y7~caFs9l|_zK2lMoG6_FefY63j@wmi3Q`$hJ;|(kxn@v6 z@t6xau{83+D^f!`4CD)d5%TxwGoJQN29`L;MSK`tyydLp$P22S9FcRP5k0B|Nrjx# zIc5w342xjGMNT(5hYowBsBLA(Lj~pfku!>KjS*{N+jR6!EalkY?c@8JE>tVdg$}eP z35i;MAvb=lkqbF$Ye{g7*Id}z+{Zy@>tuz?tL55QCdb8;MQTh$LDGjH%ZUeU!=;fT z)PFlY?TgG13#6qA2`xX*>#ii|jwlPkRz{STO`tYn!-jCj;Un(pEc~|>zpzrfjrs)> zvJ^d{hv)2%?vXGk6U*24Rp0xDkpVRKWhmEmvfN0ymE$ui($%BtrmEH{soT5ALHIqp z59rt4L5su0q2JTFT#`z^4KYn2M(YDVfcfGDlHQ6}%PNT1PZ6EjN4W zQF+f~0E>w-oHi`cG>X{vUP+E*0_BVZ@N$Os9f&|?VvHo`;20|iQ-l!ccN9%YLho8L zuW+)}ox@k2^2v^qaYfxm*+Cwy-xTbQm6Ky&n0P2-5va8*)3$~wZ&5MzNP>yALrSnh zAvQ3ORHP{Aw$CD--MyS7Z?kGP$d=EJH%xt%Sm+gUCIAAnd)O&Mj@s2vS(5gol6V*_EJ?t;jj0pb@L(nd z!%fr10LY(n(mIx7Ratf~?W$=$|dR;4XYfW}Sk0#H${|cWQ!;Y*n zG%(7zV)v#Nm*rv3=M*YR_Ic$71w%BcZc| zha2XbnRwdFsZogGgCv3{F|0y=LGG#|o0(Jp{D#bk+$AvO3>%3{*Bu!$PK6u_OZPqQ zH)~&AoR6*lUEa(CxBGoqmkAM!U?gnFfao5GWHq}4sEh-`Dkq6kY4yF>XkW~=Vu-yp zI&U6lbXd%ql2nG&C&8!BUgE$&7U#QfsNTH(_kn+$as@Zvthj()8^R$Ty|`*T5%fM- zwsijP#!zu^@XR3P_1pZY9geo6(??1oGAM9lb9{L4Vi9}$imK7~ZWd-GxNm1L3N_-l zP!6db(0eb=2wd!DHEkh0?(H-q!$MjRSCzYcDI_Sk<-U4RHKjAkpOA3b^Ey5>q;BgO zQ~iEYJ`36oGQq{mgIs_Od9$l?yn(=^9Iy+%91@ zd!X`HxV-t-uR>yuh2Q z-L$wxFnB<$Wn~eI_~hLG_U5@{Xi=$`&zFPDyRG`6rZ^)uqhO)AkpvB?u|R0E=Y3Gm z@FPp7UFs|WHgaU+9yv-#aqp1$;&~%6P*#N|X2pw%?UL6V2ZdQ~@+W+w(cdJX{RayP zHXrdT?I`W_c|}o6{r09j{P_3YoyR9l-^+`n8@U;)#||O9?EKJ=pDof}x3C}AKklB> zDjqLr4(_LE6U!g@1h15WKDI9owGu0ZItw0YX9n8N=A)W1qc-;6T>p7`TP9RlySyk) z4NFA4E#$}c?~=dAv!I>{gNd;MKNb;IK-TOy_}aHm7I2pnT22K(AI{z;0Re%-vxCY& zm3kgWpqlUgFn`a5Bgv?uzBA(Z9-cA}mE752xgc$guTKZ>M)wD+pwmpf99of>5Wj2T zf8DKQT>rvqnLBwmpPXNR<=FWidq zrLqYOjV=vRQ&T@12{l~bKV}i+3AoJ(veUdAC!0yE=?L}D1%3Rp7YR1f9ttDwMCcau5B@QSNiII2{Y%jHrq5H#;K}J@1w+A1;!1a`!)KZ23a*yc z!k+1e&80%f(&SWJkk6UEW%wn@D+4`H!YeOV=-I!ucO_nKtKXK4qskUnQkdVrzO<&I z<@fpHtK+0%Yk<$*$a~vHbJlKH!P{lr==0}WvVl$jlGqGs=OOL~E1{&GOwnq3a;w9P zS3(ctpQ%loeL!BgRJoPC?LdH5!L8vq%`pwvewqEl!=2LmMJxwX-X`U{gHuq)>D>Ms zoXYj*K53BA$~}g(lMdmF>B?^CFN931fh6aL$?BceALZJww~G@;N@*)f_QKvdmUJvf zU!hhXb+$t0W;}w+elsi=;5_B(ECNQk&wt0);dip@n5|m)4=TYc=Q%u@Ha4xBF@Fzl zes;Z~2?MXln#X2Xjvouo5Re{xg4Q2&m=^R>nyd;GZZlE;iWZgm56rW)Mdg5kO6X&X zCnPm`JF$)U%hK_PXLU{gt1@}{bgi8wSp9TnKqhV?x|2=B3r<*-j@{eL?f<;>9KXCM zePALq*8O5$#=6(;9H5TEEyOv$%UoWJEpN&Mc*dYWG`sb7W}N2fHVT4=v&!+iT9RB;fq1qUw0kh_?OAdu}p<>o-$sfz8|Y+I{;Rv&4lG_us$&GW^i~ z-mA=-*=Z1*OK~4@$emKz%(0N4zD@bHpRkeUIrCVT&KUHZ7bsV$#$UEH+m+L|3c73o zUt+AYVvzj&58t?=j4$(6DDEvi%)@JgfE?0AV*c-cCZ^ovJAe!-)voPeTUH<$`8DWagu}Mq5|pY3}9Bu|m_of{*q4 z@k<`7mG5O#tSslH^QMvAi>Rx3rJ5J+Nl04p#@XH7UwQc2_V(s@ZmfJ5Q`j_>6@_q(;KGy)=0XXw1Qx7jyF6*5OvhGm|y zeCi^H-+}IEp5;3VWT>%1D3v7BP+lte_95)2VRLszx`7DEKUABGu~$khYl_kZPPx4) za1wgP-5xjx>6rT7V=gZp}oe8p4hrx2| zXx}d`s+(tiMsSp+a4>v4J>ZV7Nq8_#b#LZzNx-Z>7zE9&qRK5?gvj6=&UKk|^bQ}6 z&50uZBDc#OjsN!|q zE1D_(p_2JCZd@>Eij9?Gr?1&K%!itcVsewk+t=~t^YzKvN~^3OIIzO2E+zE=b=`J-v{Z*ao^OSN z54Q0aDy{^-^Ve+L8d_RvI_lpyp)xG3UQu(q-^q%tZ9MHCr_mZ+Zy(n3(U1^G@rhrJ z)|JGm55z>p=NKzSgkaf$fU304+^YuiZ@8hx6=dbbqTD9NBmiA*a{Gg0Z+qoF(<=>Jevc1sd}e`59fau zxOg3$ygm*cc%YchfUZTL4v)Zcv(f2p3lw4&I4S*r;@jIB&x`e5P_b*i<%+r%&toEK z9lu!RVdFefXp!3FQzpQx+gLP7Rj_50y4_})*TT{i(~bSrqxW`lSm@v;! zMp|CL;~AA1&nK)Obl-JZtgF`uG`%Fo@f!KaG_r2mvPMKe;;Lb`f4#95wQ+ddX-jpA ziz#%`OJB+puqDiRF6u1f_|6DEYtKpe5**z+l?)k~8Cc|l?#5Mc@Bh8E$F2-6#A<33 z^V>hRaHbXT`fOeN?9{Dp2Kv1ESQuO^G_|&pW@q9(-$Zv?8DCAFjrDfF`UI%0_sz~e z2y!>NW&i#A_vxw+j!kCW;qsU+!18b*<~ri6XnxyiyOyJ$0Isz4-vljMsTJ<@wESf~ ze@2oXeKqpx8VPev`F8V6&3}GlyUX$WxK1p!HZw%c^o05#Ad!``#e**}42dOqsRC!A z(Y3Ka<4}-=rP^Vfu42x*S>&Z6W&Su*s$ea5oQZL2GC-)a2~l@zb~QWoRe+2`BFLL*rSlJIG#owc0C8Z?Y3YHpaDtfv*t81eQ%yc^1D)k))lU+AD z$G;_fZC$@u1pJk4dlF`}aO}IlS><9$HD%@O*RGz@nynHwTnj5)>|ejJ)&Jcy#Bw0{ z46|s5*x6QHT3-SL8GJq_t8(tH<9P#j4HaGP_d^l$=KAo|XOLWD#bNJCh_drY-=#)qn7Z1V>#M6u@o99+ zf3;N|8fR-R@MLXpVy$!PuXFKsSt{E9<56+96q~tfkgVns{_kYU+Ba*3ZUK)x z;w~135`x3*#bHqRGyhBmvE|YMR=lZMun+0(j1I%KSHyBZ+x0pG{%)vZl zNeAr}W!p&%72u)_FdCKApEMKXZws`NUW)}hZbc_4SDGLW!BbGqQ`G*B=O{Z%q_$cy zDM0=MWeP!Pb8!hpkEd^e|7Qg8Dzwe@7h${EIRaR(-8gtEA$ZCYu+c*@?N16?oS2xP z#8ji>%WuZ9#jM)p?*Dh~5zG(f7hs>?++0}LY^+e-R}_l&F+ksj175UV=Uq@$UPf{a z@tNaKPEXHFvlQl~4G^ROE_+ccN6`id+%c<2gyG>ONID!cwNA9f{E0Pt73zG^we#Ss z6myL4$?Evt$*M#VzB+(Vss=v`<6)F(5SU0IK0blDwxVz|nV!{1VyczqUdvca1FXLD zf+7NF`vaX?|1EB)5z;Zpbb2SDduSHtPma@Xdk|a= z4H0+%9FiO)O$^vtUoMHR`I~lXL3z3ivML^6FaUD5s9iT;> zLzRLtLBFB^5=7eF*(EfYPhx`8N^g*Uu___M_HyC7GwsQiv?NL zeM$0d5kO87Tyd)b)24Ba(J*&bif9T>DiS*Aut4t{xVP~!v4MS*59<7edP_5uF#2Sp zJE}0`eAIqcBHtAHvz;sH$3A#)xF7#9Y{snPvAMKzy0`y0?fHu2yVR3bH zb1|X5vIIE+JzyMB4ZuJj-K=~XtVu;QC_bj<=q?TvA=9Qy#lr)rk_`tNxpqKRJNJLR zEDb7#CRO%WTj zB|$@!S=%*F+Yn@*y*|19!&xeO%T&u`h!`m6jJuLp@`Z7I=o{(__)Ivd;a0iM$iXj2 zSiGUG_2~H-aiQXcA9Ywzl{T|hNOzTzvp91<8oNShNAz|NGtUG0$DM_<$p$?bD2Uh2hN?czZf%w}U(_;6rI)7^CEqlAne}QqW*pa++^N zeUwh~TX?x#lcV6U^!M*FbKDS$(C>f@GJl1D_2RgVs_@n2Up1MNN4l6?LR*->e)Y7~ zW#;DRq$F$HadOc!@d(y3GI4m>x_*C9aaEPIv>Z|UD=rwId&OJ(WHO(6R~Dhx*jSUW z;hSfC79qa}{cCv4aIzO^cd})04y0r52?nSZO?U$WBGaPj^*|lU;j7 z6vbJ7x#=0%SUJD4%{cKHPS?#+Z!s_^t;)&_yR4%XCj64Jze>t{pIyHLPh@ll1`i8$ zlFRZB%}a!*qtOyp{pNkrB~R#cpF8(G;y7k05hH)MXS5nXd8c}=_haHyqmZLowXWrs z`H<6mzghk5hdh|ybB3O(Y5ol_M#sV7`03V4O0x8jZ{qeR$AWNUZ)07BlRaIa*S3~e zcQxsGL%i%5XlmqL>N2$cqp`jm*>1uu;o3K zfg;X51t#-h6m84lmd|s@)7|v>oJCRcKwW!M?(*v@YNK?eIEl z$uU^gP*?BnUFRmJzn&=wWEbKgJvgj?Y@>9BZP4Pq^&0*9xofHC4A9q? zTRH@~&OqcW-Xt`D0k5abbdxOFFcsFEBf6wugKB4Y7rx$Vk#Q zaECouXW_5$j-eG2Q? zIgr*V3MsLdJadI!4&i2_lh?p)X~W{I*-CB*2gwC9oFgpT3s(VQ8R~jL*SFlrBVT7C zbtxFXKo9CZW8G7m@;ZKd(r>TcpVh3|J8GO}>b zo0dUgR&nPF&6npw^Fr-Zd$N-9aei%&SL9HGXddzT4T7w^^-m8yat4hPjSjfc6~fL-W~c_xj-a=VU|<=0anrh#OI3 z9k16N`1#9un=xH*PKYPq`|nKwZWKw2x%>9IB_v^_b?dXJqGrlo|8Mh=c3&8D|3H`b zuh$c}b%X97=ZQol0c*D>ADHyO135Rfb)ioIuHLR*?x0s(ep0FueHUk8=ZA!d9KYft2^m*G>LkG0@pzkjUQZyQo!&IaE?}Apay_0kVd)h~e1+&1-2C#kx!$5| z`aPM;xJ+jl*>?sB9~YywSRDv$w>aeFlzj$vPRKQi^*H9^GHfIZJ^POZJxAI=MS zeZ7qY-9`?R9K5!7UM~aYmzNRJlt;39DGf(?DNTFfFgY<%%n&R}v?KSSr>zfN2=SKp zh~x$lSLFwdztoJI5g?)g(D%BIrh%!4_75D;NxL}iROVImIk^3CXCrCrh_D|M%XG;goBQaLIKW+lf5N`!y% z`rS`cP~+<)k@kp}mGMTS5JN9c%g^azj`rP+5A5oYk5rY>VWND4$>u(>nTB4wLbl`1 zkr%Ltq{A2tuHz+8f>OmvC|1Y~*`xPYN)G!NHns#gr)5F@H&-Vz#8=oU9ccXB3b zg>4!jzF~!Z&59)C4ux0`Dj~9lYhi|#YWWJRbcm&m1Lt|qvU4()lTiK4nH&?ksS6YD z(;{~T5?v;84D(pmd;|h6a-tV+dJMqO_WMMYK*I3yuA*N@5{5XnmPf)nvY#Qmn4)X)(qb3rP$kq^Z#GNgFo6 zBsUzm?5<22QDLmem$PDohsFr8A?AqE2*fMm?4p3BxT=&~CN zjkQ>(f9#5f*BgVM=zqy%yjiL5b4eyhgXpNeuG_4G8JHC^ifKZVdNS%NSv|s%@GCtX z`y2S^h+dM-DSA!B#pSxMFIcj;rD0F+>5!L0SQu@gF#|dP5vz;sSgH@3DK<8iAb#Y} zPp93S+>mSO5J(tJS%2J~b~unoNGNIK|GTvRTZD#f-TWyW68U%T5a)Fi@YQ4_6vb

E8JUE(yP literal 0 HcmV?d00001 diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 5548e78ab8..bfb7bc57df 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/14/2018 +ms.date: 03/16/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -21,7 +21,7 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Devices not showing up](#devices-not-showing-up) -[Device Health data not appearing](#device-health-data-not-appearing) +[Device Health crash data not appearing](#device-health-crash-data-not-appearing) [Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates) @@ -38,21 +38,21 @@ In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. -If devices are not showing up as expected, find a representative device and follow these steps to rerun the latest Upgrade Readiness deployment script on it to troubleshoot issues: +If devices are not showing up as expected, find a representative device and follow these steps to run the latest pilot version of the Upgrade Readiness deployment script on it to troubleshoot issues: 1. Download and extract the [Upgrade Readiness Deployment Script](https://www.microsoft.com/download/details.aspx?id=53327). Ensure that the **Pilot/Diagnostics** folder is included. 2. Edit the script as described in [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md). 3. Check that `isVerboseLogging` is set to `$true`. 4. Run the script again. Log files will be saved to the directory specified in the script. -5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully. The filename with a GUID has clear text that can be read to uncover common issues. +5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully. 6. If you are still seeing errors you can't diagnose, then consider open a support case with Microsoft Support through your regular channel and provide this information. -If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally (you might not need verbose logging in this case, unless you plan to collect the log files). +If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally. -If you think the issue might be related a network proxy, check the endpoint connectivity(#endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. +If you think the issue might be related to a network proxy, check "Enable data sharing" section of the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. -### Device Health data not appearing +### Device Health crash data not appearing #### Is WER disabled? If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. @@ -78,10 +78,6 @@ To test access as a given user, you can run this Windows PowerShell cmdlet *whil ```powershell $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' 'v10.events.data.microsoft.com' @@ -99,10 +95,6 @@ To test access in the machine context (requires administrative rights), run the [scriptblock]$accessTest = { $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' 'v10.events.data.microsoft.com' @@ -126,19 +118,29 @@ Get-Content $outputFileFullPath As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. -### Upgrade Readiness reports outdated updates -Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. +### Upgrade Readiness shows many "Computers with outdated KB" +If you see a large number of devices reported as shown in this screenshot of the Upgrade Readiness tile: + +[![Upgrade Readiness tile showing Computers with outdated KB datum in red box](images/outdated_outdated.png)](images/outdated_outdated.png) + +On Windows 7 SP1 and Windows 8.1 devices, you must deploy the compatibility update as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). + +Note that the compatibility update retains the same KB number when a new version is released, so even if the update is installed on your devices, *they might not be running the latest version*. The compatibility update is now a critical update, so you can check that the latest version is installed from your management tool. -### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. +### Upgrade Readiness shows many "Computers with incomplete data" +If you see a large number of devices reported as shown in this screenshot of the Upgrade Readiness tile: + +[![Upgrade Readiness tile showing Computers with incomplete data datum in red box](images/outdated_incomplete.png)](images/outdated_incomplete.png) + +Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. Remember to wait up to 48-72 hours to see the results. +See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. + If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. - - ### Upgrade Readiness doesn't show app inventory data on some devices Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). @@ -156,7 +158,7 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that ### What are the requirements and costs for Windows Analytics solutions? | Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements | |----------------------|-----------------------------------|------------------------------|------------------------------| -| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | +| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8.1, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | | Update Compliance | No additional requirements | Windows 10 | Basic level | | Device Health | No additional requirements | - Windows 10 Enterprise or Windows 10 Education per-device with active Software Assurance
- Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)
- Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)
- Windows VDA E3 or E5 per-device or per-user subscription
- Windows Server 2016 or later | Windows 10 | Enhanced level | @@ -176,23 +178,23 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: +- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization) - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) - [Windows 10, version 1703 basic level Windows diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703) - [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) ### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? -No +No, the entire service is powered by Windows diagnostic data, which requires that devices have this direct connectivity. ### Can I choose the data center location? Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). ### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade? -system Center Configuration Manager (SCCM) considers a device ready to upgrade if no installed app is marked “not ready”, while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready” (or are in the ignore/low installation count category). +System Center Configuration Manager (SCCM) considers a device ready to upgrade if *no installed app* has an upgrade decision of “not ready” (that is, they are all "ready" or "in progress"), while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready”.   Currently, you can choose the criteria you wish to use: - To use the SCCM criteria, create the collection of devices ready to upgrade within the SCCM console (using the analytics connector). diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 1d0b442c14..de69f455fc 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -22,11 +22,8 @@ If you have not already done so, consult the topics for any of the three Windows If you've already done that, you're ready to enroll your devices in Windows Analytics by following these steps: -## Deploy your Commercial ID to your Windows 10 devices and enable data sharing -In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. You can use either Group Policy or Mobile Device Management (MDM) to deploy your Commercial ID. - -### Copy your Commercial ID key +## Copy your Commercial ID key Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. @@ -36,34 +33,20 @@ Microsoft uses a unique commercial ID to map information from user computers to ![Operations Management Suite Settings dialog showing Connected sources and Windows telemetry selected and the commercial ID location marked by a black box in the lower right.](images/WA-device-enrollment.png) -2. Copy your Commercial ID (which should already be populated). +2. Copy your Commercial ID (which should already be populated). Save this Commercial ID because you will need it later for use in the deployment scripts and policies. >**Important**
Regenerate a Commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. -### Deploy your Commercial ID to your Windows 10 devices and set the diagnostic data level -There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). - -- Using Group Policy

- Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. - 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** - 2. Double-click **Configure the Commercial ID** - 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

- -- Using Microsoft Mobile Device Management (MDM)

-Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. You can find more information on deployment using MDM at the [DMClient Configuration Service Provider topic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   - - - -### Enable data sharing +## Enable data sharing To enable data sharing, configure your proxy sever to whitelist the following endpoints. You might need to get approval from your security group to do this. | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. (This endpoint is used by Windows 10, version 1709 or earlier.) +| `https://v10.events.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1803| +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1709 or earlier | | `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 | -| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | @@ -72,7 +55,7 @@ To enable data sharing, configure your proxy sever to whitelist the following en -#### Configuring endpoint access with proxy servers +### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: - **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. This is the most comprehensive solution and it works for all versions of Windows 10. @@ -80,8 +63,6 @@ If your organization uses proxy server authentication for outbound traffic, use - **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. - - ## Deploy the compatibility update and related updates The compatibility update scans your devices and enables application usage tracking. If you don’t already have these updates installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. @@ -132,7 +113,7 @@ When you have completed a pilot deployment, you are ready to automate data colle To ensure that user computers are receiving the most up-to-date data from Microsoft, we recommend that you establish the following data sharing and analysis processes: - Enable automatic updates for the compatibility update and related updates. These updates include the latest application and driver issue information as we discover it during testing. -- Schedule the Upgrade Readiness deployment script to automatically run monthly so that you don’t have to manually initiate an inventory scan each time the compatibility updates are refreshed. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below. +- Schedule the Upgrade Readiness deployment script to automatically run monthly. Scheduling the script ensures that full inventory is sent monthly even if devices were not connected or had low battery power at the time the system normally sends inventory. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below. When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the changes is created when the update package is installed. For Windows 10 devices, this task is already included in the operating system. A full scan averages about 2 MB, but the scans for changes are very small. The scheduled task is named "Windows Compatibility Appraiser" and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Changes are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. @@ -141,19 +122,24 @@ When you run the deployment script, it initiates a full scan. The daily schedule Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see [New version of the Upgrade Analytics Deployment Script available](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/) on the Upgrade Readiness blog. For information on how to deploy PowerShell scripts by using Windows Intune, see [Manage PowerShell scripts in Intune for Windows 10 devices](https://docs.microsoft.com/intune/intune-management-extension). ### Distributing policies at scale -There are a number of policies that can be centrally managed to control Windows Analytics device configuration. These policies are under Microsoft\Windows\DataCollection: +There are a number of policies that can be centrally managed to control Windows Analytics device configuration. All of these policies have *preference* registry key equivalents that can be set by using the deployment script. Policy settings override preference settings if both are set. + +>[!NOTE] +>You can only set the diagnostic data level to Enhanced by using policy. For example, this is necessary for using Device Health. + +These policies are under Microsoft\Windows\DataCollection: | Policy | Value | |-----------------------|------------------| | CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | | AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | | LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| -| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8 | +| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8. | You can set these values by using Group Policy (in Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds) or by using Mobile Device Management (in Provider/ProviderID/CommercialID). For more information about deployment using MDM, see the [DMClient CSP](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp) topic in MDM documentation. -There are corresponding registry values that available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection**; these by the deployment script. If a given setting is configured by both registry settings and policy, the policy values will override. The **IEDataOptIn** setting is an exception--you can only set this in the registry: +The corresponding preference registry values are available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection** and can be configured by the deployment script. If a given setting is configured by both preference registry settings and policy, the policy values will override. However, the **IEDataOptIn** setting is different--you can only set this with the preference registry keys: - IEOptInLevel = 0 Internet Explorer data collection is disabled - IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones @@ -164,8 +150,4 @@ For more information about Internet Explorer Security Zones, see [About URL Secu ### Distribution at scale without using the deployment script -We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. To accelerate this, you can force devices to send the initial data by using the following commands. For more information about how to check for error conditions, refer to the code in the deployment script in this topic. Note: these commands need to be run from a system context (an elevated user context won't work): - -- `CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun ent` -- (On Windows 10 devices) `windir\system32\devicecensus.exe` -- (On devices running systems older then Windows 10) `CompatTelRunner.exe -m:generaltel.dll -f:DoCensusRun` \ No newline at end of file +We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. \ No newline at end of file diff --git a/windows/deployment/upgrade/upgrade-readiness-additional-insights.md b/windows/deployment/upgrade/upgrade-readiness-additional-insights.md index 858aed34fc..5594afcec8 100644 --- a/windows/deployment/upgrade/upgrade-readiness-additional-insights.md +++ b/windows/deployment/upgrade/upgrade-readiness-additional-insights.md @@ -20,36 +20,7 @@ The site discovery feature in Upgrade Readiness provides an inventory of web sit > [!NOTE] > Site discovery data is disabled by default; you can find documentation on what is collected in the [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965). After you turn on this feature, data is collected on all sites visited by Internet Explorer, except during InPrivate sessions. The data collection process is silent, without notification to the employee. You are responsible for ensuring that your use of this feature complies with all applicable local laws and regulatory requirements, including any requirements to provide notice to employees. -### Install prerequisite security update for Internet Explorer - -Ensure the following prerequisites are met before using site discovery: - -1. Install the prerequisite KBs to add Site Discovery support and the latest fixes from the [Microsoft Update Catalog](http://www.catalog.update.microsoft.com/home.aspx). Install the following: - - For Windows 7 and Windows 8.1 - March, 2017 (or later) Security Monthly Rollup - - For Windows 10 - Cumulative Update for Windows 10 Version 1607 (KB4015217) (or later) -2. Enable Internet Explorer data collection, which is disabled by default. The best way to enable it is to modify the [Upgrade Readiness deployment script](upgrade-readiness-deployment-script.md) to allow Internet Explorer data collection before you run it. In addition, to enable Site Discovery on Windows 10 you must set computers to the **Enhanced** diagnostic data level for the Feedback and Diagnostics setting (Privacy > Feedback & Diagnostics settings), and enable **Page Prediction within Internet Explorer 11**. - - If you do not plan to use the Upgrade Readiness deployment script to enable Site discovery, you must create the following registry entry. - - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection - - Entry name: IEDataOptIn - - Data type: DWORD - - Values: - - > *IEOptInLevel = 0 Internet Explorer data collection is disabled* - > - > *IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones* - > - > *IEOptInLevel = 2 Data collection is enabled for sites in the Internet + Restricted sites zones* - > - > *IEOptInLevel = 3 Data collection is enabled for all sites* - - For more information about Internet Explorer Security Zones, see [About URL Security Zones](https://msdn.microsoft.com/library/ms537183.aspx). - - ![Create the IEDataOptIn registry key](../images/upgrade-analytics-create-iedataoptin.png) +[In order to use site discovery, a separate opt-in is required; see Enrolling] ### Review most active sites diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index ebfdbf06e8..c7fa20adf6 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -56,25 +56,7 @@ If you are not using OMS: Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started.md). -### Connection settings -The settings that are used to enable client computers to connect to Windows diagnostic data depend on the type of connection scenario you use. These scenarios are discussed in [this blog post](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) and are summarized below. - -| **Connection scenario** | **ClientProxy setting**
in **runconfig.bat** | **Local computer configuration** | -|---------------------------------------------------------|-----------|-----------| -| Direct connection to the Internet (no proxy) | **ClientProxy=Direct** | No additional configuration necessary | -| WinHTTP proxy | **ClientProxy=System** | Specify `netsh winhttp set proxy :` on client computers | -| Other proxy | **ClientProxy=User** | Configure the Windows Registry value:

**HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection\DisableEnterpriseAuthProxy**

to 0 on client computers | - -### Automate data collection - -To ensure that user computers are receiving the most up to date data from Microsoft, we recommend that you establish the following data sharing and analysis processes. - -- Enable automatic updates for the compatibility update and related updates. These updates are updated frequently to include the latest application and driver issue information as we discover it during testing. -- Schedule the Upgrade Readiness deployment script to automatically run so that you don’t have to manually initiate an inventory scan each time the compatibility updates are updated. -- Schedule monthly user computer scans to view monthly active computer and usage information. - ->When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the deltas is created when the update package is installed. For Windows 10 devices, it's already part of the OS. A full scan averages about 2 MB, but the delta scans are very small. The scheduled task is named **Windows Compatibility Appraiser** and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Deltas are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. ## Use Upgrade Readiness to manage Windows Upgrades From 930fbd9dffe88c552cf0bec5c5b1fae527492f78 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 16 Mar 2018 17:07:09 -0700 Subject: [PATCH 31/32] fixing cross link in UR upgrade overview --- .../deployment/upgrade/upgrade-readiness-upgrade-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index acdb75166c..21c4aa84c2 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -33,7 +33,7 @@ The following color-coded status changes are reflected on the upgrade overview b - If the current value is an older OS version than the recommended value, but not deprecated, the version is displayed in amber. - If the current value is a deprecated OS version, the version is displayed in red. -Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](windows-analytics-get-started.md#deploy-the-compatibility-update-and-related-updates) for information on required updates. +Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](../update/windows-analytics-get-started.md) for information on required updates. In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require an update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: From 210cde603bb72dbe3767e9da5966a74945a3af3a Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 16 Mar 2018 17:25:42 -0700 Subject: [PATCH 32/32] some more link fixes --- windows/deployment/update/update-compliance-get-started.md | 2 +- .../deployment/upgrade/upgrade-readiness-upgrade-overview.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 504a1f501e..d5059b3973 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -17,7 +17,7 @@ This topic explains the steps necessary to configure your environment for Window Steps are provided in sections that follow the recommended setup process: 1. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. -2. [Enroll devices in Windows Analytics](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +2. [Enroll devices in Windows Analytics](#enroll-devices-in-windows-analytics) to your organization’s devices. 3. [Use Update Compliance to monitor Windows Updates](#use-update-compliance-to-monitor-windows-updates) once your devices are enrolled. diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index 21c4aa84c2..d33af45a70 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -33,7 +33,7 @@ The following color-coded status changes are reflected on the upgrade overview b - If the current value is an older OS version than the recommended value, but not deprecated, the version is displayed in amber. - If the current value is a deprecated OS version, the version is displayed in red. -Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](../update/windows-analytics-get-started.md) for information on required updates. +Click a row to drill down and see details about individual computers. If updates are missing, see [Enrolling devices in Windows Analytics](../update/windows-analytics-get-started.md) for information on required updates. In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require an update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: